Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/7458fda6d1390dbdc408047e1bb805a4c9e417bb.roa
File:                     7458fda6d1390dbdc408047e1bb805a4c9e417bb.roa (raw, json)
Hash identifier:          ii7V29UQXTzey3UivBWZ5YwSla2iVTQWEaGdqxkGGn4=
Subject key identifier:   F5:57:4F:60:17:7A:EF:A2:FB:75:64:92:A6:5F:8D:5F:C3:65:E4:5D
Certificate issuer:       /CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
Certificate serial:       19562B
Authority key identifier: 5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/7458fda6d1390dbdc408047e1bb805a4c9e417bb.roa
Signing time:             Thu 18 May 2023 16:06:47 +0000
ROA not before:           Wed 17 May 2023 16:06:46 +0000
ROA not after:            Sun 18 May 2025 16:06:46 +0000
asID:                     262589
IP address blocks:        45.162.76.0/22 maxlen: 24
                          45.162.76.0/23 maxlen: 24
                          45.162.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1660459 (0x19562b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
        Validity
            Not Before: May 17 16:06:46 2023 GMT
            Not After : May 18 16:06:46 2025 GMT
        Subject: CN=7458fda6d1390dbdc408047e1bb805a4c9e417bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:38:ec:ba:29:cd:2a:f8:23:cf:8e:5e:39:80:
                    5c:6d:a7:6e:c8:13:e5:7f:b3:f9:f6:68:1c:2d:c8:
                    af:b4:c9:8b:d7:cd:f1:85:78:ab:1a:b8:e4:b9:a3:
                    66:a1:48:0b:27:23:69:6d:e5:aa:70:3b:b7:ba:9a:
                    ed:8e:71:84:20:74:02:76:98:ee:cd:d8:27:2f:29:
                    76:df:3f:76:2e:98:f6:b8:50:3a:b9:b1:83:e7:34:
                    d7:af:8e:55:c7:aa:85:f1:4f:0d:fa:bc:0b:e6:c4:
                    96:a3:37:fd:4b:68:50:21:fd:2f:8d:6c:0d:05:bc:
                    aa:7c:18:e2:11:e4:f1:ca:e4:ee:3b:a6:4d:97:fa:
                    fa:32:b7:ea:f3:15:c2:71:80:0d:49:d0:e7:47:cd:
                    98:ca:f2:96:e1:cb:77:54:f1:4e:81:70:c8:4d:72:
                    ef:d0:ac:20:d4:a4:f6:45:02:00:79:bc:c3:12:87:
                    0b:76:75:b3:ac:ee:8f:d7:ff:87:b0:41:49:e7:cc:
                    c1:8a:1f:28:8a:0f:1c:16:cf:b2:ba:59:49:8c:ef:
                    49:9c:70:e2:a8:98:a7:b2:f3:45:61:fe:23:14:64:
                    08:d4:a0:bc:85:2c:b7:7f:57:da:07:20:05:6d:c8:
                    e5:af:b7:69:d8:14:69:54:49:31:02:7a:08:a1:a8:
                    e3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:57:4F:60:17:7A:EF:A2:FB:75:64:92:A6:5F:8D:5F:C3:65:E4:5D
            X509v3 Authority Key Identifier:
                keyid:5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/7458fda6d1390dbdc408047e1bb805a4c9e417bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/5436c9c8d57c3e3253e79ac263352d27de50cae3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:f7:97:6f:d9:e3:89:a9:94:70:48:a0:ad:03:b7:44:79:a6:
         1a:e8:eb:e1:cb:0d:d5:9d:a2:b8:8b:97:58:a9:f8:db:50:f4:
         75:2d:be:22:e0:b0:03:48:76:3b:67:d2:a6:32:4c:bb:d0:45:
         ad:04:f3:e3:92:a8:05:6d:6e:bd:9f:66:23:64:48:59:47:7b:
         76:4e:04:e3:48:d1:54:ca:db:72:10:d5:49:27:e6:ed:06:0a:
         89:7e:35:de:85:86:90:33:75:4b:f2:b1:d1:cd:08:d6:dc:55:
         22:fe:cd:aa:6e:72:8b:71:0b:b0:11:06:4e:56:ac:7f:ac:38:
         ee:07:61:91:14:13:e6:42:2a:c3:e0:3a:72:ae:08:8f:08:48:
         83:16:a9:7b:9b:9e:b5:dc:4f:cc:fb:86:86:0d:b2:53:fe:37:
         65:b8:97:0e:f4:77:1c:99:ab:85:63:ee:a0:5c:66:96:91:0f:
         b2:de:66:48:c2:65:80:e0:f5:ff:09:ac:7c:7d:40:d2:70:46:
         bd:33:03:17:06:59:86:5b:cb:fd:79:de:bb:97:a4:36:65:a1:
         d4:4c:a0:ed:2f:cc:0b:67:17:c1:81:da:8d:0a:80:dc:26:6b:
         af:8f:a4:67:6e:0d:80:a4:db:4a:2f:21:f3:4a:ac:40:62:70:
         d3:0d:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:21 2023 by rpki-client on console-fra.rpki-client.org