Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/cd76c8cff4c3a7c5d14bb88ee6da611f9bd4d3a8.roa
File:                     cd76c8cff4c3a7c5d14bb88ee6da611f9bd4d3a8.roa (raw, json)
Hash identifier:          sdKTYQNr4ZxCpPTx5OKSVbIUm5GSJP9Adcu/OvqrWeU=
Subject key identifier:   61:AA:6E:BD:0B:C2:2A:6A:F2:AB:06:89:08:39:2B:75:FD:20:A9:E2
Certificate issuer:       /CN=652b18729db050982b6f745b4c791475c88ba009
Certificate serial:       1EDC02
Authority key identifier: 0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/cd76c8cff4c3a7c5d14bb88ee6da611f9bd4d3a8.roa
Signing time:             Fri 14 Apr 2023 08:30:03 +0000
ROA not before:           Thu 13 Apr 2023 08:30:03 +0000
ROA not after:            Sat 12 Apr 2025 08:30:03 +0000
asID:                     267857
IP address blocks:        170.79.88.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2022402 (0x1edc02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652b18729db050982b6f745b4c791475c88ba009
        Validity
            Not Before: Apr 13 08:30:03 2023 GMT
            Not After : Apr 12 08:30:03 2025 GMT
        Subject: CN=cd76c8cff4c3a7c5d14bb88ee6da611f9bd4d3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:71:44:00:27:aa:65:e9:a9:66:3c:30:05:3f:
                    46:1a:de:4e:3c:c1:bd:0f:ea:ba:a6:37:be:bc:d6:
                    67:72:5e:27:79:a8:f5:ae:4a:1a:8d:0a:d2:e2:dd:
                    f3:ce:5e:f4:3e:9e:a4:1c:5a:00:40:2f:ba:2f:46:
                    9e:9e:f1:92:1e:cb:6c:9f:eb:34:27:d6:93:bd:b0:
                    9f:9c:ba:f3:09:ce:f8:0b:ca:a2:22:75:f9:0a:8f:
                    d0:00:a9:61:5b:eb:41:fb:ff:03:e9:65:bf:42:a3:
                    76:56:e7:96:5e:f3:d8:f0:b2:78:52:e2:e5:b6:4c:
                    7d:34:63:d0:dc:c9:c4:48:3b:2a:78:e7:0a:aa:be:
                    69:66:bc:81:a1:0b:ad:c1:32:d8:e2:ff:1d:13:3d:
                    3b:79:85:0e:b7:3c:6b:66:11:e0:dd:a0:a8:86:ba:
                    e4:1d:f4:d2:71:c4:18:20:ec:ec:61:0c:45:f0:10:
                    70:bd:d9:3d:09:9c:04:a0:a9:d2:a1:e4:fb:c8:57:
                    9b:8b:73:38:47:f3:34:70:0f:16:02:8c:40:59:b1:
                    07:86:7f:a1:23:bf:7a:d5:7e:c3:55:84:50:4c:59:
                    95:fd:23:79:8d:d9:63:f4:57:c0:19:dd:a9:62:6b:
                    a7:ff:a4:97:1f:e5:15:e5:aa:15:f7:76:c1:39:ba:
                    57:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AA:6E:BD:0B:C2:2A:6A:F2:AB:06:89:08:39:2B:75:FD:20:A9:E2
            X509v3 Authority Key Identifier:
                keyid:0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/cd76c8cff4c3a7c5d14bb88ee6da611f9bd4d3a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/652b18729db050982b6f745b4c791475c88ba009.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:9a:83:67:be:eb:c7:d4:d2:7e:88:02:28:3e:8a:4c:06:44:
         27:19:e0:30:97:49:ab:59:03:78:1b:81:fc:15:c9:c1:46:92:
         73:5a:ce:39:c2:7e:ba:56:48:12:82:72:78:b7:6f:d9:35:9b:
         a9:ab:41:b0:82:80:0d:d0:0a:40:7d:f9:47:6b:34:21:86:8f:
         de:b7:b9:93:1e:44:70:6a:96:62:57:81:10:d2:a8:7c:c1:1e:
         4c:54:40:f3:21:e1:cb:af:7a:8c:e2:81:da:8f:12:38:9f:fd:
         a2:03:23:75:4f:93:83:5c:43:8a:c6:6e:cf:27:e1:5e:b1:79:
         27:fd:1a:16:a8:57:b9:ff:60:78:44:97:cc:09:82:f6:9d:b9:
         38:3e:5b:15:ba:41:2f:5e:dd:85:d4:9b:5c:7c:41:b5:25:29:
         40:bd:a8:dc:4c:66:c9:12:ef:39:0d:cd:0e:7f:a7:59:fc:95:
         f7:99:51:a8:52:62:80:4d:7e:a1:e0:b2:b1:31:b6:1d:e7:2b:
         c4:bb:55:2a:7c:e6:ba:fa:f4:50:76:63:8b:e2:7d:94:43:d5:
         eb:28:f5:d3:5a:bd:55:c5:9c:b3:38:57:1a:ca:4c:b2:d2:f1:
         0b:c8:9e:f5:b7:b3:11:dd:46:a4:e6:28:69:cd:14:6d:48:54:
         e5:90:d2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 23:30:25 2023 by rpki-client on console-ams.rpki-client.org