Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/ef8d029198ea666b27a495f4a15d73c8dd39f26b.roa
File:                     ef8d029198ea666b27a495f4a15d73c8dd39f26b.roa (raw, json)
Hash identifier:          Rl7P53R3OUp5sBOEKEJtYOxUuSTxYHeVcS6UcI2HUmI=
Subject key identifier:   C5:3C:94:53:8E:A4:28:A2:2B:63:48:3C:9D:C0:4F:D1:67:44:F9:F0
Certificate issuer:       /CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
Certificate serial:       23ACFD
Authority key identifier: 20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/ef8d029198ea666b27a495f4a15d73c8dd39f26b.roa
Signing time:             Sun 27 Aug 2023 23:30:55 +0000
ROA not before:           Sat 26 Aug 2023 23:30:55 +0000
ROA not after:            Wed 27 Aug 2025 23:30:55 +0000
asID:                     262234
IP address blocks:        131.108.232.0/22 maxlen: 24
                          170.245.56.0/22 maxlen: 24
                          179.49.112.0/21 maxlen: 24
                          2803:db00::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2338045 (0x23acfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
        Validity
            Not Before: Aug 26 23:30:55 2023 GMT
            Not After : Aug 27 23:30:55 2025 GMT
        Subject: CN=ef8d029198ea666b27a495f4a15d73c8dd39f26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ea:53:f2:a2:56:c7:98:38:ef:0a:17:3a:14:
                    a5:8f:a2:f8:dd:92:24:e6:18:04:3c:ca:62:8c:48:
                    f2:bf:fc:99:d8:6d:41:3f:d3:b2:a0:57:ad:6a:de:
                    ca:27:e4:1b:5c:b8:50:3d:3d:5d:19:32:b5:65:91:
                    f9:50:9e:c9:2d:c7:6f:38:0b:43:47:a7:0b:da:54:
                    9d:ce:cb:43:64:45:33:7f:96:67:76:36:39:bc:2a:
                    30:9d:56:75:ad:15:bf:9f:9f:e6:30:bc:6b:13:6d:
                    bd:86:f2:ff:ef:fa:0c:f3:c1:9e:1d:94:43:c0:b6:
                    ff:65:90:fc:1e:66:57:f3:74:58:5e:c1:ff:50:41:
                    91:c1:4e:b9:83:4c:1f:d5:d7:8a:a8:c3:97:fc:93:
                    e0:63:62:db:09:a0:78:4e:45:03:35:35:cc:36:77:
                    6d:fb:51:fb:7f:fe:5e:c1:f4:97:bd:28:46:77:8f:
                    4d:98:86:bb:2f:ed:be:34:f5:29:fc:8c:e5:02:ae:
                    f8:d5:50:1b:7d:e9:de:03:7c:89:bf:f7:5c:36:9c:
                    b8:2b:2c:de:9a:53:c2:80:ca:cb:9a:c5:d3:11:ee:
                    e3:8c:14:e1:ba:7d:80:e2:8d:5d:0b:6a:ba:7d:f2:
                    bc:54:8b:78:6e:e5:25:9f:f8:df:9f:52:ee:46:e1:
                    40:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3C:94:53:8E:A4:28:A2:2B:63:48:3C:9D:C0:4F:D1:67:44:F9:F0
            X509v3 Authority Key Identifier:
                keyid:20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/ef8d029198ea666b27a495f4a15d73c8dd39f26b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/50029dd9024c2c49dc8eb4a48df44bfd015f8874.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.232.0/22
                  170.245.56.0/22
                  179.49.112.0/21
                IPv6:
                  2803:db00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:77:4e:ae:f9:63:ae:d6:81:5c:58:fb:b1:54:a1:85:69:bb:
         7a:69:b2:2a:e2:5d:07:ac:d5:d3:1f:c1:b5:00:4c:4e:03:ad:
         cc:b3:20:63:e6:56:39:d7:ec:1c:e4:76:90:f3:31:41:1b:33:
         00:b9:c9:32:f6:8c:07:b1:1d:81:4d:84:2f:5a:07:cf:f2:b1:
         7c:f0:6d:c6:77:5d:af:de:15:10:20:2a:ec:e4:ee:67:50:43:
         1f:c4:8c:8f:b9:69:24:8b:0e:de:70:a9:e0:5d:0e:7a:6d:cd:
         62:96:15:26:93:76:f8:5f:98:59:11:c2:75:b5:44:31:83:54:
         f0:5c:2a:81:5b:62:be:45:0d:c5:5d:a2:1f:8b:40:f8:25:6a:
         78:a3:fc:c9:91:b5:80:f0:26:c3:7d:d9:ba:7b:ec:6c:1e:09:
         dd:1a:b2:13:aa:ec:7a:da:fc:0b:92:22:80:86:08:04:4b:29:
         4b:31:49:7c:d0:f2:c3:73:c3:be:e8:27:3b:25:2a:cd:7e:86:
         45:2e:74:3a:2c:c5:d8:62:a8:37:fc:96:81:4e:8a:92:ce:77:
         b0:8d:4d:c5:37:1e:f4:c4:df:fb:c5:d3:08:3f:97:6f:08:23:
         71:96:11:a0:c8:6f:ed:19:c8:04:82:40:cc:19:38:32:50:36:
         45:e7:cd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----