Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/8e401d1853e6212a915f03dfa836052f3a1c576f.roa
File:                     8e401d1853e6212a915f03dfa836052f3a1c576f.roa (raw, json)
Hash identifier:          KmKLn8Yx8jggMatSa6GvGgULv/jx2UUqHW8ZBwrfxUc=
Subject key identifier:   2B:43:A8:F0:93:95:5D:84:88:EE:27:99:E0:F7:2A:06:30:5C:0D:E7
Certificate issuer:       /CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Certificate serial:       23E3BC
Authority key identifier: AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/8e401d1853e6212a915f03dfa836052f3a1c576f.roa
Signing time:             Tue 03 Oct 2023 18:45:50 +0000
ROA not before:           Mon 02 Oct 2023 18:45:50 +0000
ROA not after:            Fri 03 Oct 2025 19:45:50 +0000
asID:                     52458
IP address blocks:        179.60.244.0/22 maxlen: 24
                          2803:480:10::/64 maxlen: 64
                          2803:480::/32 maxlen: 64
                          2803:480:20::/48 maxlen: 64
                          2803:480:6::/64 maxlen: 64
                          2803:480:15::/48 maxlen: 64
                          2803:480:16::/47 maxlen: 64
                          2803:480:18::/47 maxlen: 64
                          2803:480:11::/64 maxlen: 64
                          2803:480:14::/64 maxlen: 64
                          2803:480:8::/64 maxlen: 64
                          2803:480:13::/64 maxlen: 64
                          2803:480:9::/64 maxlen: 64
                          2803:480:7::/64 maxlen: 64
                          2803:480:12::/64 maxlen: 64

Validation:               Failed, certificate revoked on Fri 12 Jan 2024 18:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2352060 (0x23e3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
        Validity
            Not Before: Oct  2 18:45:50 2023 GMT
            Not After : Oct  3 19:45:50 2025 GMT
        Subject: CN=8e401d1853e6212a915f03dfa836052f3a1c576f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f8:c5:31:aa:59:ef:96:b5:ba:4d:e0:50:65:
                    d6:c4:79:08:66:f9:26:3c:3b:37:05:41:42:58:2f:
                    57:07:db:2e:c5:f7:1d:25:f6:a4:8c:e6:44:dd:33:
                    16:72:39:5f:7d:5a:1c:1d:32:a6:07:a5:fa:62:ef:
                    d2:87:a5:b9:ab:63:15:61:12:90:9c:db:a7:2d:b5:
                    7b:c6:0a:e4:61:9b:bd:26:e2:68:08:50:ae:0b:00:
                    76:12:29:c8:17:97:78:fd:38:92:65:8a:b7:19:b7:
                    4d:8c:51:af:00:bf:8b:48:84:ad:df:a5:8c:9e:27:
                    d5:ab:7e:45:8b:93:7e:fb:ad:4d:97:45:df:31:2b:
                    db:cc:8f:11:f7:06:69:33:90:72:8f:10:41:24:5c:
                    51:d6:ee:8c:37:32:cf:ff:4f:d2:56:d2:77:db:b2:
                    38:ab:b4:b8:cc:fe:bf:03:01:aa:a5:90:46:b8:3e:
                    f2:ea:f0:2c:d0:ad:fd:0d:24:0b:5b:c2:9c:0a:a5:
                    55:28:ae:21:5b:29:5d:19:ba:5b:60:ea:3b:de:2e:
                    5a:e9:ef:26:36:86:1a:b7:49:1d:e3:4c:b2:0f:55:
                    de:b9:08:3b:07:e7:1d:75:f9:1a:a2:a9:26:0a:c8:
                    5a:36:9d:2b:33:bb:a2:04:3d:e4:d8:0d:c3:ac:9b:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:43:A8:F0:93:95:5D:84:88:EE:27:99:E0:F7:2A:06:30:5C:0D:E7
            X509v3 Authority Key Identifier:
                keyid:AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/8e401d1853e6212a915f03dfa836052f3a1c576f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.244.0/22
                IPv6:
                  2803:480::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:ec:35:81:a7:e3:f5:2b:67:72:c5:80:32:8d:18:96:46:6c:
         a8:e8:cf:bf:4a:dc:6a:c8:21:e2:1e:a3:66:95:8e:bf:4d:cc:
         ad:c7:ab:29:ce:88:27:7e:99:0f:10:92:39:64:bd:d5:ca:ed:
         e6:3b:94:fe:9a:ea:34:51:4d:b4:c7:a3:90:e0:9d:28:f3:73:
         f9:af:b8:b8:97:24:11:9e:f3:01:e0:95:75:48:f4:90:8f:08:
         2b:ea:08:6a:72:bc:e7:c9:6e:55:85:12:19:1d:77:ff:74:1d:
         ce:bb:2c:fb:d9:d6:eb:d3:e1:66:b2:85:22:6c:a2:81:12:31:
         70:9c:45:83:24:dc:1a:3e:16:e2:e4:4a:1c:10:22:9a:00:50:
         b1:95:e2:f9:b6:73:c8:c0:3f:40:bf:b8:e3:f8:aa:28:2b:c2:
         f3:02:bd:eb:04:cd:a3:66:6b:fe:92:de:7d:bd:5f:f2:5c:ae:
         87:74:41:26:f7:e7:d3:2f:18:95:28:ad:73:16:b8:cf:d7:86:
         cf:eb:87:6e:c9:99:7a:39:f4:ce:01:e8:af:06:6a:e8:39:1b:
         29:69:3f:01:4d:99:1d:9b:e6:e8:3b:6e:a6:65:e7:29:f5:ab:
         2f:d2:9f:98:bd:69:cc:7e:a3:c5:10:11:2b:27:b8:3c:f8:bf:
         a9:b2:9f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----