Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4f1c3825-3c13-428b-ae48-9b5bd3124731/7cd45926b3953dd499e917bf465e166c3629f396.roa
File:                     7cd45926b3953dd499e917bf465e166c3629f396.roa (raw, json)
Hash identifier:          Xi81aIsuc9DXC8VwBLGDcyw086h8ggeZee8QWM44wq4=
Subject key identifier:   C7:C8:93:BC:99:40:60:DB:9D:62:61:DD:41:36:EB:B1:FC:9E:50:20
Certificate issuer:       /CN=a05ae00c04ca47c24a21d30b0dd9eeac75d31f58
Certificate serial:       04F6A2
Authority key identifier: 13:B4:B0:35:1C:F2:60:E5:CF:98:AC:BF:77:5D:04:A3:D5:8B:98:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4f1c3825-3c13-428b-ae48-9b5bd3124731/7cd45926b3953dd499e917bf465e166c3629f396.roa
Signing time:             Wed 24 Mar 2021 14:29:09 +0000
ROA not before:           Wed 24 Mar 2021 14:29:09 +0000
ROA not after:            Tue 24 Mar 2026 14:29:09 +0000
asID:                     270105
IP address blocks:        177.73.156.0/22 maxlen: 24
                          2801:17a::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325282 (0x4f6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05ae00c04ca47c24a21d30b0dd9eeac75d31f58
        Validity
            Not Before: Mar 24 14:29:09 2021 GMT
            Not After : Mar 24 14:29:09 2026 GMT
        Subject: CN=7cd45926b3953dd499e917bf465e166c3629f396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:33:44:76:38:07:45:dc:05:f7:fd:a0:71:cf:
                    89:d2:8f:7b:9d:98:e4:02:ff:48:99:89:69:79:fb:
                    e3:20:de:9e:2d:35:a4:72:ce:1d:ef:57:0b:7c:0b:
                    27:a5:71:74:ad:99:96:d3:d3:d2:ef:e8:a2:f8:46:
                    92:7e:36:32:1b:dd:32:eb:e2:73:50:71:47:45:8c:
                    55:e1:18:5e:ce:77:ab:1f:d1:c8:d2:96:95:5c:4c:
                    58:56:9d:ec:a8:9f:67:bd:e3:13:b8:53:02:a3:a8:
                    3f:cb:ef:22:bc:69:65:ca:51:87:6f:f1:c4:51:ca:
                    27:a6:51:6e:9e:1d:33:f3:1c:a8:13:15:5d:b4:ef:
                    75:23:06:a2:5b:e3:a1:c1:74:05:c3:f2:e2:65:4a:
                    a4:78:74:f9:2e:e8:3f:f9:ab:cc:86:c3:fa:0c:fb:
                    0d:cd:9b:71:55:3a:60:9d:71:1a:d0:7d:ef:50:8f:
                    5e:9c:cc:31:ba:66:06:b3:ab:ef:6a:2f:3f:35:8b:
                    57:dc:98:ad:b6:4b:fd:3c:8c:1b:01:1a:54:31:8e:
                    03:f1:89:20:00:b8:23:f2:c4:1b:b9:44:a8:b6:29:
                    48:7f:3a:ab:89:47:0c:38:53:87:34:3e:6e:28:39:
                    37:41:88:97:c0:2b:d6:d3:f1:1c:92:73:ac:8e:c9:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C8:93:BC:99:40:60:DB:9D:62:61:DD:41:36:EB:B1:FC:9E:50:20
            X509v3 Authority Key Identifier:
                keyid:13:B4:B0:35:1C:F2:60:E5:CF:98:AC:BF:77:5D:04:A3:D5:8B:98:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4f1c3825-3c13-428b-ae48-9b5bd3124731/7cd45926b3953dd499e917bf465e166c3629f396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4f1c3825-3c13-428b-ae48-9b5bd3124731/a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.156.0/22
