Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/a9ca5539a610c2e4dea61356b8a799e8933bf05c.roa
File:                     a9ca5539a610c2e4dea61356b8a799e8933bf05c.roa (raw, json)
Hash identifier:          wvZCFnE/SPjfw+A0vAfPtQR2urOpu6st4wHJKKIKZfk=
Subject key identifier:   3E:0F:07:20:B8:FD:84:36:A4:99:87:BC:6F:6F:69:79:5A:6A:84:EC
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1844B6
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/a9ca5539a610c2e4dea61356b8a799e8933bf05c.roa
Signing time:             Fri 20 May 2022 14:12:59 +0000
ROA not before:           Tue 11 May 2021 03:00:00 +0000
ROA not after:            Thu 11 May 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        179.1.5.0/24 maxlen: 24
                          179.1.11.0/24 maxlen: 24
                          179.1.13.0/24 maxlen: 24
                          179.1.91.0/24 maxlen: 24
                          179.1.89.0/24 maxlen: 24
                          179.1.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1590454 (0x1844b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: May 11 03:00:00 2021 GMT
            Not After : May 11 03:00:00 2023 GMT
        Subject: CN=a9ca5539a610c2e4dea61356b8a799e8933bf05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:f9:c6:59:27:80:4e:9c:b1:2f:6a:49:bd:
                    a8:a7:c2:0c:2e:da:dc:b0:5d:4e:95:0c:df:9b:01:
                    0c:99:60:28:07:a6:1d:0b:86:3b:f6:07:09:1a:8a:
                    a8:05:0d:1f:ac:a9:d9:b8:83:68:96:89:9c:4c:5c:
                    59:eb:fd:6a:70:c3:aa:33:e7:6a:ec:a4:77:6e:33:
                    09:60:99:88:0d:11:04:65:dd:37:de:7d:7c:63:13:
                    30:bc:14:27:db:2d:a2:7f:be:9d:1f:84:76:5d:1a:
                    6b:27:75:dc:d4:a1:fe:d3:a0:1e:6f:b3:50:53:37:
                    63:40:50:50:b6:8c:54:dc:f8:00:9d:dc:5b:68:6f:
                    b1:57:c6:98:20:59:51:95:78:a2:1b:28:cf:96:a3:
                    ed:ee:ac:5b:b6:0c:4b:64:70:00:3a:b3:1e:38:68:
                    b8:25:cd:e4:f4:99:9a:83:e6:56:66:2b:d9:71:f0:
                    d0:c2:29:7e:92:26:3f:43:3f:b1:79:97:07:fa:2d:
                    f0:80:1f:c1:f5:c6:fa:89:cc:71:8e:a6:6f:f6:01:
                    5b:ff:6a:50:69:97:4a:e5:8a:15:18:48:2b:b3:d3:
                    f7:b8:18:1b:83:ac:0d:34:a2:54:a6:6f:9c:60:75:
                    53:96:00:0e:3e:18:2f:7c:85:f1:fa:c5:9a:d5:cf:
                    b5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0F:07:20:B8:FD:84:36:A4:99:87:BC:6F:6F:69:79:5A:6A:84:EC
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/a9ca5539a610c2e4dea61356b8a799e8933bf05c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.5.0/24
                  179.1.11.0/24
                  179.1.13.0/24
                  179.1.70.0/24
                  179.1.89.0/24
                  179.1.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:6c:f7:3b:e4:b2:5a:f6:6a:84:b7:a3:6d:4a:58:aa:ab:38:
         ce:f4:9b:91:a9:b7:90:41:b8:28:82:30:cc:17:ff:6f:0d:0f:
         98:6b:9f:a9:3a:69:fe:d5:82:e3:2f:d2:c9:6f:ba:a2:83:73:
         26:1c:d2:bf:dd:f8:07:ac:0f:dd:1f:f1:d0:60:c7:69:47:2e:
         2d:9c:0e:de:01:24:92:a4:66:45:dc:50:63:8d:a8:1b:95:36:
         c8:45:12:9a:8d:06:c0:44:16:b8:aa:8e:42:73:9f:5f:f8:89:
         93:e5:79:e0:8f:f5:bd:a0:e3:f2:aa:2e:db:f7:38:e0:55:77:
         f1:f5:73:7e:8e:1c:19:ac:78:aa:83:02:c5:45:ef:99:8a:b3:
         b9:c8:6b:10:9d:8f:8b:80:01:06:88:34:68:8a:36:e6:21:e8:
         ab:a0:81:e0:d1:dd:30:10:bd:1c:d9:0c:b6:f6:10:a4:ea:b1:
         0b:13:73:1b:70:9c:f0:b2:46:d3:76:d3:ba:cc:dc:f4:11:b3:
         6d:74:6c:89:0a:75:ff:0a:55:ba:6d:78:26:b5:f6:cc:2f:8c:
         04:3b:f4:ec:22:82:b8:93:81:6c:11:45:6c:42:4c:73:32:30:
         e4:09:f6:9c:82:c7:b5:32:eb:e7:7a:fb:6c:34:67:13:fc:42:
         65:bc:90:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org