Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/fa4f8a9dc803bf92d69fe86118d01310085cc0ab.roa
File:                     fa4f8a9dc803bf92d69fe86118d01310085cc0ab.roa (raw, json)
Hash identifier:          LCd236l+hyfCOR1ZhYfHpRcH7bvcWhGdUedbA8rh1BE=
Subject key identifier:   20:C0:98:97:70:2B:AB:45:88:A3:2F:25:46:B9:85:2A:68:31:92:B9
Certificate issuer:       /CN=652b18729db050982b6f745b4c791475c88ba009
Certificate serial:       2413C8
Authority key identifier: 0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/fa4f8a9dc803bf92d69fe86118d01310085cc0ab.roa
Signing time:             Tue 31 Oct 2023 00:06:04 +0000
ROA not before:           Tue 31 Oct 2023 00:06:03 +0000
ROA not after:            Fri 31 Oct 2025 00:06:03 +0000
asID:                     267857
IP address blocks:        170.79.88.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2364360 (0x2413c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652b18729db050982b6f745b4c791475c88ba009
        Validity
            Not Before: Oct 31 00:06:03 2023 GMT
            Not After : Oct 31 00:06:03 2025 GMT
        Subject: CN=fa4f8a9dc803bf92d69fe86118d01310085cc0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:ae:19:cb:18:e6:50:02:c8:6b:a6:b7:9a:
                    39:b4:68:e7:4b:f2:b0:da:b1:95:a3:46:2d:fb:bc:
                    d4:10:bf:94:63:26:09:1d:1b:a4:8d:7d:ec:b5:4a:
                    3f:65:41:d9:3e:25:9b:a8:d4:52:fb:8d:ff:47:f9:
                    56:f6:64:50:93:b5:e3:a7:c0:0c:bd:aa:05:1d:4d:
                    6f:fa:64:f2:49:90:7f:99:a3:b7:be:a9:8a:ac:48:
                    0c:23:fc:3e:30:3a:2b:f9:5a:b9:a1:1e:42:a3:6b:
                    1e:80:59:18:b4:f7:91:87:cc:91:1b:6f:84:9a:c1:
                    45:93:47:2c:d8:4d:c2:f8:71:8c:59:f8:a8:d0:a1:
                    4b:3d:ef:dc:fc:78:ab:dd:49:94:6c:6a:90:6b:2f:
                    8c:13:dc:b3:b6:78:4b:97:fe:d6:81:71:ea:54:15:
                    26:bc:f8:f7:0c:0a:62:7f:60:48:8c:e1:ae:79:44:
                    86:51:00:13:7a:98:a9:fc:8c:3a:54:f3:95:51:1f:
                    1a:39:b1:7f:12:a8:c4:39:61:bd:41:2a:9a:97:e7:
                    04:0f:46:37:0c:3d:df:6a:17:13:06:d7:3b:07:63:
                    89:8e:5d:e2:33:11:ec:f9:a8:48:d1:aa:d1:b8:62:
                    f6:34:43:f5:c0:73:57:91:8b:07:a8:69:bf:4c:f9:
                    85:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C0:98:97:70:2B:AB:45:88:A3:2F:25:46:B9:85:2A:68:31:92:B9
            X509v3 Authority Key Identifier:
                keyid:0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/fa4f8a9dc803bf92d69fe86118d01310085cc0ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/652b18729db050982b6f745b4c791475c88ba009.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:87:7f:26:a2:7d:68:09:0f:ad:cc:72:d3:02:52:2b:54:7b:
         58:a9:9f:ee:dc:f4:ea:11:ae:05:c4:7a:54:c8:4d:3b:47:08:
         3e:a6:d3:4c:59:db:67:e5:cc:8b:e9:7b:71:83:ef:63:cc:70:
         dd:f9:78:f5:b1:28:41:5b:25:35:17:eb:00:44:62:3f:37:a6:
         66:1f:19:a9:99:75:92:cc:d4:3f:2e:d3:66:1c:87:87:b1:49:
         62:0e:b3:58:b5:87:40:d0:b7:00:01:53:90:57:91:d6:56:64:
         2f:8c:9e:75:60:e3:25:5e:06:30:b2:62:22:05:9d:de:4d:3e:
         69:08:0f:1f:b8:94:eb:f2:08:4e:f0:73:e2:4f:1f:16:8a:58:
         10:a7:77:8e:0a:4f:c3:7e:a7:dc:bf:a4:ad:9b:18:27:a5:27:
         e2:8c:06:cb:81:a7:82:81:b0:5c:8c:73:74:cc:5e:9c:45:11:
         93:18:04:d2:9f:2c:5a:d8:2c:95:d5:cd:58:d6:be:db:83:28:
         18:28:a2:bc:d8:d9:9a:96:3b:84:0d:88:86:23:e5:b6:da:70:
         83:29:96:8e:42:b7:da:7e:6a:dd:a3:a1:b2:77:da:97:d6:0e:
         b7:3d:18:35:e7:8a:8e:52:9a:ba:4e:ad:03:10:86:bc:cb:a2:
         75:3f:7c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----