Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/516e31af8af9c89457551d8e01acbc2c159797c8.roa
File:                     516e31af8af9c89457551d8e01acbc2c159797c8.roa (raw, json)
Hash identifier:          rVXzOarnOlFoqBNNAn4KLUL8vY5gmVcPJISRaJBRIKw=
Subject key identifier:   46:0E:3A:97:F8:BB:A6:A9:24:28:8D:EF:E0:35:3D:EA:AF:74:34:E8
Certificate issuer:       /CN=8fed3a03fcdc18750a4ae5c970d165b993a49009
Certificate serial:       048717
Authority key identifier: 7D:1C:69:1F:29:90:07:AF:FE:09:E0:67:23:68:18:03:C8:0D:CB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fed3a03fcdc18750a4ae5c970d165b993a49009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/516e31af8af9c89457551d8e01acbc2c159797c8.roa
Signing time:             Mon 04 Oct 2021 04:08:20 +0000
ROA not before:           Thu 30 Sep 2021 03:00:00 +0000
ROA not after:            Mon 17 Apr 2023 03:00:00 +0000
asID:                     271862
IP address blocks:        177.126.48.0/24 maxlen: 24
                          177.126.49.0/24 maxlen: 24
                          177.126.50.0/24 maxlen: 24
                          177.126.51.0/24 maxlen: 24
                          177.126.48.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296727 (0x48717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fed3a03fcdc18750a4ae5c970d165b993a49009
        Validity
            Not Before: Sep 30 03:00:00 2021 GMT
            Not After : Apr 17 03:00:00 2023 GMT
        Subject: CN=516e31af8af9c89457551d8e01acbc2c159797c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:83:2b:63:6d:25:ce:cb:fa:1a:26:b6:2b:
                    8e:4c:c6:4d:e7:f2:62:50:20:c2:d2:e9:9c:2e:e4:
                    4c:b4:60:0b:25:e4:37:c3:ae:9d:b9:49:39:63:53:
                    b2:2e:b5:97:0c:2e:01:09:e8:12:1d:c3:9b:72:21:
                    c2:4f:b2:45:d8:98:61:2e:fb:30:32:31:1a:81:33:
                    98:97:25:33:61:6b:8d:e8:fd:4b:eb:52:3f:b9:6e:
                    43:5f:4d:ed:31:11:29:ad:43:96:76:a6:bf:84:7a:
                    0d:e8:a7:8f:6a:e9:e6:72:29:c4:55:0d:5e:1c:10:
                    98:57:ca:e5:db:2a:5e:e9:bf:92:30:b2:96:d4:2f:
                    08:d3:aa:38:13:2a:31:cd:38:6e:05:38:ef:0d:3e:
                    bc:86:04:a8:2f:ac:35:78:69:10:f5:4c:4c:cd:ef:
                    d0:81:23:af:3c:4d:32:07:13:98:74:2f:d2:ae:e4:
                    9a:79:ef:c2:6c:02:a0:3b:3e:a7:96:42:00:6f:80:
                    59:2d:28:66:11:ec:19:c7:70:03:a8:1f:60:04:cc:
                    c5:03:d5:9c:af:a5:02:20:ca:ee:2c:3c:d4:89:b1:
                    31:00:60:88:81:73:0d:a3:98:8e:07:0f:8f:83:5b:
                    fd:f9:2a:07:91:16:6b:1e:d1:88:5b:1b:12:ec:6c:
                    59:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0E:3A:97:F8:BB:A6:A9:24:28:8D:EF:E0:35:3D:EA:AF:74:34:E8
            X509v3 Authority Key Identifier:
                keyid:7D:1C:69:1F:29:90:07:AF:FE:09:E0:67:23:68:18:03:C8:0D:CB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fed3a03fcdc18750a4ae5c970d165b993a49009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/516e31af8af9c89457551d8e01acbc2c159797c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/8fed3a03fcdc18750a4ae5c970d165b993a49009.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:43:d8:67:95:10:40:6d:a8:e9:4c:a2:71:3a:39:40:a8:bb:
         20:6b:5c:94:04:9a:90:7e:a4:0f:56:84:13:47:8c:a7:38:b5:
         35:04:b2:c7:3d:0a:f1:47:7e:ac:6b:fe:2d:38:d8:27:02:93:
         2f:16:e5:cc:63:ec:56:28:6b:92:32:6d:fc:41:8c:d3:21:b1:
         10:b4:91:a1:48:a2:24:d5:93:b4:a8:c2:09:d6:36:0d:a7:37:
         de:af:d3:21:e8:4e:8d:2a:a1:74:c5:3d:15:04:a4:5a:1b:32:
         08:94:3b:77:e9:cf:1b:f5:af:cc:8d:a1:85:1f:2b:8f:e3:15:
         d8:35:a4:66:3f:60:5f:f1:77:3e:fa:58:4e:26:ee:40:19:57:
         c4:c5:10:f7:15:77:51:24:fd:bc:f9:8f:af:38:20:a5:d7:41:
         20:17:fe:d0:7d:5a:46:0e:7d:9b:ec:63:08:b6:56:f4:c1:62:
         31:f7:28:60:ed:4c:10:6a:03:77:99:44:39:63:c6:41:aa:e1:
         7e:13:7d:3e:c0:5b:0c:64:88:bf:47:c0:c2:96:12:f2:b8:af:
         46:fc:f5:7f:6a:0a:21:d3:7e:b9:d1:14:68:2b:74:74:d1:73:
         d1:70:4f:1c:fd:7a:dc:f3:ee:7d:52:45:f3:32:0a:be:20:34:
         c2:85:94:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org