Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/28da74e955e972d548ff040c9416d27fbdaa4e94.roa
File:                     28da74e955e972d548ff040c9416d27fbdaa4e94.roa (raw, json)
Hash identifier:          4Iw/cRSeAkKS0dpiP7SP8hvcKReh77sT274WbadOSdw=
Subject key identifier:   FA:90:42:FB:25:02:67:91:0C:53:90:36:5E:77:1D:C5:E3:C2:D9:AA
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1AF374
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/28da74e955e972d548ff040c9416d27fbdaa4e94.roa
Signing time:             Tue 30 Aug 2022 20:20:40 +0000
ROA not before:           Tue 11 May 2021 03:00:00 +0000
ROA not after:            Thu 11 May 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        179.1.5.0/24 maxlen: 24
                          179.1.11.0/24 maxlen: 24
                          179.1.13.0/24 maxlen: 24
                          179.1.69.0/24 maxlen: 24
                          179.1.91.0/24 maxlen: 24
                          179.1.89.0/24 maxlen: 24
                          179.1.70.0/24 maxlen: 24
                          179.1.131.0/24 maxlen: 24
                          179.1.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1766260 (0x1af374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: May 11 03:00:00 2021 GMT
            Not After : May 11 03:00:00 2023 GMT
        Subject: CN=28da74e955e972d548ff040c9416d27fbdaa4e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:8f:ce:4d:3b:cb:e7:9e:1b:f9:10:9c:1a:
                    33:dc:3e:ce:76:0d:8c:41:d8:ec:5d:b2:99:d1:e5:
                    c5:b4:eb:b3:dc:3a:24:77:e9:71:4b:0e:86:b6:af:
                    60:57:d1:ab:a9:4b:dd:3d:87:18:49:2c:80:ee:b2:
                    92:16:97:c9:86:8d:73:00:47:00:c4:ec:d3:2e:31:
                    2b:7b:65:18:26:bf:c4:d8:ba:87:c5:2f:e2:0c:0d:
                    60:b3:1e:55:40:be:1c:7b:e5:dc:11:1f:8b:c0:aa:
                    4e:9e:cb:66:ff:11:06:2d:6d:4a:69:0c:6a:a8:89:
                    3a:2f:5a:8e:66:7a:66:8f:6e:0c:57:d8:29:8b:ec:
                    79:1e:91:ed:bf:86:3b:dd:c6:f9:22:f3:32:75:40:
                    16:69:c4:44:50:5e:7c:af:35:2d:6e:e4:45:73:07:
                    0e:a6:cd:28:ff:16:c2:bc:10:98:5f:57:b7:bb:39:
                    13:2d:2c:ac:20:5f:d4:32:8e:ec:2d:42:dd:4b:d7:
                    3d:1c:8b:55:5e:66:fb:93:55:b7:7b:c3:e3:9d:e6:
                    6e:3a:7f:e1:a5:29:2f:9b:0a:1c:e3:52:0f:32:83:
                    ab:7e:7e:b0:00:45:10:3a:26:7c:54:8f:5d:eb:a7:
                    43:69:aa:3f:31:28:40:11:14:ed:64:78:b1:54:2b:
                    6f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:90:42:FB:25:02:67:91:0C:53:90:36:5E:77:1D:C5:E3:C2:D9:AA
