Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ad8615b6-c55e-4129-9de3-2eb73e1cede7/7559f7c2cbfe52529c0a1e19c4257e2b072b2d27.roa
File:                     7559f7c2cbfe52529c0a1e19c4257e2b072b2d27.roa (raw, json)
Hash identifier:          G/Z5eKutgvjGz+zFgLlAF9eXI8T2RIOoIaecaKYRfn8=
Subject key identifier:   AF:F5:63:C0:93:12:AA:CE:22:D9:42:2D:14:6B:B3:F1:ED:53:23:07
Certificate issuer:       /CN=13c901d01480b53fbb495710d0bce80433642ecd
Certificate serial:       0B2ED4
Authority key identifier: 02:5E:22:17:40:09:02:B6:24:F9:29:13:88:54:0E:01:15:6D:50:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13c901d01480b53fbb495710d0bce80433642ecd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ad8615b6-c55e-4129-9de3-2eb73e1cede7/7559f7c2cbfe52529c0a1e19c4257e2b072b2d27.roa
Signing time:             Mon 06 Sep 2021 21:58:24 +0000
ROA not before:           Mon 06 Sep 2021 03:00:00 +0000
ROA not after:            Wed 06 Sep 2023 03:00:00 +0000
asID:                     266838
IP address blocks:        45.238.248.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732884 (0xb2ed4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13c901d01480b53fbb495710d0bce80433642ecd
        Validity
            Not Before: Sep  6 03:00:00 2021 GMT
            Not After : Sep  6 03:00:00 2023 GMT
        Subject: CN=7559f7c2cbfe52529c0a1e19c4257e2b072b2d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:3b:a0:d7:96:12:cc:45:99:2a:e2:e2:08:
                    ac:29:8a:eb:d6:ee:eb:b7:30:29:d2:4e:e3:cb:3a:
                    3f:d0:70:b7:43:95:37:8a:9e:a1:ff:3e:1b:a6:2c:
                    81:97:58:01:56:ea:0d:5f:c1:72:d9:fc:84:b9:50:
                    b6:c0:8b:5b:04:51:8a:54:e6:fc:07:20:31:9c:f4:
                    06:c8:bf:11:f4:38:c0:57:e8:5e:41:72:cd:cc:3b:
                    fc:e5:19:5b:3a:06:e0:1c:fc:fc:a8:bb:82:fb:47:
                    8d:0b:72:28:0d:25:b7:3a:28:79:b3:70:67:df:5c:
                    e3:ee:a1:1d:94:01:5c:0a:3b:b0:78:2f:0f:72:2e:
                    37:60:8e:5b:57:45:70:58:4c:63:7c:d5:b5:66:9d:
                    4a:da:af:ae:99:c3:78:52:85:c0:ee:e8:10:c3:18:
                    51:34:cd:99:23:d8:71:85:0e:ea:d4:1a:f9:7a:60:
                    70:f7:d4:bc:0c:25:b6:ad:be:58:6c:cf:5a:0c:ed:
                    60:75:2c:b6:44:01:2e:ab:c5:49:84:ba:dc:9c:e8:
                    e4:ad:3c:15:c3:34:56:31:c5:6f:33:61:d6:ee:22:
                    c2:48:3d:d5:1c:52:e5:3a:fa:27:e0:e3:33:85:63:
                    53:49:02:3a:3f:91:85:db:a6:81:84:17:85:c0:3b:
                    a8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F5:63:C0:93:12:AA:CE:22:D9:42:2D:14:6B:B3:F1:ED:53:23:07
            X509v3 Authority Key Identifier:
                keyid:02:5E:22:17:40:09:02:B6:24:F9:29:13:88:54:0E:01:15:6D:50:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13c901d01480b53fbb495710d0bce80433642ecd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ad8615b6-c55e-4129-9de3-2eb73e1cede7/7559f7c2cbfe52529c0a1e19c4257e2b072b2d27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ad8615b6-c55e-4129-9de3-2eb73e1cede7/13c901d01480b53fbb495710d0bce80433642ecd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:3b:00:aa:2c:22:32:82:87:fa:aa:c2:50:31:1d:a7:85:1d:
         e8:08:ba:91:16:68:c7:f0:8a:57:8a:5f:93:df:3c:f2:be:6d:
         0f:6a:ca:c7:ec:c0:9c:5a:58:86:2f:08:e8:d3:ba:b7:1b:28:
         c5:70:e5:ef:c7:73:3a:fb:9c:7c:af:0d:30:32:d7:5a:2a:0b:
         9b:30:7c:62:5d:7d:b6:da:e1:f4:ee:2f:8d:6b:1d:60:0d:eb:
         12:cc:a0:84:14:f4:4b:6a:6b:69:30:5b:58:7f:6a:21:10:ab:
         c8:3e:8e:ac:cb:a0:86:4c:c1:9b:5f:31:05:ab:50:ad:73:87:
         a8:e7:72:43:8f:24:4e:c7:8e:bc:50:1b:67:8b:13:37:e7:ff:
         18:86:52:de:61:e8:3e:c8:c3:04:cb:14:be:44:29:58:47:4e:
         80:05:2b:d9:4d:16:87:80:4e:88:8b:f2:b9:23:ea:a0:20:ba:
         e6:99:5a:17:c0:fb:7e:d6:4a:e7:4a:5f:50:5f:44:7c:ca:f4:
         15:d2:32:f4:49:e4:53:76:40:f8:2a:49:0e:8d:24:32:f5:9c:
         73:38:5b:64:e8:c2:15:d6:23:6d:28:8b:40:eb:1b:86:f4:e7:
         ed:b4:fe:aa:32:9b:66:17:c4:21:c9:6c:be:bc:4c:df:22:6e:
         54:1d:9a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 09:11:24 2023 by rpki-client on console-ams.rpki-client.org