                IPv6:
                  2801:17a::/44

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:dd:47:50:b6:8e:52:69:e7:7a:97:18:44:da:6d:ee:2d:
         ef:6b:c8:5a:7d:a5:b7:cc:2d:a2:3d:6c:a2:15:a4:69:5a:22:
         24:62:21:7f:37:58:29:2a:1c:57:99:fc:b9:87:f3:6e:97:fb:
         a8:a3:b9:31:cb:d0:4f:c6:11:73:da:d4:89:bd:b1:2d:4c:13:
         78:91:ac:1c:e9:19:94:22:d9:d0:12:4d:ba:ba:8e:68:86:4e:
         51:6f:f8:f9:29:c0:78:75:97:62:4d:54:9c:e6:4b:09:97:03:
         2a:bf:c4:05:5b:89:d8:7c:87:ec:bc:77:72:53:9e:60:68:12:
         20:cc:d8:19:13:7f:c2:fc:c3:39:a5:ca:2f:e8:86:3b:d6:45:
         3d:d8:84:3f:f8:50:4a:f6:8f:aa:d5:f3:82:0c:61:b3:cb:0b:
         f4:63:36:16:a5:47:5e:7c:71:bd:a2:8d:bc:0c:ea:d4:fd:a3:
         e0:b0:30:2b:c9:30:fb:21:a9:1c:c9:88:1e:d9:8f:33:59:d2:
         43:4a:68:70:c0:b7:97:f6:86:d2:bd:58:96:2e:4d:4b:e2:03:
         03:67:51:7b:51:bf:7d:b5:d4:47:ec:47:b9:4f:87:d0:9d:2f:
         a1:aa:e7:e5:6e:e4:bc:7b:9c:19:62:94:5e:ac:af:58:90:18:
         cf:57:5e:ee
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDBPaiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEw
NWFlMDBjMDRjYTQ3YzI0YTIxZDMwYjBkZDllZWFjNzVkMzFmNTgwHhcNMjEwMzI0
MTQyOTA5WhcNMjYwMzI0MTQyOTA5WjAzMTEwLwYDVQQDEyg3Y2Q0NTkyNmIzOTUz
ZGQ0OTllOTE3YmY0NjVlMTY2YzM2MjlmMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkjNEdjgHRdwF9/2gcc+J0o97nZjkAv9ImYlpefvjIN6eLTWk
cs4d71cLfAsnpXF0rZmW09PS7+ii+EaSfjYyG90y6+JzUHFHRYxV4RheznerH9HI
0paVXExYVp3sqJ9nveMTuFMCo6g/y+8ivGllylGHb/HEUconplFunh0z8xyoExVd
tO91IwaiW+OhwXQFw/LiZUqkeHT5Lug/+avMhsP6DPsNzZtxVTpgnXEa0H3vUI9e
nMwxumYGs6vvai8/NYtX3Jittkv9PIwbARpUMY4D8YkgALgj8sQbuUSotilIfzqr
iUcMOFOHND5uKDk3QYiXwCvW0/EcknOsjskfkQIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFMfIk7yZQGDbnWJh3UE267H8nlAgMB8GA1UdIwQYMBaAFBO0sDUc8mDlz5is
v3ddBKPVi5hBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTA1YWUw
MGMwNGNhNDdjMjRhMjFkMzBiMGRkOWVlYWM3NWQzMWY1OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGYxYzM4MjUtM2MxMy00MjhiLWFlNDgtOWI1YmQz
MTI0NzMxLzdjZDQ1OTI2YjM5NTNkZDQ5OWU5MTdiZjQ2NWUxNjZjMzYyOWYzOTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZjFjMzgyNS0zYzEzLTQyOGItYWU0OC05YjVi
ZDMxMjQ3MzEvYTA1YWUwMGMwNGNhNDdjMjRhMjFkMzBiMGRkOWVlYWM3NWQzMWY1
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEArFJnDAPBAIAAjAJAwcEKAEBegAAMA0GCSqGSIb3DQEBCwUA
A4IBAQAx9N1HULaOUmnnepcYRNpt7i3va8hafaW3zC2iPWyiFaRpWiIkYiF/N1gp
KhxXmfy5h/Nul/uoo7kxy9BPxhFz2tSJvbEtTBN4kawc6RmUItnQEk26uo5ohk5R
b/j5KcB4dZdiTVSc5ksJlwMqv8QFW4nYfIfsvHdyU55gaBIgzNgZE3/C/MM5pcov
6IY71kU92IQ/+FBK9o+q1fOCDGGzywv0YzYWpUdefHG9oo28DOrU/aPgsDAryTD7
IakcyYge2Y8zWdJDSmhwwLeX9obSvViWLk1L4gMDZ1F7Ub99tdRH7Ee5T4fQnS+h
quflbuS8e5wZYpRerK9YkBjPV17u
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-ams.rpki-client.org