Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/ee75cfa05cb73c1de46d982696ff51c974d83789.roa
File:                     ee75cfa05cb73c1de46d982696ff51c974d83789.roa (raw, json)
Hash identifier:          ebFqzA6ny4MXyNMA4Ym7yU29PDQEqiOmXHebcVrvWd4=
Subject key identifier:   40:B0:50:57:5E:D5:68:83:DA:DE:AF:9F:24:A5:61:4C:DB:29:95:B5
Certificate issuer:       /CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
Certificate serial:       243F76
Authority key identifier: CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/ee75cfa05cb73c1de46d982696ff51c974d83789.roa
Signing time:             Fri 22 Sep 2023 22:45:07 +0000
ROA not before:           Thu 21 Sep 2023 22:45:07 +0000
ROA not after:            Mon 22 Sep 2025 22:45:07 +0000
asID:                     14754
IP address blocks:        201.247.0.0/17 maxlen: 24
                          201.247.0.0/20 maxlen: 20
                          201.247.0.0/16 maxlen: 24
                          201.247.128.0/19 maxlen: 24
                          179.5.0.0/16 maxlen: 24
                          190.62.0.0/16 maxlen: 24
                          190.86.0.0/15 maxlen: 24
                          201.247.192.0/20 maxlen: 20
                          201.247.192.0/18 maxlen: 24
                          2800:b20::/30 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2375542 (0x243f76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
        Validity
            Not Before: Sep 21 22:45:07 2023 GMT
            Not After : Sep 22 22:45:07 2025 GMT
        Subject: CN=ee75cfa05cb73c1de46d982696ff51c974d83789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:73:97:52:6b:03:9e:74:0e:d6:12:d6:8d:f0:
                    f8:70:f4:dd:7d:94:75:28:81:4e:a8:6b:50:68:3a:
                    98:c5:28:d5:d1:7f:ce:c8:20:a0:e4:e5:9d:bb:37:
                    11:a0:23:31:c8:c5:5f:96:55:75:48:f8:98:56:1d:
                    fc:ce:b8:fe:cf:81:16:1a:cf:81:f5:e8:e5:c4:f6:
                    34:ee:b7:dd:d3:e2:0f:de:5f:39:f0:8d:4f:57:00:
                    63:35:fa:bc:4c:17:6d:a1:36:a7:35:5b:16:47:e7:
                    5c:ec:02:a3:16:06:c5:39:9d:c5:ab:ac:e4:34:46:
                    ea:e1:57:27:3a:8a:03:8e:0e:a0:59:ce:49:2b:ee:
                    87:45:0b:ed:0b:24:1a:79:7e:72:94:13:b5:39:fb:
                    db:96:b8:48:f3:b6:31:37:5d:88:59:0b:3d:69:ae:
                    fb:9a:16:4b:77:e2:31:5e:2f:fc:b4:02:0b:55:d6:
                    84:38:32:a2:9b:45:ed:78:66:7a:85:85:88:26:5b:
                    ae:2a:6e:9c:75:3c:f3:40:53:3c:cf:50:d4:6c:cd:
                    b1:2a:6d:4c:ae:a2:bf:b0:c8:72:ab:7a:1f:de:17:
                    9f:74:86:94:23:d5:67:31:53:2a:4a:e0:57:e5:ca:
                    28:7d:70:0b:71:5c:8d:c8:01:07:e2:c1:84:30:5c:
                    fc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B0:50:57:5E:D5:68:83:DA:DE:AF:9F:24:A5:61:4C:DB:29:95:B5
            X509v3 Authority Key Identifier:
                keyid:CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/ee75cfa05cb73c1de46d982696ff51c974d83789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.5.0.0/16
                  190.62.0.0/16
                  190.86.0.0/15
                  201.247.0.0/16
                IPv6:
                  2800:b20::/30

    Signature Algorithm: sha256WithRSAEncryption
         a8:d4:45:19:e9:ef:8a:a8:8d:0a:39:96:1d:e2:2b:9b:76:b3:
         a6:90:f5:67:05:18:f5:ad:df:04:83:80:2a:62:32:e3:67:2e:
         37:78:85:ce:b7:6f:24:1c:32:f8:57:e3:f5:a4:f0:0f:bf:96:
         5a:57:b2:fa:a8:43:71:85:b3:57:ba:3e:c6:37:32:0c:15:b8:
         0d:f7:a8:09:e0:91:a4:9a:b8:12:cc:eb:f9:25:35:a3:82:d6:
         7b:fa:92:bb:12:17:da:50:cf:ec:18:2f:41:ec:94:1b:d6:f6:
         f7:5e:71:60:d8:1a:6f:8b:b3:e9:cd:97:75:49:a7:97:11:39:
         88:3c:e7:a8:41:13:ff:00:04:d1:ee:02:42:fc:cb:68:ab:5b:
         25:9c:b2:0f:6b:61:6f:1d:ad:f0:72:88:8f:4c:4b:6b:a4:06:
         16:ab:c1:1c:34:b1:2a:fe:e2:5a:70:29:f1:c1:b4:1d:f8:48:
         24:d8:e8:e2:32:ef:32:59:3a:86:76:54:f2:65:b6:88:c8:f8:
         78:45:76:7d:a0:a4:7c:dc:ef:43:67:ca:b8:73:80:a6:b0:b7:
         7d:9c:0a:38:a9:6f:96:d6:a1:8c:d6:8b:75:38:ca:df:d2:26:
         e5:fc:b1:65:07:1a:e7:11:8c:bd:93:2b:bc:6e:b5:64:84:aa:
         0f:b6:ca:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----