Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/0bbcc863b86abdaf087b99027146cb3110ba803f.roa
File:                     0bbcc863b86abdaf087b99027146cb3110ba803f.roa (raw, json)
Hash identifier:          b5TZlpS1YG2vcEq8grJT7xosZyn8+ib+RJzSDUPnA5o=
Subject key identifier:   B1:52:77:9B:EA:3C:E3:3A:BF:8B:02:89:01:EE:C4:6D:2C:49:78:7D
Certificate issuer:       /CN=26f72b79edb0cf7a212cac55ffae543643472e0d
Certificate serial:       23DF6C
Authority key identifier: DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26f72b79edb0cf7a212cac55ffae543643472e0d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/0bbcc863b86abdaf087b99027146cb3110ba803f.roa
Signing time:             Thu 07 Sep 2023 15:58:31 +0000
ROA not before:           Wed 06 Sep 2023 15:58:31 +0000
ROA not after:            Sun 07 Sep 2025 15:58:31 +0000
asID:                     264740
IP address blocks:        170.239.180.0/22 maxlen: 22
                          2803:f4c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2350956 (0x23df6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f72b79edb0cf7a212cac55ffae543643472e0d
        Validity
            Not Before: Sep  6 15:58:31 2023 GMT
            Not After : Sep  7 15:58:31 2025 GMT
        Subject: CN=0bbcc863b86abdaf087b99027146cb3110ba803f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:bf:bd:93:2e:2c:05:57:6c:98:1b:60:dd:
                    31:75:16:72:10:fa:eb:b7:de:d5:06:12:9c:25:36:
                    6c:89:60:88:f2:ae:8b:4a:00:92:40:68:30:d3:38:
                    9d:6e:27:8e:22:38:e9:5e:3e:a4:27:cc:da:89:e0:
                    0e:6f:1e:4e:d5:77:b5:33:0c:31:42:81:cd:40:c5:
                    1a:a1:44:e0:65:61:eb:ba:7c:72:37:a1:42:16:89:
                    aa:3c:11:61:77:b9:55:77:8f:16:ec:01:55:4c:83:
                    be:e3:89:34:f0:a2:7c:67:d0:12:db:bf:f8:4a:31:
                    e4:68:a0:a7:93:b4:8f:a5:a2:b6:aa:25:c1:59:35:
                    49:62:63:7c:db:e0:b5:30:5f:59:3b:ab:d1:97:d3:
                    bf:e4:df:2a:76:2b:93:b9:2d:28:e4:66:04:ec:dc:
                    06:c4:b7:ec:b5:64:a2:6e:4c:d5:e6:d5:34:9b:93:
                    7c:f0:3f:36:75:4f:33:3a:2b:81:7f:b1:e1:42:f9:
                    f3:1c:73:55:f0:1f:9e:fc:7b:83:dd:9d:3b:b2:aa:
                    d4:d6:d1:9d:f7:4a:f5:86:b6:8e:17:11:aa:67:bd:
                    b7:b6:33:21:44:b6:ed:77:11:17:3c:84:58:4b:04:
                    6f:f3:b1:51:f4:fb:b1:56:66:38:c0:2b:bc:f1:91:
                    99:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:52:77:9B:EA:3C:E3:3A:BF:8B:02:89:01:EE:C4:6D:2C:49:78:7D
            X509v3 Authority Key Identifier:
                keyid:DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26f72b79edb0cf7a212cac55ffae543643472e0d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/0bbcc863b86abdaf087b99027146cb3110ba803f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/26f72b79edb0cf7a212cac55ffae543643472e0d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.180.0/22
                IPv6:
                  2803:f4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:38:cc:7d:a6:43:c8:b2:eb:03:82:04:1f:92:f4:ed:82:73:
         ac:98:81:16:68:a6:fb:6a:83:5d:c2:b6:6d:9b:c1:7b:53:26:
         cb:29:0a:11:0b:1c:99:63:c5:0f:8a:6e:f5:fc:a6:21:78:1d:
         89:ae:ac:59:ac:13:97:5e:d3:06:ac:4b:53:15:68:c7:d8:ec:
         e0:2a:83:b5:74:d9:39:1e:7f:83:cd:83:cc:94:62:d5:4e:c5:
         8a:51:b1:a4:03:e5:40:ad:33:0a:5e:86:07:0e:9e:8c:f8:0e:
         99:ca:eb:6d:3d:5a:79:39:fb:b2:63:23:0e:a0:67:20:16:1a:
         f9:8a:27:9a:05:ab:0d:9d:e7:78:aa:f5:4a:44:84:3b:d5:15:
         2b:29:57:82:c5:ac:43:dd:73:ef:ef:8b:e6:fb:2e:33:c3:61:
         91:39:44:25:d5:34:2d:ed:60:bd:7e:88:35:94:7a:4b:c4:4e:
         89:0d:66:95:93:8a:3b:c2:d3:0c:63:a1:62:b5:1e:53:fb:37:
         49:2f:89:8e:9d:21:a4:8e:b4:1f:11:eb:ce:83:9e:ce:97:17:
         3c:2b:f8:91:dc:ee:48:3f:47:78:ff:62:9e:97:1a:94:01:36:
         fa:76:18:0f:cf:da:86:36:9e:d5:b4:25:70:b1:39:f9:d0:a2:
         bb:13:de:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----