Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea6e314a-8fa4-4590-a400-dcc703b53507/5ce8170dea177e88b288a5662d61fbfbd63d41f1.roa
File:                     5ce8170dea177e88b288a5662d61fbfbd63d41f1.roa (raw, json)
Hash identifier:          kvD62ONUP1nv4XuIhr/tuMB06v1xneIRFDFeYkcevMA=
Subject key identifier:   C4:D7:36:48:D4:4F:23:DF:EE:C0:DA:6F:3B:D4:CD:2D:38:4A:14:45
Certificate issuer:       /CN=e418781321c8ac19027d1f6b8a8fa133313e5012
Certificate serial:       13C88B
Authority key identifier: DD:02:45:5B:BE:76:8D:76:5B:AB:CF:12:7D:C8:E6:B3:22:E5:E7:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e418781321c8ac19027d1f6b8a8fa133313e5012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ea6e314a-8fa4-4590-a400-dcc703b53507/5ce8170dea177e88b288a5662d61fbfbd63d41f1.roa
Signing time:             Wed 09 Feb 2022 15:31:47 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269747
IP address blocks:        45.182.124.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296523 (0x13c88b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e418781321c8ac19027d1f6b8a8fa133313e5012
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=5ce8170dea177e88b288a5662d61fbfbd63d41f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2f:27:b8:5f:67:90:86:5f:a2:71:7b:22:4d:
                    52:73:0f:83:a6:2b:f7:71:5b:f9:14:8a:e8:15:de:
                    a8:f5:9a:b2:97:3d:b4:0f:97:41:b0:28:fe:ee:61:
                    54:1c:cf:66:ac:ec:e1:6f:69:06:e2:0a:14:9d:71:
                    5f:a5:aa:ab:e0:94:4b:db:b5:5e:02:8d:69:9f:da:
                    ab:a8:7c:1a:a9:f6:b9:04:32:70:76:1c:c6:74:2b:
                    f5:3f:4b:9f:36:fb:8d:29:e4:b2:b6:5e:99:d9:50:
                    c5:ad:ee:f7:b7:f5:02:78:81:dd:4a:b8:b8:95:a2:
                    04:02:a2:be:1f:74:ec:30:0e:11:94:1c:6b:33:07:
                    30:c6:07:98:41:01:f8:28:3b:9e:82:ad:7d:5b:78:
                    43:7f:1d:e1:d9:01:a0:13:aa:14:b7:a5:7a:79:b8:
                    03:99:ed:6d:86:03:a8:a2:85:bf:07:cf:27:08:b1:
                    75:48:fe:82:9d:a6:79:08:0f:99:e8:7b:f5:33:ca:
                    15:75:55:83:51:c1:7c:57:8a:bd:07:5c:df:33:72:
                    4d:2f:ba:6b:a3:8f:0c:e5:57:16:d4:e8:94:51:91:
                    2b:e0:c5:0b:95:78:cf:95:f6:09:bf:86:64:23:09:
                    a1:45:33:e3:43:e1:20:33:d2:b3:57:f6:b8:f2:2c:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D7:36:48:D4:4F:23:DF:EE:C0:DA:6F:3B:D4:CD:2D:38:4A:14:45
            X509v3 Authority Key Identifier:
                keyid:DD:02:45:5B:BE:76:8D:76:5B:AB:CF:12:7D:C8:E6:B3:22:E5:E7:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e418781321c8ac19027d1f6b8a8fa133313e5012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea6e314a-8fa4-4590-a400-dcc703b53507/5ce8170dea177e88b288a5662d61fbfbd63d41f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ea6e314a-8fa4-4590-a400-dcc703b53507/e418781321c8ac19027d1f6b8a8fa133313e5012.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:36:f2:5e:39:f3:3a:5e:b4:45:77:8b:3c:06:e7:41:19:d8:
