Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/b111d7a1d8edee21a38f0cb48620aeb84b1c145f.roa
File:                     b111d7a1d8edee21a38f0cb48620aeb84b1c145f.roa (raw, json)
Hash identifier:          kYmQQ3iAbsPoXdjk5ZHWP0wy2qlNDgy0yRqUXWOsUFU=
Subject key identifier:   1C:81:42:8A:06:F4:9D:28:1E:AA:8B:E7:40:C4:1F:0B:86:B8:BD:85
Certificate issuer:       /CN=5be393491eb2c03f14214a706c7be3bb76a02485
Certificate serial:       18EE86
Authority key identifier: 81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5be393491eb2c03f14214a706c7be3bb76a02485.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/b111d7a1d8edee21a38f0cb48620aeb84b1c145f.roa
Signing time:             Tue 02 Aug 2022 17:07:04 +0000
ROA not before:           Tue 02 Aug 2022 03:00:00 +0000
ROA not after:            Fri 02 Aug 2024 03:00:00 +0000
asID:                     271929
IP address blocks:        45.236.168.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1633926 (0x18ee86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be393491eb2c03f14214a706c7be3bb76a02485
        Validity
            Not Before: Aug  2 03:00:00 2022 GMT
            Not After : Aug  2 03:00:00 2024 GMT
        Subject: CN=b111d7a1d8edee21a38f0cb48620aeb84b1c145f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:60:f0:21:61:8b:95:c4:f7:59:cf:c5:55:
                    76:06:c0:ea:7f:92:c7:38:82:a6:bd:2b:34:2d:90:
                    b0:06:ac:bc:0d:44:b9:77:62:eb:ed:22:95:89:ee:
                    95:d6:6f:ce:46:08:83:48:88:2e:f0:e7:f0:15:73:
                    42:03:50:ed:fc:a0:1b:1f:f9:c3:aa:ba:d0:d2:11:
                    a2:f9:2e:be:45:39:0c:c4:a7:86:5a:ad:b9:f8:5c:
                    81:43:f3:ed:82:63:20:47:60:2a:0d:a6:34:05:c4:
                    29:58:c2:8c:26:79:fa:83:6f:54:a3:a2:2d:a4:36:
                    17:bb:61:d6:ec:f5:29:59:5a:a2:24:d4:e2:61:95:
                    97:b5:9a:62:18:8e:25:87:26:bd:4f:86:83:33:15:
                    a6:d7:ce:79:bb:ce:3b:88:5e:3c:ad:77:bf:a7:0f:
                    07:8a:01:cc:23:8d:19:4a:fe:68:0f:84:9f:72:5e:
                    63:a7:ca:4d:92:ed:dd:c7:d8:9d:47:b9:8b:69:5e:
                    87:eb:44:4e:f8:75:20:9a:58:70:74:76:80:9c:0d:
                    97:0e:59:a0:91:51:5a:2d:14:9b:e4:f9:d2:75:8c:
                    d9:f0:53:aa:af:90:48:ae:8c:aa:66:96:aa:bc:1d:
                    e0:48:01:97:be:61:93:21:31:e4:03:47:4e:98:ab:
                    cb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:81:42:8A:06:F4:9D:28:1E:AA:8B:E7:40:C4:1F:0B:86:B8:BD:85
            X509v3 Authority Key Identifier:
                keyid:81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5be393491eb2c03f14214a706c7be3bb76a02485.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/b111d7a1d8edee21a38f0cb48620aeb84b1c145f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/5be393491eb2c03f14214a706c7be3bb76a02485.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:89:7f:80:33:3f:92:a0:2e:c8:85:84:92:58:cd:93:37:42:
         2f:f6:a2:08:c5:0a:c1:3d:52:9f:6f:71:13:a7:49:f2:d8:18:
         92:7c:24:7a:f2:25:f2:51:95:f6:62:23:59:1b:d2:21:08:b6:
         eb:61:c8:67:0b:aa:a3:25:58:be:ee:12:ae:76:70:47:77:86:
         82:80:d1:23:58:41:31:55:5a:49:98:71:91:2c:50:09:f9:51:
         09:21:5a:3c:57:5e:f5:2a:20:bb:c4:a8:fc:30:99:77:50:41:
         22:bf:f4:0b:72:c1:4f:ac:7c:a7:34:af:8d:0b:57:23:38:df:
         46:cd:77:b6:bb:d5:9f:cf:8f:2d:b3:85:f1:6c:bd:47:01:a7:
         9f:a9:15:f6:42:fb:7e:23:99:0e:40:a4:47:c4:cc:5a:61:4d:
         6c:76:49:20:0e:24:e4:c3:5c:40:64:74:24:2e:94:2a:c1:cf:
         f8:a4:c8:cb:eb:aa:94:76:b0:00:2b:12:6d:af:d3:c5:cc:fe:
         1a:03:1a:f2:c4:8e:8f:7d:30:37:c6:89:3f:b5:46:7a:2e:9c:
         ab:87:36:00:57:f6:dd:56:c8:e8:80:4e:8d:82:88:cd:ad:b4:
         24:62:0b:9b:b2:42:ff:9b:c5:d1:99:85:85:3e:5c:10:96:be:
         33:e1:e5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 20:47:47 2023 by rpki-client on console-fra.rpki-client.org