Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/63b4bc100e46374ccb1627619b3f7b7ed4dc7547.roa
File:                     63b4bc100e46374ccb1627619b3f7b7ed4dc7547.roa (raw, json)
Hash identifier:          QGY1LQSIz7bpqr3jrOd9RorlE4TBFPrKGAq5IkKTQ4A=
Subject key identifier:   12:76:14:9F:CF:34:32:4E:A5:2A:D9:9F:23:E2:D4:F2:6F:57:AF:7B
Certificate issuer:       /CN=285c4851f123355e1dfc7c41d72c849598bfbf31
Certificate serial:       16E47E
Authority key identifier: FA:6B:CD:9E:98:AC:70:13:19:5F:EA:8D:58:F0:86:83:7D:57:5D:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/285c4851f123355e1dfc7c41d72c849598bfbf31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/63b4bc100e46374ccb1627619b3f7b7ed4dc7547.roa
Signing time:             Tue 24 May 2022 19:57:16 +0000
ROA not before:           Tue 24 May 2022 03:00:00 +0000
ROA not after:            Sun 24 May 2026 03:00:00 +0000
asID:                     267790
IP address blocks:        45.169.98.0/23 maxlen: 24
                          2803:6fa0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500286 (0x16e47e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285c4851f123355e1dfc7c41d72c849598bfbf31
        Validity
            Not Before: May 24 03:00:00 2022 GMT
            Not After : May 24 03:00:00 2026 GMT
        Subject: CN=63b4bc100e46374ccb1627619b3f7b7ed4dc7547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f3:4a:4b:fc:a1:07:26:ea:69:67:1b:c9:97:
                    44:b6:14:6f:ff:6f:b6:86:3e:e0:44:2c:a9:2e:15:
                    55:2b:d4:c6:2d:17:d0:21:64:c1:a6:24:e6:02:da:
                    6f:d3:e0:a0:06:fe:1c:1d:f1:24:19:cd:dd:57:a2:
                    53:4a:f3:0c:20:7d:07:31:4f:74:5d:2f:62:55:99:
                    e3:31:23:b7:2e:d0:13:67:f7:66:67:bd:2a:e2:e0:
                    ad:f2:38:df:b9:e3:b6:a9:69:a3:24:c2:1c:d2:e2:
                    cd:f5:12:c3:e0:d5:fb:2d:c2:0a:fd:c1:de:a6:61:
                    05:5f:d4:04:94:f1:f8:01:fb:57:31:88:fc:2c:48:
                    ff:4f:17:a0:4e:eb:79:b7:3b:51:2f:c9:3d:17:a5:
                    24:8e:0a:46:ed:72:f7:14:1e:b4:10:eb:3b:f8:fb:
                    dd:f8:3e:5d:fa:92:64:e4:a4:e8:40:73:a0:ae:49:
                    90:38:ed:74:a3:dc:57:aa:10:66:bb:52:62:d5:f0:
                    a2:1c:7f:1a:9b:07:05:10:1d:00:5a:3a:55:ff:64:
                    47:af:6a:9d:ce:12:87:f0:14:01:4c:89:55:9b:93:
                    e4:a5:91:d9:b8:25:85:f0:e7:4d:09:93:2f:6a:e2:
                    0e:31:96:5f:b8:9c:81:70:cb:f0:4a:51:9e:8c:20:
                    2a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:76:14:9F:CF:34:32:4E:A5:2A:D9:9F:23:E2:D4:F2:6F:57:AF:7B
            X509v3 Authority Key Identifier:
                keyid:FA:6B:CD:9E:98:AC:70:13:19:5F:EA:8D:58:F0:86:83:7D:57:5D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/285c4851f123355e1dfc7c41d72c849598bfbf31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/63b4bc100e46374ccb1627619b3f7b7ed4dc7547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/285c4851f123355e1dfc7c41d72c849598bfbf31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.98.0/23
