Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/82479602a0a976d74c2c0cc7ef5627e653c46324.roa
File:                     82479602a0a976d74c2c0cc7ef5627e653c46324.roa (raw, json)
Hash identifier:          vBrdy8fyaHdo7+tQGKK7+UMGemlw3tHAF88sdo/qF8o=
Subject key identifier:   75:40:85:9A:3B:96:37:A4:8C:6B:FE:09:07:14:3E:28:9B:77:8D:26
Certificate issuer:       /CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
Certificate serial:       0D6C5A
Authority key identifier: 72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/82479602a0a976d74c2c0cc7ef5627e653c46324.roa
Signing time:             Thu 08 Apr 2021 12:28:31 +0000
ROA not before:           Thu 08 Apr 2021 03:00:00 +0000
ROA not after:            Sat 08 Apr 2023 03:00:00 +0000
asID:                     21826
IP address blocks:        167.249.32.0/22 maxlen: 24
                          170.84.136.0/22 maxlen: 22
                          200.229.152.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879706 (0xd6c5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
        Validity
            Not Before: Apr  8 03:00:00 2021 GMT
            Not After : Apr  8 03:00:00 2023 GMT
        Subject: CN=82479602a0a976d74c2c0cc7ef5627e653c46324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:ae:db:22:80:e1:3b:0e:60:2c:80:7e:1f:
                    78:26:bd:6d:99:65:fe:fc:ee:16:55:35:ec:e6:23:
                    48:fe:ec:52:57:20:dd:f5:b8:8c:c3:db:03:47:2e:
                    ac:44:05:97:f9:5a:e6:a9:4f:b8:48:54:22:1b:b7:
                    e9:2e:d8:62:2f:e6:73:ae:cd:4f:c4:1c:cc:34:17:
                    34:53:0a:0a:95:21:0e:b7:33:d4:f9:6a:b1:c6:6b:
                    0b:2f:43:d4:8f:93:d3:7c:f9:40:0c:24:61:2d:4c:
                    41:c2:63:8d:1c:97:9f:ac:b9:11:48:3d:c4:d2:dd:
                    0a:fc:43:0d:34:d7:8e:3f:de:be:84:44:2b:96:e4:
                    2e:99:ec:6e:84:87:e1:80:9d:b9:f5:40:e6:e6:45:
                    f7:61:5e:da:dd:61:18:19:48:10:b8:e1:0f:f0:a0:
                    fe:67:3a:93:6e:d6:e0:38:e0:e3:a8:9e:44:70:9d:
                    ce:8e:61:f0:16:05:9f:04:3b:4f:fd:5e:e3:d3:e4:
                    27:5d:11:b8:dc:a1:cc:0e:4d:f8:c1:ab:97:5e:64:
                    81:8c:df:5a:5b:dd:d3:f2:b2:93:b2:72:ef:5c:a7:
                    d5:29:ad:5f:7b:53:fc:d1:31:20:92:9f:3c:ef:ca:
                    e2:75:ae:e1:7d:ac:9f:37:9d:b8:90:80:73:07:6c:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:40:85:9A:3B:96:37:A4:8C:6B:FE:09:07:14:3E:28:9B:77:8D:26
            X509v3 Authority Key Identifier:
                keyid:72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/82479602a0a976d74c2c0cc7ef5627e653c46324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/ef2d0ae672567bf0e707903589365faae1ff0bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.32.0/22
                  170.84.136.0/22
                  200.229.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:5c:4d:7a:c1:8e:15:62:80:35:57:8b:22:3a:e8:e2:1c:fb:
         bc:de:d8:40:eb:cb:f3:36:69:61:56:b2:0d:dd:18:2a:41:21:
         0c:95:e6:11:2b:f4:75:06:65:24:92:54:80:e9:f6:ab:fc:65:
         0c:ed:92:65:61:dc:02:7c:8b:e1:5a:d3:fa:8d:15:44:21:94:
         b4:a9:73:0b:63:56:7a:ef:c7:f2:1f:0f:b3:09:7c:6f:28:a8:
         b3:a2:00:af:94:af:59:14:d6:63:d7:35:72:43:98:4c:17:a7:
         57:25:90:e3:93:73:69:c8:18:39:cb:f4:b6:7d:c5:41:1a:22:
         b1:32:c4:c3:f2:3d:81:9e:f7:fb:05:20:93:c5:48:02:ef:5c:
         45:61:ac:e5:5b:05:04:4a:b3:3c:72:83:2d:a6:d9:23:cb:1f:
         17:b8:a0:e4:0e:74:87:63:9b:74:78:f8:dd:41:df:fc:4b:34:
         59:74:4e:5e:bc:c0:01:02:e7:aa:09:29:7f:e8:e2:55:24:d2:
         69:75:c9:20:15:14:ab:0a:a3:0d:07:10:55:02:1b:78:3a:a8:
         cb:c3:4c:c6:5b:f5:10:84:7f:62:5e:17:d5:6c:06:82:3a:3c:
         a7:f2:b5:1e:a8:75:f8:98:12:b1:b7:3e:43:21:4b:36:e1:7e:
         be:f2:b0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org