Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/2586d21d8e1fff4d963f17ad3df36edf765b4f7e.roa
File:                     2586d21d8e1fff4d963f17ad3df36edf765b4f7e.roa (raw, json)
Hash identifier:          SeL2eo8c/5Ok0qunxBMQDrrCslgBkoZM0CDvpnytBU8=
Subject key identifier:   EA:86:0B:73:49:C9:1C:70:BE:4A:A7:27:24:5E:D7:EC:5A:13:22:66
Certificate issuer:       /CN=49e352d14129558da17025255f13358c2326ee25
Certificate serial:       0F190E
Authority key identifier: 4E:B4:7D:BC:51:1F:32:83:F0:43:95:DB:EC:91:DE:21:A7:A1:90:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49e352d14129558da17025255f13358c2326ee25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/2586d21d8e1fff4d963f17ad3df36edf765b4f7e.roa
Signing time:             Wed 21 Jul 2021 18:06:36 +0000
ROA not before:           Wed 21 Jul 2021 03:00:00 +0000
ROA not after:            Fri 21 Jul 2023 03:00:00 +0000
asID:                     267905
IP address blocks:        45.178.48.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989454 (0xf190e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e352d14129558da17025255f13358c2326ee25
        Validity
            Not Before: Jul 21 03:00:00 2021 GMT
            Not After : Jul 21 03:00:00 2023 GMT
        Subject: CN=2586d21d8e1fff4d963f17ad3df36edf765b4f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:3a:b1:3f:8c:4e:ab:cc:87:95:87:5a:3d:
                    bb:e7:83:a7:90:63:54:08:38:85:46:24:55:56:bc:
                    88:4a:04:20:df:ed:be:f2:cf:71:2c:f2:5a:d5:ea:
                    5f:5c:d8:1d:e2:4a:02:a7:bd:33:88:f1:9c:45:74:
                    54:74:19:97:16:92:29:c1:27:fa:54:54:19:7e:14:
                    31:6e:cc:64:5f:8f:0b:59:98:db:c0:0a:84:09:5f:
                    c1:cf:9d:03:e9:43:d5:72:7d:db:a1:35:bb:2d:90:
                    56:3c:69:f8:c5:49:4c:11:bf:b7:c3:f8:45:74:7c:
                    bd:56:aa:bd:36:a0:82:73:af:4d:63:53:15:75:82:
                    ac:10:75:10:01:dd:56:bc:a3:a5:f2:03:24:f2:6b:
                    52:c1:41:b4:15:51:67:7d:57:69:35:7c:ca:58:ca:
                    de:e4:d3:00:bf:d0:78:e4:f6:16:80:f6:5e:1e:08:
                    35:e1:e1:72:4b:54:93:b6:38:85:a5:6a:95:1d:ec:
                    6c:5c:d9:2f:72:d8:7c:3f:1e:06:b8:d1:20:68:90:
                    5b:9c:1b:46:5f:eb:66:8c:ae:1c:77:64:0d:fe:5a:
                    4b:1f:87:d7:b4:07:3a:d8:fb:73:46:89:bf:b9:f0:
                    f4:9d:38:4b:3b:b2:7f:56:c4:0c:8d:29:d2:be:97:
                    60:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:86:0B:73:49:C9:1C:70:BE:4A:A7:27:24:5E:D7:EC:5A:13:22:66
            X509v3 Authority Key Identifier:
                keyid:4E:B4:7D:BC:51:1F:32:83:F0:43:95:DB:EC:91:DE:21:A7:A1:90:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49e352d14129558da17025255f13358c2326ee25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/2586d21d8e1fff4d963f17ad3df36edf765b4f7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/49e352d14129558da17025255f13358c2326ee25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:7e:ca:89:af:85:7e:01:46:c2:62:d6:23:50:32:a4:be:72:
         82:91:3d:6c:53:6a:cb:e1:bb:40:93:51:c1:10:4c:d7:d2:0b:
         af:cb:30:73:0c:59:43:3f:b8:de:0f:21:6e:b4:8a:ac:a5:43:
         1b:70:f2:f5:93:36:05:78:f6:3f:79:8e:97:83:90:ef:16:31:
         15:43:55:dc:1d:6c:40:b3:7b:0b:c0:23:01:bc:16:16:6a:e3:
         b6:4c:6b:c9:2a:65:2d:b0:fc:89:3e:4b:86:27:f8:41:6e:cb:
         2f:d2:86:6f:87:4e:7d:54:b0:64:89:d7:b2:63:f9:40:e8:cb:
         cd:3c:12:cf:24:3e:2c:b8:99:8e:ea:6e:8d:53:7e:97:c2:c8:
         5e:ce:a2:96:03:9e:ab:ff:72:ac:26:51:91:15:d2:a0:ad:2a:
         5f:7c:74:07:51:e5:34:07:1d:45:d9:b3:46:3b:9b:6d:0e:88:
         83:dc:c9:0c:bb:b6:ed:24:56:98:a2:26:35:f4:f5:60:d3:19:
         4d:68:85:30:85:6b:d4:fd:c0:32:aa:79:b7:27:9d:b2:2b:61:
         a6:6b:aa:5e:5a:2d:75:c6:af:2d:60:b7:b2:ac:a9:94:48:a8:
         ea:e0:58:c1:7e:4b:ee:6d:74:b8:57:52:81:b1:97:c1:47:e3:
         6e:9f:ba:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 09:11:45 2023 by rpki-client on console-fra.rpki-client.org