Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/4fed435e8bd52f18897c902927ce4b0b52714274.roa
File:                     4fed435e8bd52f18897c902927ce4b0b52714274.roa (raw, json)
Hash identifier:          BWlBY8vi2XC3eMi57len6IZzujbXOqesgsO1J6ncZAo=
Subject key identifier:   EE:44:14:80:9F:C2:AA:E0:83:9D:23:C0:2E:9D:68:2C:74:81:5B:10
Certificate issuer:       /CN=844cc8c5a2dc70311d998622d46309497c3d982c
Certificate serial:       04B4
Authority key identifier: A5:15:CA:3C:8A:F0:DB:40:5D:D7:3C:92:03:97:F8:4F:9D:29:D4:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/844cc8c5a2dc70311d998622d46309497c3d982c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/4fed435e8bd52f18897c902927ce4b0b52714274.roa
Signing time:             Thu 24 Nov 2022 14:25:52 +0000
ROA not before:           Tue 22 Nov 2022 14:02:44 +0000
ROA not after:            Sun 24 Nov 2024 14:02:44 +0000
asID:                     265720
IP address blocks:        160.20.80.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204 (0x4b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844cc8c5a2dc70311d998622d46309497c3d982c
        Validity
            Not Before: Nov 22 14:02:44 2022 GMT
            Not After : Nov 24 14:02:44 2024 GMT
        Subject: CN=4fed435e8bd52f18897c902927ce4b0b52714274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:64:d1:b7:a3:c5:99:73:74:91:74:4c:9b:
                    c2:ac:0f:b8:7c:f5:50:27:30:6e:8e:68:8d:04:3b:
                    2e:35:41:fa:75:67:df:e0:ee:09:ec:01:50:e9:74:
                    bb:54:10:22:9b:64:79:05:17:a9:b7:52:c3:4b:83:
                    88:0c:68:c6:0d:3d:c6:7c:29:08:7e:c9:48:27:09:
                    46:fb:75:2a:2d:bc:a1:6a:41:6b:de:0b:da:71:6f:
                    f6:5d:ce:e0:22:ae:e8:01:0e:f0:41:ea:f6:18:9f:
                    43:11:ad:a6:ac:76:f8:7f:85:a4:07:75:52:8f:11:
                    f1:f1:76:58:31:7c:cb:af:91:40:a1:55:49:30:85:
                    80:8e:3d:d8:db:8a:f2:ab:de:86:ad:2b:0f:73:e6:
                    8c:71:50:9e:eb:e4:e6:1a:39:a0:cc:76:73:d4:68:
                    d6:34:03:fb:e2:eb:87:c9:da:a5:f6:3c:64:79:fd:
                    3b:0b:75:a0:ed:12:3f:8b:ab:8f:d0:b6:b4:2c:59:
                    a9:c8:71:88:37:d2:29:11:13:92:1e:76:b0:78:06:
                    27:89:53:27:cd:dc:70:5b:bd:be:19:47:47:8b:07:
                    d8:bd:c6:38:b1:bb:db:62:6f:6d:97:12:b4:85:97:
                    6a:a4:5e:60:0e:92:06:bc:dd:62:c4:5d:ea:d1:ee:
                    a1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:44:14:80:9F:C2:AA:E0:83:9D:23:C0:2E:9D:68:2C:74:81:5B:10
            X509v3 Authority Key Identifier:
                keyid:A5:15:CA:3C:8A:F0:DB:40:5D:D7:3C:92:03:97:F8:4F:9D:29:D4:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/844cc8c5a2dc70311d998622d46309497c3d982c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/4fed435e8bd52f18897c902927ce4b0b52714274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/844cc8c5a2dc70311d998622d46309497c3d982c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:7f:e5:6c:d9:1a:f1:a3:0c:26:a2:aa:4e:3d:e2:ac:00:4a:
         7e:d1:36:69:35:e9:54:95:9a:23:02:0c:2f:a0:31:30:91:3e:
         8c:8f:90:e3:a2:de:5a:b3:73:43:6e:6d:9c:a6:0c:a2:f8:7a:
         33:1f:83:b9:ba:de:31:0c:75:c3:fc:ef:6e:45:05:12:12:a0:
         b5:c3:67:d0:e1:57:ee:14:f1:70:72:f7:16:9c:6d:22:8e:2c:
         10:d8:af:f2:80:35:5c:ce:3e:73:43:21:84:24:6f:c5:e8:ba:
         6a:40:0a:07:8d:c2:d0:af:a1:82:ca:49:de:66:a9:f7:b0:e6:
         f2:5a:c6:fe:46:f7:98:1c:e9:8c:63:7b:89:9e:66:c5:2a:6a:
         ca:e5:8a:97:bd:06:88:e5:a8:aa:03:30:79:c6:87:1a:82:61:
         25:21:b2:28:d0:c1:67:8e:38:8e:fd:20:a4:71:64:ed:0c:37:
         57:cf:a4:a7:6b:f8:9a:c4:09:12:4d:0c:82:b5:77:16:37:b2:
         2b:bd:f8:a6:4b:2a:d9:ff:df:3d:85:b3:9b:b8:3f:32:61:a4:
         77:81:17:e3:c6:a9:a1:05:c0:2c:50:48:46:44:06:dc:e9:94:
         55:0e:b4:0b:29:e0:c5:53:8c:42:42:c2:88:3e:3c:b4:83:7c:
         fc:24:34:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 19:30:10 2023 by rpki-client on console-ams.rpki-client.org