Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/4b15df66ee3ad06ac74ff29456a5a89eac048143.roa
File:                     4b15df66ee3ad06ac74ff29456a5a89eac048143.roa (raw, json)
Hash identifier:          0aRO7mjq9I69q0UBPIZb+As0Hsq7aVqYF+LvB2AjfsI=
Subject key identifier:   65:48:29:64:C4:92:61:0D:D6:8E:6F:4F:6C:51:95:B3:3F:D6:AA:C7
Certificate issuer:       /CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
Certificate serial:       2320EA
Authority key identifier: C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/4b15df66ee3ad06ac74ff29456a5a89eac048143.roa
Signing time:             Wed 02 Aug 2023 18:09:51 +0000
ROA not before:           Tue 01 Aug 2023 18:09:50 +0000
ROA not after:            Sat 02 Aug 2025 18:09:50 +0000
asID:                     262186
IP address blocks:        179.51.96.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302186 (0x2320ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
        Validity
            Not Before: Aug  1 18:09:50 2023 GMT
            Not After : Aug  2 18:09:50 2025 GMT
        Subject: CN=4b15df66ee3ad06ac74ff29456a5a89eac048143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5b:94:8c:ae:5f:c7:23:fd:7a:76:ba:45:4c:
                    a0:70:13:55:f0:52:0d:25:ed:39:9d:33:ae:22:b9:
                    25:52:f3:38:5b:93:35:1a:32:25:28:04:50:a1:21:
                    30:04:65:bc:18:b1:c8:5e:19:7c:95:bd:03:be:7c:
                    a9:52:f7:5e:a8:6f:f3:c7:f0:00:ab:5c:19:77:d7:
                    5c:d1:df:2e:a1:f9:70:1e:7f:91:c5:e7:19:ab:ee:
                    a6:bd:2f:ba:3c:f1:66:99:d6:7e:23:0c:0f:f3:a2:
                    7e:ca:5a:5b:0b:14:7c:bf:c6:83:b1:b5:0f:99:bf:
                    55:42:ea:25:4b:83:37:12:e8:8e:ff:7c:4a:12:4f:
                    26:47:ac:74:76:42:d8:4c:80:28:0d:ab:d7:02:20:
                    ed:90:e9:5a:fe:f8:c5:65:db:cf:de:59:9a:48:68:
                    55:7c:d8:ad:5e:cb:61:4e:ff:f1:17:28:99:02:6c:
                    2c:60:82:d1:c7:92:fd:8c:be:71:c5:e6:01:84:44:
                    d2:19:cb:e2:12:fa:2a:66:1f:c0:45:85:03:0f:4d:
                    e0:4d:4b:34:a3:bc:d5:3e:78:b4:2b:5b:43:cd:ea:
                    7f:cb:63:30:ab:95:cc:a3:7f:85:17:4d:6a:7b:74:
                    65:7b:bc:d1:20:5d:e4:fb:f5:75:69:d3:45:f3:76:
                    c6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:48:29:64:C4:92:61:0D:D6:8E:6F:4F:6C:51:95:B3:3F:D6:AA:C7
            X509v3 Authority Key Identifier:
                keyid:C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/4b15df66ee3ad06ac74ff29456a5a89eac048143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2e:5a:e4:c3:68:09:92:e7:b6:3a:f0:2a:23:b5:6e:0e:02:eb:
         5e:bc:13:4e:1d:75:37:a7:b2:a6:46:a7:c4:55:25:c7:8f:c1:
         51:01:e3:2d:ae:b2:c5:8f:70:ec:a5:5f:08:ef:3f:5e:a5:23:
         af:ce:93:3b:a8:10:5b:a1:1d:60:74:b7:52:a8:97:e3:38:21:
         c4:0f:f4:b1:07:7d:0f:4c:54:06:3a:15:4e:4e:75:71:92:d9:
         74:f8:bf:4c:8b:4c:1e:f1:3f:f4:33:ae:e7:52:dc:fc:2f:05:
         f5:18:fb:50:d2:75:c1:a4:32:e8:9b:34:a6:57:04:a1:bb:68:
         76:dc:13:be:64:8b:e4:b5:53:77:54:b1:7f:d5:7a:71:96:65:
         3f:15:1f:f3:42:6c:ed:95:ae:94:86:e9:b6:3d:78:73:aa:da:
         2d:41:01:9e:4a:3a:75:a3:a4:eb:db:0e:84:7a:3c:7b:ad:36:
         96:83:a3:4b:b5:ac:a4:25:1e:80:29:25:57:76:c6:2c:54:d5:
         5e:d9:e0:13:19:37:be:3e:80:08:4a:40:04:a7:6b:c5:fb:da:
         c3:b4:c7:39:27:44:50:fc:04:3f:a1:69:d9:9a:b2:c7:3f:df:
         d5:da:6e:aa:3a:fe:b0:8f:72:6d:71:bc:09:86:9b:92:27:7f:
         c4:fd:cd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----