Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d11bfbd-3789-42db-b50b-dbd7771b7a2f/c5a1c49e8835b2dc4a31733f2d859e87eaec7608.roa
File:                     c5a1c49e8835b2dc4a31733f2d859e87eaec7608.roa (raw, json)
Hash identifier:          9nvLgdZrGhtdrBMbwaobU79WV8GpbiwpX4mHyrKk8QQ=
Subject key identifier:   D1:CB:94:33:7E:F3:0B:D8:C3:1A:A6:E1:F6:5A:3B:58:9D:CB:3B:37
Certificate issuer:       /CN=08208e4e8bb0af74452f35173d828d04b63e2d76
Certificate serial:       160FD9
Authority key identifier: F6:AD:02:26:86:12:DE:12:3F:62:7C:23:DB:92:EE:98:88:C0:C5:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08208e4e8bb0af74452f35173d828d04b63e2d76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d11bfbd-3789-42db-b50b-dbd7771b7a2f/c5a1c49e8835b2dc4a31733f2d859e87eaec7608.roa
Signing time:             Sat 06 Aug 2022 03:30:15 +0000
ROA not before:           Sat 06 Aug 2022 03:29:54 +0000
ROA not after:            Tue 06 Aug 2024 03:29:54 +0000
asID:                     270158
IP address blocks:        45.177.176.0/22 maxlen: 24
                          2806:33f::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1445849 (0x160fd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08208e4e8bb0af74452f35173d828d04b63e2d76
        Validity
            Not Before: Aug  6 03:29:54 2022 GMT
            Not After : Aug  6 03:29:54 2024 GMT
        Subject: CN=c5a1c49e8835b2dc4a31733f2d859e87eaec7608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cd:4c:d8:d5:9e:15:be:35:6a:c0:9a:6e:42:
                    f9:10:09:b9:ef:c1:e5:dc:f5:d8:90:51:9a:26:d5:
                    b1:cd:30:d8:1e:d3:16:95:5e:12:2c:46:c0:2b:31:
                    be:a5:ed:42:2e:ab:5c:c9:c3:76:5c:86:cb:fd:f7:
                    99:21:4a:7f:1d:4f:6a:45:86:72:6a:3c:50:62:68:
                    dd:13:14:df:5d:8e:0c:43:3e:a7:01:ac:a9:b3:8f:
                    b2:33:77:f4:67:f0:78:e7:c1:66:d7:0a:0a:50:4a:
                    94:f2:58:53:83:75:aa:8e:6f:a5:9b:1d:23:b2:d5:
                    ec:f9:22:0b:9d:aa:be:5a:01:39:ec:11:a3:88:1c:
                    c5:05:1a:0a:b2:d4:45:a5:a0:dd:3b:cb:81:2e:0e:
                    bd:33:10:4e:87:c0:7c:ef:0e:8b:08:1a:21:6b:60:
                    e8:45:af:96:5c:e7:d6:f0:a1:6d:d3:3b:22:38:e4:
                    1a:9b:50:43:1a:d6:62:e6:52:c6:ca:49:96:e2:f8:
                    95:61:62:ac:c6:18:3a:dd:ec:cc:52:b8:e7:ed:97:
                    fd:0b:0c:70:40:c7:d5:de:32:51:b1:d0:38:df:f6:
                    68:ce:e2:2e:ac:69:f2:25:2b:21:00:31:fe:6a:e9:
                    2d:09:87:d5:df:ca:12:5b:1e:d1:40:98:6e:73:a5:
                    e3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CB:94:33:7E:F3:0B:D8:C3:1A:A6:E1:F6:5A:3B:58:9D:CB:3B:37
            X509v3 Authority Key Identifier:
                keyid:F6:AD:02:26:86:12:DE:12:3F:62:7C:23:DB:92:EE:98:88:C0:C5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08208e4e8bb0af74452f35173d828d04b63e2d76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d11bfbd-3789-42db-b50b-dbd7771b7a2f/c5a1c49e8835b2dc4a31733f2d859e87eaec7608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d11bfbd-3789-42db-b50b-dbd7771b7a2f/08208e4e8bb0af74452f35173d828d04b63e2d76.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.176.0/22
                IPv6:
                  2806:33f::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:8a:78:f1:fc:16:ce:b6:ba:89:db:d4:17:c7:83:eb:40:de:
         be:a1:62:c1:72:30:b4:b5:bd:c4:39:a5:c3:da:cb:1c:85:c6:
         f7:d5:2a:60:ef:2f:0f:9d:cf:8d:c3:da:7d:85:8c:92:5f:d2:
         24:ce:b8:bb:6f:48:2f:71:45:20:05:68:0d:3c:13:eb:95:9e:
         25:df:43:36:77:5b:b9:8c:2b:85:b0:9d:b1:77:2d:50:fa:a5:
         89:c0:d4:90:29:13:08:7a:26:b5:c9:21:9b:a4:05:74:89:70:
         74:ab:9e:ef:59:0f:53:7f:a3:69:4e:ff:69:0f:bb:a5:20:d3:
         d3:57:25:81:be:c2:0c:86:6e:11:5d:ee:d3:c7:e4:b6:0d:a8:
         52:00:4c:73:43:a6:bb:e4:0f:a9:64:33:42:fa:f5:1f:c5:57:
         cf:b3:5f:4b:97:9c:37:4a:cd:d5:ec:1d:c9:3f:8c:2c:f0:50:
         4a:97:bd:7a:81:13:1b:19:dc:c8:c7:e7:3f:df:ca:65:2b:96:
         7f:4d:87:fc:07:ff:1c:c6:41:2d:6f:23:d8:cb:0f:50:fa:2a:
         8e:21:1b:15:22:f2:e8:b0:32:41:f2:20:51:29:25:db:17:0f:
         14:5a:46:d6:e0:8e:7a:4b:0d:05:39:d6:d5:cb:b3:12:8a:11:
         58:9c:19:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 19:59:18 2023 by rpki-client on console-ams.rpki-client.org