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/28da74e955e972d548ff040c9416d27fbdaa4e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.5.0/24
                  179.1.11.0/24
                  179.1.13.0/24
                  179.1.69.0-179.1.70.255
                  179.1.89.0/24
                  179.1.91.0/24
                  179.1.131.0-179.1.132.255

    Signature Algorithm: sha256WithRSAEncryption
         73:35:01:b9:b8:01:2b:1b:a6:bb:4d:0e:db:0c:55:1b:9a:b5:
         e9:fd:a2:ac:1d:06:55:ca:85:c5:1d:1f:c2:05:e9:59:d5:2a:
         ca:64:60:4a:36:b9:3a:d4:21:61:1b:b3:1e:2d:1f:06:7e:df:
         85:b0:b9:fe:3b:d1:02:b2:39:44:11:74:ea:f6:70:c0:99:72:
         42:10:69:5a:f4:72:41:12:c1:84:c1:ad:5e:1c:36:3e:be:ce:
         54:10:13:a4:52:23:bc:6b:27:a8:9c:01:62:f2:bd:8e:94:8b:
         83:7a:54:37:70:b3:5e:ae:5c:1c:fc:cb:a4:9d:2e:90:be:8f:
         07:68:5c:c8:de:c8:0a:44:ee:45:09:44:bc:e6:c7:99:bb:76:
         50:7a:13:50:cf:e4:61:8a:c8:bd:39:f7:2d:48:ea:60:c6:6f:
         81:4b:65:89:05:51:dc:a9:42:9b:53:f3:50:c6:50:ce:e0:36:
         cf:48:72:a2:df:63:58:ed:c0:33:de:7b:8d:66:42:36:1b:99:
         4f:d9:88:cc:7d:3d:e4:2a:63:bf:6d:34:54:f4:1d:ac:55:59:
         b0:b4:31:b9:8d:64:02:79:31:dd:bc:6c:09:fa:b7:31:89:ac:
         e3:ce:9f:a8:97:d9:05:0d:0d:cd:43:59:45:1c:bb:bc:4c:7c:
         50:db:3c:19
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgIDGvN0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjEwNTEx
MDMwMDAwWhcNMjMwNTExMDMwMDAwWjAzMTEwLwYDVQQDEygyOGRhNzRlOTU1ZTk3
MmQ1NDhmZjA0MGM5NDE2ZDI3ZmJkYWE0ZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmHSPzk07y+eeG/kQnBoz3D7Odg2MQdjsXbKZ0eXFtOuz3Dok
d+lxSw6Gtq9gV9GrqUvdPYcYSSyA7rKSFpfJho1zAEcAxOzTLjEre2UYJr/E2LqH
xS/iDA1gsx5VQL4ce+XcER+LwKpOnstm/xEGLW1KaQxqqIk6L1qOZnpmj24MV9gp
i+x5HpHtv4Y73cb5IvMydUAWacREUF58rzUtbuRFcwcOps0o/xbCvBCYX1e3uzkT
LSysIF/UMo7sLULdS9c9HItVXmb7k1W3e8PjneZuOn/hpSkvmwoc41IPMoOrfn6w
AEUQOiZ8VI9d66dDaao/MShAERTtZHixVCtvSQIDAQABo4ICjzCCAoswHQYDVR0O
BBYEFPqQQvslAmeRDFOQNl53HcXjwtmqMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5LzI4ZGE3NGU5NTVlOTcyZDU0OGZmMDQwYzk0MTZkMjdmYmRhYTRlOTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBTBggrBgEFBQcBBwEB/wRE
MEIwQAQCAAEwOgMEALMBBQMEALMBCwMEALMBDTAMAwQAswFFAwQAswFGAwQAswFZ
AwQAswFbMAwDBACzAYMDBACzAYQwDQYJKoZIhvcNAQELBQADggEBAHM1Abm4ASsb
prtNDtsMVRuaten9oqwdBlXKhcUdH8IF6VnVKspkYEo2uTrUIWEbsx4tHwZ+34Ww
uf470QKyOUQRdOr2cMCZckIQaVr0ckESwYTBrV4cNj6+zlQQE6RSI7xrJ6icAWLy
vY6Ui4N6VDdws16uXBz8y6SdLpC+jwdoXMjeyApE7kUJRLzmx5m7dlB6E1DP5GGK
yL059y1I6mDGb4FLZYkFUdypQptT81DGUM7gNs9IcqLfY1jtwDPee41mQjYbmU/Z
iMx9PeQqY79tNFT0HaxVWbC0MbmNZAJ5Md28bAn6tzGJrOPOn6iX2QUNDc1DWUUc
u7xMfFDbPBk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org