Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4eb3ba4-f011-4aba-b5dd-92a77eda488b/260c344632e85d02161819e5d66d1820cf279b12.roa
File:                     260c344632e85d02161819e5d66d1820cf279b12.roa (raw, json)
Hash identifier:          Xdvg48kfh8gXz0mDum7fIVWldV3p/IPhx9P4DwiP7iA=
Subject key identifier:   DE:13:4E:18:0E:E8:57:4D:27:1C:B8:C9:5A:42:81:A4:28:36:5D:D0
Certificate issuer:       /CN=4d7b9b266f8b94197f3505ae01f142ff41997214
Certificate serial:       02CC
Authority key identifier: 37:44:F6:E0:CE:DF:EF:AF:4E:FD:EF:07:21:22:E5:C3:B8:7C:2D:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7b9b266f8b94197f3505ae01f142ff41997214.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4eb3ba4-f011-4aba-b5dd-92a77eda488b/260c344632e85d02161819e5d66d1820cf279b12.roa
Signing time:             Sun 13 Feb 2022 19:13:19 +0000
ROA not before:           Sun 13 Feb 2022 03:00:00 +0000
ROA not after:            Tue 13 Feb 2024 03:00:00 +0000
asID:                     271808
IP address blocks:        190.123.76.0/22 maxlen: 24
                          2803:3010::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 12 Feb 2024 07:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7b9b266f8b94197f3505ae01f142ff41997214
        Validity
            Not Before: Feb 13 03:00:00 2022 GMT
            Not After : Feb 13 03:00:00 2024 GMT
        Subject: CN=260c344632e85d02161819e5d66d1820cf279b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:0e:d1:ab:ab:16:7e:08:a6:9e:e5:01:5d:
                    72:96:30:7c:ef:f9:88:2d:83:65:4d:59:d4:0a:dd:
                    03:a5:43:c6:57:09:cd:e3:4c:31:5d:f6:4c:ad:b8:
                    07:d6:fe:d8:8f:22:1c:30:d2:3a:86:24:cf:ad:83:
                    84:47:75:72:0f:f7:9a:15:f2:ca:3e:5d:0b:cd:44:
                    09:5c:13:1b:32:d5:79:0e:13:07:06:10:1f:c2:19:
                    27:5f:0a:b9:b7:fe:e8:fa:15:41:db:3c:a3:82:1d:
                    ac:b4:2f:81:a5:dd:e2:ee:48:01:62:55:78:30:a5:
                    cc:53:ba:73:32:b7:7d:d9:e8:51:29:d4:1d:fd:97:
                    bd:5c:55:bb:41:3b:ea:75:b1:f9:13:41:e3:e2:fb:
                    77:97:b9:dd:4b:62:f1:2e:28:93:75:85:19:b8:4c:
                    c8:c5:30:36:cb:39:86:af:d0:45:4a:d4:49:cf:7e:
                    db:8a:96:ac:15:fc:72:e0:f1:44:73:a7:46:0a:d2:
                    c2:23:72:86:dd:08:f3:a0:19:f3:19:da:40:45:00:
                    59:a2:b8:ef:f1:4b:8c:a4:8b:61:d1:f9:6f:c5:96:
                    01:2c:dd:14:25:af:8a:d1:70:b5:1b:04:6f:de:9c:
                    45:8c:69:c5:f5:68:61:5b:56:2f:27:9a:1d:81:92:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:13:4E:18:0E:E8:57:4D:27:1C:B8:C9:5A:42:81:A4:28:36:5D:D0
            X509v3 Authority Key Identifier:
                keyid:37:44:F6:E0:CE:DF:EF:AF:4E:FD:EF:07:21:22:E5:C3:B8:7C:2D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7b9b266f8b94197f3505ae01f142ff41997214.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4eb3ba4-f011-4aba-b5dd-92a77eda488b/260c344632e85d02161819e5d66d1820cf279b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4eb3ba4-f011-4aba-b5dd-92a77eda488b/4d7b9b266f8b94197f3505ae01f142ff41997214.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.76.0/22
                IPv6:
                  2803:3010::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:0b:85:af:24:98:26:76:92:c1:54:7d:b7:bc:d0:3c:5c:de:
         b9:ac:ca:63:e5:d4:46:f1:68:83:2a:6b:3a:ea:5a:cc:ae:bd:
         91:cb:56:dc:e5:2b:03:85:72:f5:4d:3b:fa:fa:65:23:81:81:
         10:c6:74:65:e1:55:fd:19:25:1a:6c:01:13:5b:f9:6e:3b:9d:
         5e:54:b5:94:55:49:0e:7d:67:46:fc:c3:87:86:ad:35:64:4b:
         5f:d4:b3:67:13:fa:cf:c4:a4:2c:41:3c:eb:f8:b1:8c:e3:11:
         92:d3:bc:fd:4c:8c:47:1f:e8:25:38:5d:e5:82:59:b0:fc:9b:
         09:95:f7:e0:ce:9e:19:cd:df:ae:97:1f:b5:98:d3:61:ee:0c:
         79:b9:c0:19:51:b5:59:36:46:fa:5f:6c:24:6a:1f:f5:79:06:
         4c:96:4d:80:4e:7c:68:10:97:37:f6:9e:e4:89:e7:dc:38:69:
         98:f5:67:e9:f6:37:05:e9:b4:42:88:eb:59:c6:d2:83:42:87:
         f4:e5:19:d5:ab:a7:d4:b8:69:58:93:bf:5d:82:ca:26:3a:c6:
         5a:c3:bc:83:ae:47:71:de:63:8c:b7:5d:1e:ea:e9:0d:73:dc:
         15:85:e9:f5:e5:52:00:ca:68:c7:e3:eb:c2:a7:88:8a:9a:c7:
         3b:d6:fa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----