Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9ace7fe-43a1-42e0-b049-fabd6bcae6ad/9ca528af5d5623275f72b6172e07b1e72fb64df2.roa
File:                     9ca528af5d5623275f72b6172e07b1e72fb64df2.roa (raw, json)
Hash identifier:          s0AsF5FPmGLBjLXB0hfBackLpt4KYALNTzf0B1vN6Os=
Subject key identifier:   DF:03:45:3A:B9:48:29:55:83:B4:86:19:E4:EC:B4:50:D3:25:A7:B0
Certificate issuer:       /CN=2b56a14d22b6672230c805b48453f25f13c7969b
Certificate serial:       11C3
Authority key identifier: 82:5A:88:49:C0:92:12:BC:07:89:BE:09:7E:18:62:29:D4:73:31:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b56a14d22b6672230c805b48453f25f13c7969b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9ace7fe-43a1-42e0-b049-fabd6bcae6ad/9ca528af5d5623275f72b6172e07b1e72fb64df2.roa
Signing time:             Fri 14 Oct 2022 22:04:48 +0000
ROA not before:           Tue 11 Oct 2022 21:01:57 +0000
ROA not after:            Mon 14 Oct 2024 21:01:57 +0000
asID:                     272076
IP address blocks:        181.189.16.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4547 (0x11c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b56a14d22b6672230c805b48453f25f13c7969b
        Validity
            Not Before: Oct 11 21:01:57 2022 GMT
            Not After : Oct 14 21:01:57 2024 GMT
        Subject: CN=9ca528af5d5623275f72b6172e07b1e72fb64df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7c:f2:bd:97:41:52:80:50:6b:98:f2:6e:d2:
                    94:4d:90:96:a9:4a:9c:90:6d:11:cf:26:de:a9:77:
                    ce:7d:de:45:b1:43:20:34:b6:99:32:36:6d:bc:14:
                    4b:b9:c8:dc:f0:94:bc:d6:7c:35:a4:96:45:d2:40:
                    67:2c:21:82:12:77:3c:96:58:bd:1a:16:09:c5:60:
                    f3:c6:1a:d0:73:2e:63:d6:34:23:83:f1:be:98:9e:
                    78:24:34:e1:18:3f:e1:92:61:bf:a3:bb:b1:5f:93:
                    f1:da:3f:a7:71:9a:4e:94:6b:ed:ec:19:44:d3:75:
                    b6:60:66:62:9f:da:45:bc:00:bf:a5:32:4f:e2:30:
                    37:49:e3:98:c0:2c:03:ab:83:b2:2b:f1:53:0d:f2:
                    d4:7d:01:1f:cf:5a:bb:34:66:d8:6e:f8:16:f6:fd:
                    d4:e5:f9:cb:15:fa:a6:d5:a2:64:e9:a4:b4:ad:30:
                    4e:6c:74:84:c4:42:1a:60:a4:30:f1:55:5c:68:b7:
                    62:3d:cb:07:cf:7c:6b:10:1b:7c:b8:e5:80:d9:92:
                    2b:12:b2:39:7b:4b:26:f0:89:b1:4b:11:03:7f:a5:
                    4b:3a:65:39:67:83:df:17:e8:cb:65:ef:d5:e9:e7:
                    e9:6f:e6:fe:b2:d9:30:38:c7:1c:c4:5e:0d:6a:13:
                    dc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:03:45:3A:B9:48:29:55:83:B4:86:19:E4:EC:B4:50:D3:25:A7:B0
            X509v3 Authority Key Identifier:
