Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/aec8ce3f5d4471e3bac643c5ce04f49537f5cd50.roa
File:                     aec8ce3f5d4471e3bac643c5ce04f49537f5cd50.roa (raw, json)
Hash identifier:          3qodvJKWpndbBksZBZAP01mrJ1WvqNDUotWR306QibQ=
Subject key identifier:   61:C7:9A:8B:15:90:93:0A:9E:FE:B3:44:E8:CB:D4:68:74:51:C9:6A
Certificate issuer:       /CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
Certificate serial:       06DE4C
Authority key identifier: 9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/aec8ce3f5d4471e3bac643c5ce04f49537f5cd50.roa
Signing time:             Wed 24 Mar 2021 14:41:41 +0000
ROA not before:           Wed 24 Mar 2021 14:41:38 +0000
ROA not after:            Tue 24 Mar 2026 14:41:38 +0000
asID:                     264637
IP address blocks:        170.80.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450124 (0x6de4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
        Validity
            Not Before: Mar 24 14:41:38 2021 GMT
            Not After : Mar 24 14:41:38 2026 GMT
        Subject: CN=aec8ce3f5d4471e3bac643c5ce04f49537f5cd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:a6:d2:f9:18:4f:4b:aa:2d:08:a4:cb:f3:
                    3c:66:fa:ce:a4:fc:31:46:62:10:49:c4:cf:51:59:
                    b5:a7:b9:a7:75:80:11:28:5e:fa:6b:a6:f9:e6:f3:
                    f8:3b:e5:33:e1:33:dc:b4:33:22:9d:21:cd:14:ae:
                    e9:ff:74:f5:70:91:23:26:53:d9:55:f4:f6:b1:09:
                    33:49:d7:3a:fc:4e:9c:fd:96:1e:75:1e:a6:dd:44:
                    fd:8f:63:da:18:94:2e:3a:ef:5c:12:c5:55:93:c7:
                    e2:4a:84:22:51:ba:bb:76:2e:ea:2f:bb:e9:3d:1a:
                    fe:bc:56:81:20:47:f3:05:a1:50:88:99:34:32:b0:
                    16:1a:53:1e:5d:57:c4:03:d5:eb:8d:65:c0:9b:28:
                    a7:b7:f9:e0:8d:be:0c:fd:e7:8e:b1:b1:8c:17:65:
                    ec:e7:43:84:94:fb:fe:f2:7d:29:95:b8:40:09:ac:
                    aa:c4:c6:3c:d8:e5:e3:97:0a:72:cc:83:1a:60:3d:
                    ed:29:59:bd:c1:20:8a:55:bf:f7:cc:a2:90:52:5b:
                    66:da:1f:11:06:58:52:9c:a2:5f:c6:63:b4:da:2b:
                    61:cd:22:bd:41:8c:08:a2:ae:e9:09:55:90:38:63:
                    c6:56:0a:eb:ce:df:35:fb:b8:fb:38:01:7f:8d:27:
                    d9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C7:9A:8B:15:90:93:0A:9E:FE:B3:44:E8:CB:D4:68:74:51:C9:6A
            X509v3 Authority Key Identifier:
                keyid:9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/aec8ce3f5d4471e3bac643c5ce04f49537f5cd50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/b4cd293c91ec205157dbfa9b56d9881f8f695255.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:f7:10:d6:53:e5:ad:b4:b6:16:1e:95:62:58:db:62:85:19:
         03:07:20:be:1e:6c:5a:68:b1:b4:a7:09:e2:8e:e2:d7:ce:53:
         df:df:2e:93:40:50:95:8d:5b:a0:10:50:33:26:df:35:3e:a3:
         6c:06:73:ab:38:d3:05:98:c3:63:f8:34:78:f8:4a:a0:d2:c7:
         05:b2:d8:89:86:94:3d:58:95:cf:8a:89:c1:dd:5e:b2:30:46:
         07:6f:3c:08:ff:00:56:f4:5c:8e:e0:df:87:1c:9c:93:90:43:
         29:3f:e3:a3:5e:cf:27:c7:01:0e:d1:2c:7a:fc:42:bb:a9:98:
         18:c6:30:78:58:ff:50:76:db:37:64:80:11:7e:77:a2:da:05:
         94:c8:e7:ed:00:78:73:2a:2a:2d:d9:1a:1b:08:34:41:bd:ec:
         5e:0d:11:ad:cd:12:0f:2f:42:df:7d:c7:a4:25:95:ec:52:92:
         3a:38:5d:58:94:b1:d5:05:7e:f5:de:71:1d:e3:03:08:4a:5e:
         9e:ae:da:a0:a7:84:57:3b:01:15:6c:50:59:39:ad:47:c9:95:
         2f:e8:6d:2b:a4:72:0c:e0:36:09:09:94:cb:9c:4f:3c:89:24:
         e3:25:a8:01:43:6c:e2:2f:af:36:3c:34:96:73:71:c0:4a:87:
         ee:fd:9c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 01:40:47 2023 by rpki-client on console-ams.rpki-client.org