Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/471cfff9-e927-4cde-9a40-0b974219d425/7326a488a8155e24d83bd1b4540ce3e7db814b22.roa
File:                     7326a488a8155e24d83bd1b4540ce3e7db814b22.roa (raw, json)
Hash identifier:          8Qfs3vM1AMiW7+71k6hfReDRUB1IxYTjZa8Af8tiwj8=
Subject key identifier:   25:19:0D:41:7D:66:B6:98:C6:07:D9:31:9B:F0:2E:C9:82:C6:F0:E8
Certificate issuer:       /CN=141d26efc804cf968706456af6b6adc1a1fe5f14
Certificate serial:       0C940D
Authority key identifier: 02:02:98:9A:1D:C6:78:38:1E:3A:D0:19:69:3B:B6:BF:46:D8:A9:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/141d26efc804cf968706456af6b6adc1a1fe5f14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/471cfff9-e927-4cde-9a40-0b974219d425/7326a488a8155e24d83bd1b4540ce3e7db814b22.roa
Signing time:             Wed 24 Mar 2021 22:51:38 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     266878
IP address blocks:        45.160.72.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824333 (0xc940d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141d26efc804cf968706456af6b6adc1a1fe5f14
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=7326a488a8155e24d83bd1b4540ce3e7db814b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:a5:19:1c:15:c0:af:11:36:1f:4a:b6:f9:
                    65:12:88:32:92:2a:ef:27:1e:ca:a0:ba:72:be:ce:
                    65:d7:59:90:a0:26:7d:ab:af:92:09:06:5f:4a:d8:
                    39:cc:33:fd:1f:2e:b1:89:1e:f3:c6:bc:ec:e5:b7:
                    d9:0a:b1:93:ab:4e:f9:c4:e7:d1:51:c3:4f:bc:98:
                    4c:bb:ff:df:47:4a:b8:12:7b:ea:11:72:6f:2e:09:
                    bb:3e:12:40:76:98:a1:e6:f8:c7:82:31:8b:a6:48:
                    05:f7:0d:a5:39:28:1e:cc:f3:d0:96:eb:6e:49:91:
                    c7:c6:78:91:35:49:15:21:82:21:72:77:11:ba:7a:
                    0f:4d:17:a2:f2:1e:b6:c5:11:65:da:b9:6c:c6:24:
                    b0:b7:8c:65:d9:47:98:82:92:79:44:0d:8c:8b:8f:
                    bb:80:1c:a8:d1:ae:b0:25:2d:99:64:27:90:56:a3:
                    75:1a:31:85:74:e7:d9:a9:d5:ea:3c:1a:ad:4c:27:
                    b7:22:66:93:e3:f7:1c:2b:08:09:79:d1:d8:45:bc:
                    12:78:5f:9e:43:0c:7e:d1:2f:34:d3:c9:36:89:3d:
                    4d:be:e0:bb:f2:7b:da:91:df:29:a0:6e:f0:55:fb:
                    a2:3f:5c:c2:cc:ec:7c:80:49:75:bb:c5:11:8a:fb:
                    39:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:19:0D:41:7D:66:B6:98:C6:07:D9:31:9B:F0:2E:C9:82:C6:F0:E8
            X509v3 Authority Key Identifier:
                keyid:02:02:98:9A:1D:C6:78:38:1E:3A:D0:19:69:3B:B6:BF:46:D8:A9:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/141d26efc804cf968706456af6b6adc1a1fe5f14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/471cfff9-e927-4cde-9a40-0b974219d425/7326a488a8155e24d83bd1b4540ce3e7db814b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/471cfff9-e927-4cde-9a40-0b974219d425/141d26efc804cf968706456af6b6adc1a1fe5f14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:29:5f:be:90:42:85:3e:f7:47:72:9a:08:e0:42:7e:9e:d0:
         88:e5:c6:e7:56:20:8a:06:aa:7a:16:02:ee:ee:96:05:46:47:
         c2:4f:60:fd:7b:f7:84:b2:7e:74:b5:ca:48:49:8c:96:e8:6e:
         7d:dd:79:03:c2:dd:61:c4:42:9e:52:8d:eb:6b:96:cb:07:85:
         d5:22:49:62:37:91:b1:10:87:83:d2:4d:17:10:25:28:85:7d:
         c6:dd:32:37:98:80:6b:84:88:61:4c:33:68:2d:ba:74:ac:8c:
         5d:59:a3:37:53:0a:b2:de:ca:41:7d:de:92:2c:a0:f4:9a:43:
         2f:89:13:8a:a1:02:18:8c:62:bb:e3:1e:d8:42:78:9e:84:ab:
         6e:c9:88:97:5e:f4:81:43:bc:7a:f9:5a:50:6f:ee:f6:41:3d:
         30:d0:bf:4c:6d:32:09:0d:95:2a:8a:35:75:39:3f:a6:67:3f:
         fc:ef:2d:2d:75:58:97:f9:8d:b4:d6:a3:da:4c:a3:89:6a:d8:
         61:d3:7d:f7:a9:db:82:2f:6b:ab:70:dc:84:ff:56:5c:52:fe:
         06:b4:66:54:d6:c6:e6:52:2b:8b:83:6b:19:36:64:56:27:d9:
         e2:9f:d9:5c:c0:6a:ba:c7:61:77:5c:64:1f:07:d8:5d:fc:80:
         12:d7:d1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-ams.rpki-client.org