Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3c700a6f14903492d1dfab344ed07d714a944d19.roa
File:                     3c700a6f14903492d1dfab344ed07d714a944d19.roa (raw, json)
Hash identifier:          XkAPdaLlceNnGQ5gst4UtX5R8aUvX92kWFLvrjrZkPM=
Subject key identifier:   44:D8:C9:F3:ED:81:2C:06:47:18:F5:37:9B:9B:7C:E7:A2:F9:F4:52
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1D5EAC
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3c700a6f14903492d1dfab344ed07d714a944d19.roa
Signing time:             Wed 09 Nov 2022 16:19:42 +0000
ROA not before:           Thu 06 May 2021 03:00:00 +0000
ROA not after:            Thu 11 May 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        179.1.0.0/21 maxlen: 24
                          179.1.8.0/21 maxlen: 24
                          179.1.6.0/24 maxlen: 24
                          179.1.8.0/24 maxlen: 24
                          179.1.9.0/24 maxlen: 24
                          179.1.10.0/24 maxlen: 24
                          179.1.14.0/24 maxlen: 24
                          179.1.16.0/20 maxlen: 24
                          179.1.32.0/20 maxlen: 24
                          179.1.48.0/20 maxlen: 24
                          179.1.64.0/20 maxlen: 24
                          179.1.80.0/20 maxlen: 24
                          179.1.69.0/24 maxlen: 24
                          179.1.66.0/24 maxlen: 24
                          179.1.67.0/24 maxlen: 24
                          179.1.68.0/24 maxlen: 24
                          179.1.70.0/24 maxlen: 24
                          179.1.73.0/24 maxlen: 24
                          179.1.76.0/24 maxlen: 24
                          179.1.77.0/24 maxlen: 24
                          179.1.80.0/24 maxlen: 24
                          179.1.81.0/24 maxlen: 24
                          179.1.82.0/24 maxlen: 24
                          179.1.89.0/24 maxlen: 24
                          179.1.91.0/24 maxlen: 24
                          179.1.92.0/22 maxlen: 24
                          179.1.96.0/20 maxlen: 24
                          179.1.112.0/20 maxlen: 24
                          179.1.115.0/24 maxlen: 24
                          179.1.127.0/24 maxlen: 24
                          179.1.128.0/24 maxlen: 24
                          179.1.129.0/24 maxlen: 24
                          179.1.130.0/24 maxlen: 24
                          179.1.131.0/24 maxlen: 24
                          179.1.132.0/24 maxlen: 24
                          179.1.133.0/24 maxlen: 24
                          179.1.134.0/24 maxlen: 24
                          179.1.135.0/24 maxlen: 24
                          179.1.192.0/18 maxlen: 24
                          179.1.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1924780 (0x1d5eac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: May  6 03:00:00 2021 GMT
            Not After : May 11 03:00:00 2023 GMT
        Subject: CN=3c700a6f14903492d1dfab344ed07d714a944d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:db:4d:2f:c2:74:73:74:b6:56:39:51:1f:6a:
                    8f:53:d1:6b:59:57:29:4f:87:5b:35:f1:e0:58:52:
                    df:c4:8c:41:ef:2a:3a:97:4a:67:bf:51:8e:91:2d:
                    b9:7d:c8:5c:00:bb:f1:2f:0a:1c:85:11:67:75:5b:
                    cb:5c:ac:4d:ea:55:5a:29:a0:b4:41:42:0f:63:7e:
                    14:fa:75:f9:c7:f7:bd:b4:28:0e:eb:8c:f3:4c:e1:
                    06:ae:0b:c9:75:2c:54:47:8d:9f:c4:f6:a4:a4:0a:
                    3e:76:f9:c9:9c:cf:53:b1:b4:be:2a:82:4d:71:b1:
                    9b:8e:90:ea:50:e6:61:87:b9:e6:61:a2:52:a7:a0:
                    2d:84:c8:ee:56:0f:70:5f:ba:86:24:9a:f4:06:f9:
                    69:7b:9c:1c:38:4a:d6:2e:20:2f:3a:44:a6:ea:f8:
                    32:4d:39:34:6a:f1:ab:6f:31:4a:f8:6f:53:f9:15:
                    7d:1d:0e:55:67:2b:dc:e0:4b:dc:24:f1:92:c2:1f:
                    b1:a2:f0:52:27:74:0c:77:19:2d:25:41:85:fd:fd:
                    0d:c9:98:c9:d1:f9:3a:e6:d4:26:10:e6:75:e4:30:
                    bb:cf:e7:e3:6a:f5:a8:cf:8f:56:72:13:44:cb:a2:
                    cc:1f:cc:ca:2d:77:cd:8e:2e:92:c5:66:b8:d6:2c:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D8:C9:F3:ED:81:2C:06:47:18:F5:37:9B:9B:7C:E7:A2:F9:F4:52
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3c700a6f14903492d1dfab344ed07d714a944d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.0.0-179.1.135.255
                  179.1.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         56:b5:1c:d5:d4:21:68:92:0c:eb:e3:2c:58:19:62:9c:fa:d3:
         40:e4:3f:57:ae:f9:48:39:e2:64:f0:9b:d3:14:0e:0b:12:f6:
         1a:5c:8b:6e:94:d7:f8:8d:bb:63:6d:6f:f0:03:af:3e:31:2a:
         12:a0:59:bd:65:72:71:e3:8e:df:8a:8f:eb:1a:c6:7d:fa:dd:
         78:c0:ca:22:78:0d:92:93:08:95:a8:9d:01:f0:1a:8e:e1:94:
         ee:86:92:ab:23:f9:9f:cd:fd:4e:f8:d4:83:15:4d:50:fb:e0:
         86:20:65:a8:c0:03:62:5a:ac:45:d2:d4:ff:59:bc:41:10:47:
         82:64:47:ea:0d:f2:3d:64:6d:47:2e:84:c8:43:73:f9:39:b4:
         27:bd:85:50:ea:ce:5c:65:99:82:89:15:64:80:f6:ce:00:cd:
         e8:99:12:67:88:0c:72:8f:e0:d2:be:3f:eb:24:39:bd:da:b9:
         9d:41:6a:2f:40:21:43:8c:38:46:ad:8c:77:c0:83:27:ea:93:
         71:8a:64:a6:95:72:cd:ff:df:fc:3c:a6:f2:ee:0f:ea:97:86:
         3a:e5:e8:88:15:f9:a4:fe:b7:cb:ea:b8:89:ee:2d:71:a7:14:
         79:5f:bf:05:b1:f1:9a:54:58:02:50:01:87:81:50:a9:55:b7:
         e0:c1:f9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org