         31:db:b6:55:24:1b:3e:48:9e:f3:3a:8c:88:86:9e:db:66:fc:
         25:be:af:cb:7c:21:65:e8:8f:22:ea:b7:11:1c:0b:4b:d3:04:
         78:5c:f9:75:60:b7:0d:f1:75:e7:2c:b3:50:86:31:ba:0e:55:
         a9:11:91:a2:f2:0a:4c:c6:3e:ea:70:c2:7e:d0:e0:8c:52:29:
         99:7b:c1:24:2b:60:90:21:8c:97:1b:a4:ae:fc:a5:9b:3c:b3:
         3c:4a:8a:c9:18:e8:d2:fa:c9:e1:ca:3b:6c:a8:47:69:44:2a:
         d0:af:77:14:b7:3e:bd:a2:8a:71:d3:f3:ae:ea:be:38:eb:4f:
         08:90:f7:92:b4:80:1f:0d:bb:62:ed:56:3a:9b:81:a8:0b:1a:
         ef:05:34:9b:7e:3a:05:f3:bd:f0:30:8c:cb:dc:7f:69:78:bd:
         a3:34:2c:27:65:f3:9d:bd:61:05:da:b7:85:1f:8a:04:fc:cc:
         be:0f:77:20:8c:8e:b7:d3:8e:87:a9:58:49:02:af:6f:ad:e6:
         5c:65:35:a3:69:19:1a:a1:b9:b2:67:ed:e4:74:75:4c:30:c7:
         3d:8f:6b:1f:81:d1:c8:2e:9e:cb:c3:87:9d:3c:e8:f0:39:9e:
         2d:2e:0c:83
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDE8iLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU0
MTg3ODEzMjFjOGFjMTkwMjdkMWY2YjhhOGZhMTMzMzEzZTUwMTIwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg1Y2U4MTcwZGVhMTc3
ZTg4YjI4OGE1NjYyZDYxZmJmYmQ2M2Q0MWYxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwS8nuF9nkIZfonF7Ik1Scw+Dpiv3cVv5FIroFd6o9Zqylz20
D5dBsCj+7mFUHM9mrOzhb2kG4goUnXFfpaqr4JRL27VeAo1pn9qrqHwaqfa5BDJw
dhzGdCv1P0ufNvuNKeSytl6Z2VDFre73t/UCeIHdSri4laIEAqK+H3TsMA4RlBxr
MwcwxgeYQQH4KDuegq19W3hDfx3h2QGgE6oUt6V6ebgDme1thgOoooW/B88nCLF1
SP6CnaZ5CA+Z6Hv1M8oVdVWDUcF8V4q9B1zfM3JNL7pro48M5VcW1OiUUZEr4MUL
lXjPlfYJv4ZkIwmhRTPjQ+EgM9KzV/a48ixFVQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMTXNkjUTyPf7sDabzvUzS04ShRFMB8GA1UdIwQYMBaAFN0CRVu+do12W6vP
En3I5rMi5eenMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTQxODc4
MTMyMWM4YWMxOTAyN2QxZjZiOGE4ZmExMzMzMTNlNTAxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWE2ZTMxNGEtOGZhNC00NTkwLWE0MDAtZGNjNzAz
YjUzNTA3LzVjZTgxNzBkZWExNzdlODhiMjg4YTU2NjJkNjFmYmZiZDYzZDQxZjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYTZlMzE0YS04ZmE0LTQ1OTAtYTQwMC1kY2M3
MDNiNTM1MDcvZTQxODc4MTMyMWM4YWMxOTAyN2QxZjZiOGE4ZmExMzMzMTNlNTAx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi22fDANBgkqhkiG9w0BAQsFAAOCAQEAfDbyXjnzOl60RXeL
PAbnQRnYMdu2VSQbPkie8zqMiIae22b8Jb6vy3whZeiPIuq3ERwLS9MEeFz5dWC3
DfF15yyzUIYxug5VqRGRovIKTMY+6nDCftDgjFIpmXvBJCtgkCGMlxukrvylmzyz
PEqKyRjo0vrJ4co7bKhHaUQq0K93FLc+vaKKcdPzruq+OOtPCJD3krSAHw27Yu1W
OpuBqAsa7wU0m346BfO98DCMy9x/aXi9ozQsJ2Xznb1hBdq3hR+KBPzMvg93IIyO
t9OOh6lYSQKvb63mXGU1o2kZGqG5smft5HR1TDDHPY9rH4HRyC6ey8OHnTzo8Dme
LS4Mgw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-fra.rpki-client.org