Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/a6084f0dca86fe169dddcd593dfdfdb9acd77840.roa
File:                     a6084f0dca86fe169dddcd593dfdfdb9acd77840.roa (raw, json)
Hash identifier:          a7hAQEA6s895bXTFYMM3eDWSuwjv188LkpjRciouvTQ=
Subject key identifier:   DD:FF:79:34:E0:46:72:6D:CC:9F:E6:DC:8E:8A:23:BF:13:A6:D9:AB
Certificate issuer:       /CN=bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0
Certificate serial:       0DD50E
Authority key identifier: 0A:26:3B:CE:B9:F7:4D:A9:83:42:09:5A:07:6F:E6:16:8D:F5:83:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/a6084f0dca86fe169dddcd593dfdfdb9acd77840.roa
Signing time:             Wed 24 Mar 2021 14:46:05 +0000
ROA not before:           Wed 24 Mar 2021 14:46:05 +0000
ROA not after:            Tue 24 Mar 2026 14:46:05 +0000
asID:                     27843
IP address blocks:        143.0.248.0/22 maxlen: 24
                          170.231.80.0/22 maxlen: 24
                          167.249.8.0/22 maxlen: 24
                          168.121.48.0/22 maxlen: 24
                          168.121.220.0/22 maxlen: 24
                          170.82.96.0/22 maxlen: 24
                          170.231.168.0/22 maxlen: 24
                          168.181.8.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906510 (0xdd50e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0
        Validity
            Not Before: Mar 24 14:46:05 2021 GMT
            Not After : Mar 24 14:46:05 2026 GMT
        Subject: CN=a6084f0dca86fe169dddcd593dfdfdb9acd77840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:de:94:46:c3:4c:3a:2e:77:d2:b4:87:2c:48:
                    50:5a:a3:80:12:99:c8:29:d4:9f:dc:36:82:80:1f:
                    a0:53:fc:b1:f3:f5:c7:fc:01:1b:bb:89:19:dc:1d:
                    f3:31:f9:b2:c0:84:ac:49:d8:9e:00:76:32:b0:43:
                    0b:2c:62:a5:db:b6:c2:7c:f3:4d:ff:c0:ca:5a:62:
                    9b:59:2f:6f:45:ce:ca:9b:f4:46:c9:e2:7c:f8:33:
                    47:d2:10:44:fd:ce:14:41:76:19:8e:91:20:f8:8b:
                    5d:e1:5c:01:7c:f7:49:7c:d4:60:b0:dd:bd:0c:67:
                    dd:54:3c:12:0b:06:ed:f9:9d:ff:93:e6:e4:91:b3:
                    06:13:e4:54:bd:da:1f:9a:1c:67:f9:d1:8b:f1:01:
                    cd:05:f5:24:70:a7:ac:cb:46:8c:e9:a8:cf:d5:6f:
                    67:74:1e:58:e3:14:fb:b8:e3:1e:b5:2a:94:06:76:
                    01:a7:a1:cd:7c:a6:c1:91:19:87:dc:f0:4e:fe:1a:
                    67:bb:e9:77:75:ad:b8:ee:f6:71:b6:06:81:fd:c9:
                    13:bb:18:47:ab:d0:27:a1:d8:aa:49:06:bb:f4:92:
                    64:64:9c:b6:d9:0c:bc:84:64:a8:48:80:51:af:56:
                    ba:d8:29:a2:64:a1:a5:af:4d:83:8b:6a:9a:34:8f:
                    a8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FF:79:34:E0:46:72:6D:CC:9F:E6:DC:8E:8A:23:BF:13:A6:D9:AB
            X509v3 Authority Key Identifier:
                keyid:0A:26:3B:CE:B9:F7:4D:A9:83:42:09:5A:07:6F:E6:16:8D:F5:83:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/a6084f0dca86fe169dddcd593dfdfdb9acd77840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.248.0/22
                  167.249.8.0/22
                  168.121.48.0/22
                  168.121.220.0/22
                  168.181.8.0/22
                  170.82.96.0/22
                  170.231.80.0/22
                  170.231.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:a4:10:9c:5b:97:4b:4a:ef:af:d6:1c:7b:91:33:b2:81:14:
         3d:e2:15:8d:eb:38:a2:74:79:3e:e7:b2:a4:d8:18:e2:1b:73:
         ce:bb:19:8a:cd:30:40:4d:91:77:de:47:1e:a1:ed:7f:1a:5e:
         5f:56:ba:50:e9:6c:cc:f2:79:81:15:7b:d0:74:47:64:6e:97:
         b4:73:e7:2a:f7:b3:1f:06:17:f9:6b:75:b1:93:e0:c1:b6:2a:
         ef:be:1f:6a:e4:49:8c:66:b6:98:9c:8d:ea:ec:2e:67:4a:7f:
         a3:a1:f6:aa:9b:6d:02:09:5f:68:f7:f8:ec:a9:a7:74:af:07:
         82:9a:9b:4d:4a:c2:d9:40:bf:f0:3c:bb:f2:54:f2:18:3b:a3:
         93:ac:ac:f1:6a:83:ca:62:b4:10:dc:1b:d6:2f:15:44:8e:51:
         dd:42:f1:1b:66:9c:e8:48:8c:21:cd:d7:07:01:af:e5:9a:7c:
         0b:62:61:e4:24:ce:e0:0a:2d:a0:c6:56:a0:b9:6b:5a:4e:3a:
         33:82:d9:43:1e:95:a3:54:5c:3e:29:a8:5b:50:8a:b2:15:7c:
         d4:49:46:0a:fa:5e:d8:cf:09:20:f6:62:20:63:40:88:6b:3e:
         be:3d:24:d8:25:f7:c7:ae:c3:4b:4f:fa:01:ee:38:e8:e2:64:
         20:99:35:32
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 9 21:21:13 2023 by rpki-client on console-fra.rpki-client.org