Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/31906850000ad96714129761b122a470050f4df7.roa
File:                     31906850000ad96714129761b122a470050f4df7.roa (raw, json)
Hash identifier:          ks4jWthhLGUQTJn837QGNpwQuV0yL9X5S/qqdKNvthU=
Subject key identifier:   C2:FD:D5:0C:C5:A5:D4:E7:4F:BF:43:3D:E2:C5:22:63:A8:0D:17:F9
Certificate issuer:       /CN=677e61affc2207b19cf569eaf59f1aa53af06efd
Certificate serial:       242F9B
Authority key identifier: E2:B5:34:5A:B6:AB:EE:BA:07:CB:14:AB:54:F2:AD:0D:E3:E5:97:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/677e61affc2207b19cf569eaf59f1aa53af06efd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/31906850000ad96714129761b122a470050f4df7.roa
Signing time:             Tue 14 Nov 2023 20:41:47 +0000
ROA not before:           Tue 14 Nov 2023 20:41:47 +0000
ROA not after:            Fri 14 Nov 2025 20:41:47 +0000
asID:                     28458
IP address blocks:        207.248.114.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2371483 (0x242f9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677e61affc2207b19cf569eaf59f1aa53af06efd
        Validity
            Not Before: Nov 14 20:41:47 2023 GMT
            Not After : Nov 14 20:41:47 2025 GMT
        Subject: CN=31906850000ad96714129761b122a470050f4df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0b:de:73:d0:68:88:d2:b5:fc:95:d9:cf:ef:
                    57:dd:d7:82:b5:31:9a:18:59:ab:83:11:cd:74:53:
                    4c:64:9d:be:39:2e:65:0e:81:f0:9e:7f:db:29:9b:
                    f4:4b:0b:46:1d:fa:23:88:2d:4b:8e:fb:62:1f:00:
                    eb:51:70:65:d7:e0:97:3e:7d:84:55:e4:29:8e:c9:
                    69:92:98:cc:4f:f5:f4:5e:89:d3:d6:9e:9f:a5:02:
                    93:f7:09:15:20:18:9b:73:89:87:d8:cf:c9:01:ef:
                    b6:89:5f:d0:9d:b4:bb:be:55:1b:25:8c:56:4f:78:
                    fd:dd:32:f8:18:c3:3e:4b:6e:a7:5c:fc:1c:c6:38:
                    42:29:2e:c1:c6:a0:eb:92:32:6d:d8:ca:aa:20:95:
                    c6:cb:82:dc:52:fd:0b:49:ce:61:e3:8b:d9:f3:a5:
                    2e:7a:b6:db:a7:e9:44:d6:28:af:85:ea:26:7e:69:
                    92:cd:75:d2:fa:47:05:78:46:e9:c6:6e:49:94:39:
                    98:52:d5:68:10:77:00:94:9e:37:ae:b9:e5:3f:fd:
                    a1:ef:01:14:8a:9c:a9:c4:00:b0:c4:6a:9b:df:28:
                    5d:18:6a:ca:f1:67:aa:14:26:17:02:b4:3a:8d:1c:
                    30:1a:e7:7d:4b:1d:51:4b:2b:d4:89:4b:23:9f:d4:
                    07:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FD:D5:0C:C5:A5:D4:E7:4F:BF:43:3D:E2:C5:22:63:A8:0D:17:F9
            X509v3 Authority Key Identifier:
                keyid:E2:B5:34:5A:B6:AB:EE:BA:07:CB:14:AB:54:F2:AD:0D:E3:E5:97:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/677e61affc2207b19cf569eaf59f1aa53af06efd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/31906850000ad96714129761b122a470050f4df7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/677e61affc2207b19cf569eaf59f1aa53af06efd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:84:aa:42:97:ed:70:a4:15:a5:4e:91:11:3d:9e:67:48:ab:
         4a:ec:0a:75:6a:84:b2:b7:fc:d5:2f:bd:9d:91:ce:5c:04:52:
         33:28:4b:40:94:a7:dc:92:22:d6:0c:db:7f:7b:73:97:fc:93:
         df:54:48:ec:55:77:9c:b1:5b:9d:65:dc:ec:99:59:59:19:09:
         b2:50:b1:14:ff:1b:8a:a9:5b:8d:ed:a3:e3:0e:22:bb:15:f5:
         ca:b5:8f:dd:3d:44:b9:86:b5:40:22:30:71:64:76:5f:5e:b1:
         9d:fe:a9:3c:f2:c0:15:59:c3:02:ad:40:5c:e8:b9:ad:3f:51:
         91:72:7b:a8:85:67:6e:80:f1:40:6c:c6:f5:d2:82:9d:3f:73:
         4f:d2:c8:ce:64:eb:e7:8c:96:f3:87:dd:7f:eb:cf:99:0d:ff:
         7a:ac:84:72:20:16:d8:77:cb:ea:87:c8:8b:a1:a9:c5:47:f9:
         92:7f:5c:49:47:56:84:58:54:eb:15:89:ca:ab:82:18:08:a6:
         bb:4a:eb:7c:32:76:55:53:4b:bd:29:cc:6a:01:7a:a3:f0:f2:
         1e:e4:c5:cc:42:dd:be:23:a5:8c:42:8b:3c:b2:cc:49:25:65:
         a5:cc:9f:9c:04:e9:d5:97:14:81:07:d9:e1:27:07:3a:50:8a:
         f2:b7:af:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----