                keyid:82:5A:88:49:C0:92:12:BC:07:89:BE:09:7E:18:62:29:D4:73:31:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b56a14d22b6672230c805b48453f25f13c7969b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9ace7fe-43a1-42e0-b049-fabd6bcae6ad/9ca528af5d5623275f72b6172e07b1e72fb64df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9ace7fe-43a1-42e0-b049-fabd6bcae6ad/2b56a14d22b6672230c805b48453f25f13c7969b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:fc:94:58:78:18:d0:0f:53:05:59:c5:08:38:db:32:7d:bb:
         88:c2:3d:1f:97:fe:99:a8:a4:35:06:d9:84:b2:fc:bb:b6:df:
         60:09:2b:9a:da:52:0c:42:20:01:57:81:f2:a4:cd:5d:30:05:
         05:ce:be:a4:4b:76:2b:9a:fb:c9:3b:b6:e4:49:e7:16:2a:16:
         96:1e:b9:1d:63:17:35:8a:6b:57:95:be:40:78:05:f6:ed:7f:
         05:b1:33:64:f8:a4:e1:cb:44:76:c0:7f:16:fc:60:1f:6f:22:
         a2:06:15:5c:1a:ba:85:04:ce:47:24:d7:d6:b1:8f:80:e0:88:
         bd:c3:a3:c7:e6:fe:13:34:02:f1:33:59:80:78:bf:53:90:59:
         07:ad:1d:18:39:e2:73:08:c9:95:78:b1:d1:ba:f1:c6:de:8d:
         ab:a4:f9:fa:2c:30:ce:c2:d5:72:7b:4b:e4:a8:2e:27:4a:81:
         ab:6b:f7:00:c9:ec:bc:1a:39:89:c4:2a:99:c9:6d:f3:f1:f1:
         67:7c:50:67:f4:9c:59:9d:21:f7:92:d4:de:4b:b3:2e:4d:9e:
         27:1a:dd:a0:92:94:b0:a2:4c:11:55:97:53:4b:e1:6c:4b:7c:
         9d:0b:96:69:34:b1:cf:1d:a9:a9:13:c7:4d:9a:24:c7:2e:81:
         ac:0e:3b:fc
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEcMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMmI1
NmExNGQyMmI2NjcyMjMwYzgwNWI0ODQ1M2YyNWYxM2M3OTY5YjAeFw0yMjEwMTEy
MTAxNTdaFw0yNDEwMTQyMTAxNTdaMDMxMTAvBgNVBAMTKDljYTUyOGFmNWQ1NjIz
Mjc1ZjcyYjYxNzJlMDdiMWU3MmZiNjRkZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCJfPK9l0FSgFBrmPJu0pRNkJapSpyQbRHPJt6pd8593kWxQyA0
tpkyNm28FEu5yNzwlLzWfDWklkXSQGcsIYISdzyWWL0aFgnFYPPGGtBzLmPWNCOD
8b6YnngkNOEYP+GSYb+ju7Ffk/HaP6dxmk6Ua+3sGUTTdbZgZmKf2kW8AL+lMk/i
MDdJ45jALAOrg7Ir8VMN8tR9AR/PWrs0Zthu+Bb2/dTl+csV+qbVomTppLStME5s
dITEQhpgpDDxVVxot2I9ywfPfGsQG3y45YDZkisSsjl7SybwibFLEQN/pUs6ZTln
g98X6Mtl79Xp5+lv5v6y2TA4xxzEXg1qE9z9AgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQU3wNFOrlIKVWDtIYZ5Oy0UNMlp7AwHwYDVR0jBBgwFoAUglqIScCSErwHib4J
fhhiKdRzMRYwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8yYjU2YTE0
ZDIyYjY2NzIyMzBjODA1YjQ4NDUzZjI1ZjEzYzc5NjliLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9hOWFjZTdmZS00M2ExLTQyZTAtYjA0OS1mYWJkNmJj
YWU2YWQvOWNhNTI4YWY1ZDU2MjMyNzVmNzJiNjE3MmUwN2IxZTcyZmI2NGRmMi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2E5YWNlN2ZlLTQzYTEtNDJlMC1iMDQ5LWZhYmQ2
YmNhZTZhZC8yYjU2YTE0ZDIyYjY2NzIyMzBjODA1YjQ4NDUzZjI1ZjEzYzc5Njli
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCtb0QMA0GCSqGSIb3DQEBCwUAA4IBAQBf/JRYeBjQD1MFWcUI
ONsyfbuIwj0fl/6ZqKQ1BtmEsvy7tt9gCSua2lIMQiABV4HypM1dMAUFzr6kS3Yr
mvvJO7bkSecWKhaWHrkdYxc1imtXlb5AeAX27X8FsTNk+KThy0R2wH8W/GAfbyKi
BhVcGrqFBM5HJNfWsY+A4Ii9w6PH5v4TNALxM1mAeL9TkFkHrR0YOeJzCMmVeLHR
uvHG3o2rpPn6LDDOwtVye0vkqC4nSoGra/cAyey8GjmJxCqZyW3z8fFnfFBn9JxZ
nSH3ktTeS7MuTZ4nGt2gkpSwokwRVZdTS+FsS3ydC5ZpNLHPHampE8dNmiTHLoGs
Djv8
-----END CERTIFICATE-----
Generated at Mon Sep 18 21:49:17 2023 by rpki-client on console-ams.rpki-client.org