Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/ee74106e36f9991c0e7bc5a47b2fa58e44330bbd.roa
File:                     ee74106e36f9991c0e7bc5a47b2fa58e44330bbd.roa (raw, json)
Hash identifier:          tyEajZanpD6S9dh0WPIUbXLCWX3YZEErjFqiocRelHo=
Subject key identifier:   F2:6D:E4:40:E4:63:83:08:A4:EC:49:AE:E5:F9:C0:1E:70:A0:F4:90
Certificate issuer:       /CN=652b18729db050982b6f745b4c791475c88ba009
Certificate serial:       16F1E7
Authority key identifier: 0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/ee74106e36f9991c0e7bc5a47b2fa58e44330bbd.roa
Signing time:             Sun 15 May 2022 16:53:33 +0000
ROA not before:           Sun 15 May 2022 03:00:00 +0000
ROA not after:            Wed 15 May 2024 03:00:00 +0000
asID:                     262186
IP address blocks:        170.79.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1503719 (0x16f1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652b18729db050982b6f745b4c791475c88ba009
        Validity
            Not Before: May 15 03:00:00 2022 GMT
            Not After : May 15 03:00:00 2024 GMT
        Subject: CN=ee74106e36f9991c0e7bc5a47b2fa58e44330bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:d4:99:19:3e:af:8b:71:dc:70:57:52:7d:
                    8e:24:1d:e1:fe:07:09:ac:ba:1e:3c:03:d7:26:f4:
                    df:0f:a2:84:9b:c8:44:3b:60:ef:22:1e:58:ab:2b:
                    24:02:1f:5c:55:9d:ad:65:e3:98:34:61:2c:c6:e0:
                    06:5e:bd:49:7e:6c:81:ee:05:7e:4a:86:12:1b:c5:
                    7d:46:34:87:14:cb:10:12:cb:a1:3e:d3:47:9a:1b:
                    8d:53:45:01:95:78:d6:08:9f:db:0d:6b:4b:dd:6f:
                    09:2a:43:f4:78:c5:ec:f9:84:81:33:3d:1c:de:b1:
                    4c:c6:b3:e2:36:0a:e3:33:e3:bd:b8:23:34:3c:2c:
                    f3:73:71:87:31:7f:80:fe:b1:6e:9e:cb:59:65:f0:
                    ba:2a:f2:fb:de:90:95:3e:a9:c3:34:fb:e1:ae:a4:
                    fd:96:3d:d5:a6:22:8a:68:6f:24:25:e9:a5:4b:22:
                    e4:9f:ae:03:1f:86:77:6b:74:11:47:d1:78:e8:47:
                    1b:79:f2:46:9d:97:9d:bf:3b:cb:20:27:ac:72:0c:
                    82:38:db:dd:33:7c:41:03:b2:95:e7:af:d4:50:33:
                    15:b7:4e:0c:f4:57:35:9c:7e:f9:66:e1:77:d0:10:
                    02:ce:d2:e4:ca:26:07:c8:38:e2:f7:63:8f:43:81:
                    f6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6D:E4:40:E4:63:83:08:A4:EC:49:AE:E5:F9:C0:1E:70:A0:F4:90
            X509v3 Authority Key Identifier:
                keyid:0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/ee74106e36f9991c0e7bc5a47b2fa58e44330bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/652b18729db050982b6f745b4c791475c88ba009.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:37:f6:51:a2:a3:7f:59:43:ee:b1:4c:08:71:27:ed:9d:b8:
