Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b9e4891-891f-4dd4-87a7-4377f41bdde3/b570313beec75c3b2e1b6a48a3eb0b0db1a69c95.roa
File:                     b570313beec75c3b2e1b6a48a3eb0b0db1a69c95.roa (raw, json)
Hash identifier:          QZbr5mkbsHBrnsitHevoJTWfTYg39/qXDACdkMwudFc=
Subject key identifier:   91:B8:98:99:8F:1A:0C:5B:26:69:FB:7B:F4:18:F4:EC:39:2A:04:02
Certificate issuer:       /CN=1d62648247a07842830526428e27c3af77e158dd
Certificate serial:       1CB7
Authority key identifier: 5D:CF:93:2E:84:94:C3:FB:CE:F2:7E:C9:40:C0:AC:68:8F:94:A2:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d62648247a07842830526428e27c3af77e158dd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b9e4891-891f-4dd4-87a7-4377f41bdde3/b570313beec75c3b2e1b6a48a3eb0b0db1a69c95.roa
Signing time:             Thu 13 Oct 2022 10:40:47 +0000
ROA not before:           Sat 08 Oct 2022 10:30:29 +0000
ROA not after:            Sun 13 Oct 2024 10:30:29 +0000
asID:                     265554
IP address blocks:        45.163.120.0/23 maxlen: 23
                          45.163.122.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7351 (0x1cb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d62648247a07842830526428e27c3af77e158dd
        Validity
            Not Before: Oct  8 10:30:29 2022 GMT
            Not After : Oct 13 10:30:29 2024 GMT
        Subject: CN=b570313beec75c3b2e1b6a48a3eb0b0db1a69c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:a3:c9:db:95:d8:dd:9f:b1:ca:f2:93:ce:
                    50:4e:01:f3:5b:84:02:6c:8f:c5:b8:c1:b8:8c:cf:
                    90:c9:eb:3f:0e:34:bc:8f:27:f6:6e:18:b5:9f:79:
                    3a:ec:d5:6a:a8:b0:04:18:f5:a1:64:dd:c4:a4:1b:
                    75:b0:58:0e:36:17:87:f8:03:40:68:1d:c7:a6:91:
                    0a:0b:26:34:06:fa:82:df:6f:07:b5:7f:f1:6f:c4:
                    cf:bf:4e:cb:b3:dd:0c:88:b0:b8:40:b9:e3:a4:10:
                    d5:7f:ef:5e:52:5c:d9:4a:6e:2d:ce:e3:7b:02:e2:
                    d6:49:f8:3e:83:12:9e:8e:96:a6:9e:81:fd:65:32:
                    67:fe:3e:11:b6:b4:0e:ec:cf:7c:0f:03:2d:41:cd:
                    e0:a8:f8:f1:78:8f:b5:2f:a7:38:c4:5f:42:80:c0:
                    0d:29:7e:ee:08:5c:6d:04:d4:71:3c:d5:e3:20:ab:
                    98:32:b0:82:d7:98:f7:e4:f8:2d:cb:1a:8a:00:65:
                    96:a9:76:d0:c5:06:7c:13:fa:5c:35:2b:f2:d2:c5:
                    4f:00:87:53:11:09:89:91:37:0b:1e:d7:b2:a6:62:
                    65:0b:cd:96:53:0e:72:62:fe:d1:0a:fa:93:76:dd:
                    1a:a3:fe:3d:51:c2:9c:a4:58:e0:50:cb:3c:32:b4:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B8:98:99:8F:1A:0C:5B:26:69:FB:7B:F4:18:F4:EC:39:2A:04:02
            X509v3 Authority Key Identifier:
                keyid:5D:CF:93:2E:84:94:C3:FB:CE:F2:7E:C9:40:C0:AC:68:8F:94:A2:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d62648247a07842830526428e27c3af77e158dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b9e4891-891f-4dd4-87a7-4377f41bdde3/b570313beec75c3b2e1b6a48a3eb0b0db1a69c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b9e4891-891f-4dd4-87a7-4377f41bdde3/1d62648247a07842830526428e27c3af77e158dd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:1c:cd:f4:83:2f:9e:81:1d:d0:34:b6:a7:20:9f:00:1d:cc:
         fa:cc:0f:1b:bc:88:04:eb:8c:cd:de:a4:4a:6a:7d:42:73:82:
         19:42:49:48:f9:0c:ea:20:ce:f6:ad:db:c9:2a:ee:1b:66:d9:
         36:d1:ef:e9:98:17:8d:af:eb:a0:39:fd:bf:44:af:c6:92:30:
         e6:35:67:7f:c2:ff:56:49:02:81:cd:28:60:8f:7f:0a:71:9d:
         0a:d9:10:1d:24:c8:69:eb:0f:3b:1b:06:0d:aa:74:c6:77:a8:
         c3:57:a9:e1:6a:6e:1b:fa:bb:b6:88:38:0e:b5:6c:18:79:da:
         6e:73:17:36:4c:86:2d:5c:55:87:d8:6c:6b:d1:d1:47:01:e1:
         b3:ce:92:4a:81:d3:55:6e:11:57:e8:d9:2f:5b:d7:43:e4:a1:
         78:a1:2c:58:85:24:ed:e4:f4:73:c6:75:22:18:21:76:5e:17:
         2e:d0:f5:a6:5c:9e:36:b2:6e:e4:87:51:43:e7:13:18:b2:86:
         d3:36:d7:21:f5:0a:75:f8:45:c0:7a:48:40:46:f7:97:93:8e:
         20:7d:1d:f4:f0:3f:da:fa:09:c6:10:31:45:92:e1:cf:5e:b7:
         0f:9c:c8:ed:7d:81:76:d5:ff:f9:d3:24:15:11:4e:43:fd:b9:
         2d:2e:bb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org