Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/5687f9836189df351eaea5d9d462ee75430ed979.roa
File:                     5687f9836189df351eaea5d9d462ee75430ed979.roa (raw, json)
Hash identifier:          En48h9GTZ9klJpidsIlKlEWZykehqGnRbKMlfsscPd0=
Subject key identifier:   57:D0:BB:D2:04:F0:F2:95:7A:15:F4:37:0C:15:54:7E:06:95:1E:D3
Certificate issuer:       /CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
Certificate serial:       22FB2F
Authority key identifier: 84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/5687f9836189df351eaea5d9d462ee75430ed979.roa
Signing time:             Wed 23 Aug 2023 16:53:27 +0000
ROA not before:           Tue 22 Aug 2023 16:53:27 +0000
ROA not after:            Sat 23 Aug 2025 16:53:27 +0000
asID:                     27818
IP address blocks:        131.161.152.0/22 maxlen: 24
                          181.114.128.0/19 maxlen: 24
                          201.220.160.0/19 maxlen: 24
                          2803:3380:1000::/36 maxlen: 36
                          2803:3380:fe00::/39 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2292527 (0x22fb2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
        Validity
            Not Before: Aug 22 16:53:27 2023 GMT
            Not After : Aug 23 16:53:27 2025 GMT
        Subject: CN=5687f9836189df351eaea5d9d462ee75430ed979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:08:18:c4:bc:f8:d3:de:7a:85:73:c7:af:cf:
                    e3:2a:a6:f4:fb:f1:a8:de:7c:c3:80:f7:63:28:6e:
                    13:fb:3a:1c:c7:3e:68:c8:ee:5c:9b:40:cf:8b:55:
                    c4:63:3b:a5:56:16:02:c6:26:9e:ed:ad:f0:08:cd:
                    6a:3f:4d:66:0e:3f:75:f7:58:47:12:c2:d0:28:59:
                    c8:99:bf:f4:d9:e6:4a:34:ec:ec:55:20:88:4f:b6:
                    66:3c:16:c8:2c:98:c7:79:f1:7b:93:d8:b7:6f:a6:
                    a8:a4:fd:aa:7d:4f:b1:97:63:14:29:5c:71:52:45:
                    d6:41:67:bb:b9:60:ab:f6:79:b9:b1:7d:3d:a7:75:
                    f0:8f:eb:c0:b1:44:37:7c:e2:3e:d2:48:42:24:f1:
                    88:e7:da:1e:7f:8a:eb:27:86:6c:44:db:61:c5:4c:
                    5f:d7:12:f5:af:c3:7e:66:3a:cb:52:c4:dc:b2:f1:
                    c4:e9:26:85:4e:63:ab:24:20:9e:ed:8b:e9:8c:20:
                    68:d6:31:d3:4e:95:bb:dc:a7:1f:e6:b4:92:ac:93:
                    69:7d:3b:87:42:03:c6:03:5a:d7:1b:f9:71:b2:c3:
                    8b:f5:76:c8:cb:87:f3:ae:b9:9e:74:79:3c:63:44:
                    e9:0a:55:f0:90:1f:45:94:56:11:6d:e9:67:46:fa:
                    e5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D0:BB:D2:04:F0:F2:95:7A:15:F4:37:0C:15:54:7E:06:95:1E:D3
            X509v3 Authority Key Identifier:
                keyid:84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/5687f9836189df351eaea5d9d462ee75430ed979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/961b6618bb492a79bacf586c02bc72ae5ebcd74f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.152.0/22
                  181.114.128.0/19
                  201.220.160.0/19
                IPv6:
                  2803:3380:1000::/36
                  2803:3380:fe00::/39

    Signature Algorithm: sha256WithRSAEncryption
         84:a4:ae:ee:f7:af:c6:84:6e:34:32:06:06:54:c9:11:64:6b:
         cd:e2:7d:f6:72:ce:80:bd:4b:0e:e8:31:ee:9f:83:df:b3:cb:
         0c:88:97:fc:e2:ba:b1:16:bc:d4:1a:40:ca:6a:0f:af:58:24:
         03:ae:3f:51:1f:b5:06:e3:f6:20:30:a2:27:c8:e7:6e:a6:63:
         ba:e8:e6:35:e0:e4:3e:19:28:36:1e:67:29:4d:04:08:09:e8:
         ef:40:fd:23:b0:03:8d:9c:0b:59:36:f6:cc:cb:56:0b:4d:d6:
         af:37:10:8d:78:f5:c7:a0:38:a0:dd:28:04:41:e3:d8:eb:68:
         50:80:fb:27:40:81:4c:84:d2:08:e2:34:2b:49:04:bb:5c:db:
         35:80:c5:df:c4:2e:00:3e:74:c4:4b:6d:01:8b:4b:6d:aa:38:
         43:f0:8b:e3:1c:4a:39:d7:c6:cd:3a:b6:65:ac:a9:11:f5:df:
         47:9f:99:07:bb:92:ea:c7:61:33:07:2d:90:e6:39:49:7a:bc:
         8f:9e:c0:11:46:5d:ea:62:a9:e9:8e:ea:31:61:46:c9:e6:22:
         5c:55:9a:87:fd:da:78:d1:db:fe:d0:5f:ad:0c:69:07:8f:71:
         50:25:24:dc:39:86:fa:8c:f9:1d:bc:32:6a:4f:80:7d:24:3d:
         d5:6e:f3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----