         94:98:93:8b:cd:f5:80:fb:df:ca:d2:a7:b2:09:81:3a:2f:2b:
         0b:bf:da:6d:a3:91:63:e9:ab:5d:d5:f5:e5:95:24:b7:d9:61:
         a0:2c:97:7e:d0:e2:e6:9d:98:4c:24:45:e9:3e:39:94:72:5b:
         1c:59:c3:be:97:9e:84:a8:a4:1c:40:35:4a:98:34:17:0b:e3:
         2f:b2:59:e8:46:ad:40:2c:5b:4b:a9:53:db:4c:6c:82:85:c9:
         f6:b2:3e:8e:43:8e:82:32:59:f2:bd:65:56:4a:06:ba:43:9a:
         e4:f8:e9:6f:b7:1d:46:b1:36:5e:d7:8d:9e:b1:db:83:c7:e7:
         e3:be:30:3e:43:c8:e2:d7:45:c8:0d:6a:70:6a:03:59:03:f9:
         74:72:d4:85:3b:b2:20:49:d6:1a:c4:6d:a9:c6:8a:28:0e:a2:
         8a:a8:61:fd:c5:a0:6e:45:c7:26:06:ed:35:82:56:39:13:c2:
         27:48:ea:25:37:c2:d1:86:bd:ae:1d:b1:95:a6:12:e5:c4:46:
         8a:a4:22:67:d1:cc:03:c4:78:c9:3d:ca:01:1a:c4:73:1e:1a:
         e9:72:28:15:e7:f5:b7:fb:07:b1:44:b3:07:eb:3d:74:1f:d8:
         4d:c3:9a:ba
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFvHnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY1
MmIxODcyOWRiMDUwOTgyYjZmNzQ1YjRjNzkxNDc1Yzg4YmEwMDkwHhcNMjIwNTE1
MDMwMDAwWhcNMjQwNTE1MDMwMDAwWjAzMTEwLwYDVQQDEyhlZTc0MTA2ZTM2Zjk5
OTFjMGU3YmM1YTQ3YjJmYTU4ZTQ0MzMwYmJkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmkfUmRk+r4tx3HBXUn2OJB3h/gcJrLoePAPXJvTfD6KEm8hE
O2DvIh5YqyskAh9cVZ2tZeOYNGEsxuAGXr1JfmyB7gV+SoYSG8V9RjSHFMsQEsuh
PtNHmhuNU0UBlXjWCJ/bDWtL3W8JKkP0eMXs+YSBMz0c3rFMxrPiNgrjM+O9uCM0
PCzzc3GHMX+A/rFunstZZfC6KvL73pCVPqnDNPvhrqT9lj3VpiKKaG8kJemlSyLk
n64DH4Z3a3QRR9F46EcbefJGnZedvzvLICescgyCONvdM3xBA7KV56/UUDMVt04M
9Fc1nH75ZuF30BACztLkyiYHyDji92OPQ4H2LQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPJt5EDkY4MIpOxJruX5wB5woPSQMB8GA1UdIwQYMBaAFA8lbcDHwvmKUQRW
oRM5iAG6Tp1RMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjUyYjE4
NzI5ZGIwNTA5ODJiNmY3NDViNGM3OTE0NzVjODhiYTAwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGM4OThlZmYtNzg4My00YjIzLTkyNDMtYzJkNzJl
NjNiNGVlL2VlNzQxMDZlMzZmOTk5MWMwZTdiYzVhNDdiMmZhNThlNDQzMzBiYmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80Yzg5OGVmZi03ODgzLTRiMjMtOTI0My1jMmQ3
MmU2M2I0ZWUvNjUyYjE4NzI5ZGIwNTA5ODJiNmY3NDViNGM3OTE0NzVjODhiYTAw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKpPWDANBgkqhkiG9w0BAQsFAAOCAQEAUDf2UaKjf1lD7rFM
CHEn7Z24lJiTi831gPvfytKnsgmBOi8rC7/abaORY+mrXdX15ZUkt9lhoCyXftDi
5p2YTCRF6T45lHJbHFnDvpeehKikHEA1Spg0FwvjL7JZ6EatQCxbS6lT20xsgoXJ
9rI+jkOOgjJZ8r1lVkoGukOa5Pjpb7cdRrE2XteNnrHbg8fn474wPkPI4tdFyA1q
cGoDWQP5dHLUhTuyIEnWGsRtqcaKKA6iiqhh/cWgbkXHJgbtNYJWORPCJ0jqJTfC
0Ya9rh2xlaYS5cRGiqQiZ9HMA8R4yT3KARrEcx4a6XIoFef1t/sHsUSzB+s9dB/Y
TcOaug==
-----END CERTIFICATE-----
Generated at Tue Sep 26 23:33:08 2023 by rpki-client on console-fra.rpki-client.org