Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/ce4a6445c50c982e89c4c887db7e0c88a056ac8b.roa
File:                     ce4a6445c50c982e89c4c887db7e0c88a056ac8b.roa (raw, json)
Hash identifier:          TK9uyAy5aoC+Xik3zWNuVVYD7EI/it9na71JYa8Q3Sc=
Subject key identifier:   82:8F:64:D0:15:27:11:74:E4:F3:04:0C:81:72:39:3A:6D:BA:79:B8
Certificate issuer:       /CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
Certificate serial:       4ECB
Authority key identifier: 6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/ce4a6445c50c982e89c4c887db7e0c88a056ac8b.roa
Signing time:             Tue 21 Feb 2023 23:24:03 +0000
ROA not before:           Fri 10 Feb 2023 23:11:38 +0000
ROA not after:            Sat 15 Feb 2025 23:11:38 +0000
asID:                     270088
IP address blocks:        170.0.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20171 (0x4ecb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
        Validity
            Not Before: Feb 10 23:11:38 2023 GMT
            Not After : Feb 15 23:11:38 2025 GMT
        Subject: CN=ce4a6445c50c982e89c4c887db7e0c88a056ac8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:22:c6:3f:a9:65:9e:09:a6:08:4a:92:93:b1:
                    f3:a2:96:f9:ee:33:9c:6d:76:cc:67:0d:f0:4b:ef:
                    4c:a9:a4:20:b4:12:e5:09:7a:16:55:ad:58:00:88:
                    20:61:a7:43:6b:1c:83:28:cb:59:2f:39:77:f0:20:
                    5b:24:6e:3f:89:a6:d0:b5:b4:26:aa:0a:34:7d:c3:
                    dd:ba:6f:03:6a:95:d1:ce:41:89:8a:77:07:07:07:
                    76:7c:e3:37:0a:d1:8a:87:c3:ab:34:cd:de:70:33:
                    ec:22:76:87:71:82:b6:e8:a2:da:e4:81:2d:38:2e:
                    f8:1e:cb:fa:b0:b9:d1:eb:f8:3b:95:c0:31:b7:55:
                    71:4e:c3:ad:ae:d7:db:ec:a4:9e:a5:10:fa:b7:c5:
                    7a:3d:bd:96:05:fe:52:6f:3f:f4:c4:58:af:25:da:
                    8f:e1:00:9c:68:61:be:9b:a2:21:fc:10:37:3d:2a:
                    78:4f:10:b4:dc:83:a6:08:9c:43:a9:0c:0c:99:ad:
                    84:a6:df:48:8e:65:46:3e:a2:b8:c9:01:fd:7a:44:
                    af:f1:0c:e3:a5:08:ee:68:51:be:9b:b9:02:b7:05:
                    07:52:97:a2:52:7f:e6:9d:e8:72:15:38:f8:57:df:
                    f1:b3:8e:fb:cd:60:50:4a:34:0d:ba:25:3c:38:99:
                    5d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8F:64:D0:15:27:11:74:E4:F3:04:0C:81:72:39:3A:6D:BA:79:B8
            X509v3 Authority Key Identifier:
                keyid:6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/ce4a6445c50c982e89c4c887db7e0c88a056ac8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/88c828fbf7c4212619b24a7d12142f15f0f5ffea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:b2:2b:46:93:bb:15:d4:cd:2c:62:4e:8c:df:15:7f:1d:2e:
         38:4b:94:08:7b:8a:18:20:20:8d:59:83:79:ae:02:d1:4e:35:
         5f:80:c7:e9:a0:d5:cb:82:0f:14:e5:54:59:19:4f:eb:bb:4f:
         24:64:12:b4:ab:30:f5:8f:7a:e3:7a:27:58:02:2b:54:72:d1:
         ec:11:cd:a6:df:82:e9:f7:aa:91:83:7a:f2:f7:5e:d0:f0:c5:
         92:39:a7:02:54:4c:28:0a:08:89:ee:b4:cd:30:d3:f7:58:00:
         ea:5d:aa:4d:60:33:1c:dd:06:da:5d:3b:d3:4e:0d:9b:8e:db:
         c7:f8:f2:ed:50:4e:61:af:6d:3c:1a:e8:ce:4e:64:91:bc:cb:
         84:48:50:86:31:63:11:b6:b4:fa:64:0b:ac:10:55:0a:fb:e6:
         29:0c:f8:9e:64:9f:e9:7a:ec:63:d1:35:0c:d7:18:c7:2c:8d:
         c9:8b:a3:53:e8:f7:65:45:ef:b5:15:fa:f3:bd:9c:85:c9:75:
         c8:fd:42:0d:5b:6d:db:8a:08:7f:53:40:2e:4e:a2:e0:f8:78:
         7e:c6:55:28:22:3c:3c:d7:48:15:fe:b2:b5:b6:62:b2:24:eb:
         c5:5e:8f:2d:58:55:a9:32:57:d2:d5:2c:f7:98:12:06:16:c3:
         5f:9a:3b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:59 2023 by rpki-client on console-ams.rpki-client.org