                IPv6:
                  2803:6fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:42:ed:d1:a5:3c:1f:cb:d0:c9:94:a7:24:c7:b6:2a:1e:9c:
         9d:da:d1:5b:7a:d7:f1:e4:8a:d1:a3:16:d4:14:e7:09:71:05:
         62:49:51:c2:98:71:de:02:23:fb:a5:14:96:10:06:7a:5e:1b:
         7d:07:8a:63:c6:7a:e6:91:9e:2f:8b:a8:ef:29:8d:d9:63:1f:
         24:c6:83:cd:82:91:9e:f0:1c:34:52:a5:cc:eb:29:7b:31:a1:
         de:cb:b0:c3:cc:e9:52:c2:b6:45:d0:4d:23:82:ae:b6:fd:eb:
         cd:8a:45:01:38:ec:d4:d1:59:a0:f2:64:63:9a:c3:f3:02:7e:
         43:9e:ee:49:8c:22:a0:ac:33:a8:94:2e:82:9f:14:1b:12:9e:
         e1:da:12:f1:dd:31:44:a7:89:ed:92:81:35:54:66:df:b3:40:
         54:b7:37:b3:dd:9a:c1:00:07:98:7d:af:bb:55:7e:9e:c1:10:
         67:7f:6a:ea:db:c3:62:b1:4c:a2:21:16:c4:47:02:51:7b:a6:
         4a:1b:4c:30:a2:34:2c:83:2b:4b:9f:07:61:a6:01:03:da:6c:
         a2:35:be:a8:e4:84:e5:78:15:48:9d:a5:0f:cd:ad:7e:51:0d:
         23:52:96:79:2d:b0:99:a2:43:f8:b2:38:47:cf:a1:bb:bd:23:
         2e:e4:1e:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDFuR+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI4
NWM0ODUxZjEyMzM1NWUxZGZjN2M0MWQ3MmM4NDk1OThiZmJmMzEwHhcNMjIwNTI0
MDMwMDAwWhcNMjYwNTI0MDMwMDAwWjAzMTEwLwYDVQQDEyg2M2I0YmMxMDBlNDYz
NzRjY2IxNjI3NjE5YjNmN2I3ZWQ0ZGM3NTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjPNKS/yhBybqaWcbyZdEthRv/2+2hj7gRCypLhVVK9TGLRfQ
IWTBpiTmAtpv0+CgBv4cHfEkGc3dV6JTSvMMIH0HMU90XS9iVZnjMSO3LtATZ/dm
Z70q4uCt8jjfueO2qWmjJMIc0uLN9RLD4NX7LcIK/cHepmEFX9QElPH4AftXMYj8
LEj/TxegTut5tztRL8k9F6UkjgpG7XL3FB60EOs7+Pvd+D5d+pJk5KToQHOgrkmQ
OO10o9xXqhBmu1Ji1fCiHH8amwcFEB0AWjpV/2RHr2qdzhKH8BQBTIlVm5PkpZHZ
uCWF8OdNCZMvauIOMZZfuJyBcMvwSlGejCAq8wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBJ2FJ/PNDJOpSrZnyPi1PJvV697MB8GA1UdIwQYMBaAFPprzZ6YrHATGV/q
jVjwhoN9V10wMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjg1YzQ4
NTFmMTIzMzU1ZTFkZmM3YzQxZDcyYzg0OTU5OGJmYmYzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWQ1MTJjMTMtMGQxNC00NDg2LTg2MjItNTRlZGRh
YWQ0MjE4LzYzYjRiYzEwMGU0NjM3NGNjYjE2Mjc2MTliM2Y3YjdlZDRkYzc1NDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZDUxMmMxMy0wZDE0LTQ0ODYtODYyMi01NGVk
ZGFhZDQyMTgvMjg1YzQ4NTFmMTIzMzU1ZTFkZmM3YzQxZDcyYzg0OTU5OGJmYmYz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAS2pYjANBAIAAjAHAwUAKANvoDANBgkqhkiG9w0BAQsFAAOC
AQEACULt0aU8H8vQyZSnJMe2Kh6cndrRW3rX8eSK0aMW1BTnCXEFYklRwphx3gIj
+6UUlhAGel4bfQeKY8Z65pGeL4uo7ymN2WMfJMaDzYKRnvAcNFKlzOspezGh3suw
w8zpUsK2RdBNI4Kutv3rzYpFATjs1NFZoPJkY5rD8wJ+Q57uSYwioKwzqJQugp8U
GxKe4doS8d0xRKeJ7ZKBNVRm37NAVLc3s92awQAHmH2vu1V+nsEQZ39q6tvDYrFM
oiEWxEcCUXumShtMMKI0LIMrS58HYaYBA9psojW+qOSE5XgVSJ2lD82tflENI1KW
eS2wmaJD+LI4R8+hu70jLuQe3Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-fra.rpki-client.org