Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63c9b956-6a57-4ed4-80ef-e39b568c284f/718c2d0f5d4631e1bb79fe7878d410e87705b9af.roa
File:                     718c2d0f5d4631e1bb79fe7878d410e87705b9af.roa (raw, json)
Hash identifier:          ybrb9qeNGi9iM6dpcmwQCpNFJth/762/ImL2hKUcgVg=
Subject key identifier:   08:02:9F:D1:5F:5B:9D:14:3D:B4:67:77:62:A9:FC:97:B0:A5:CF:07
Certificate issuer:       /CN=76ccd0d67eef4385f6211f2abd0d8f9b34227ca5
Certificate serial:       0FB891
Authority key identifier: F2:87:90:48:2C:F5:B5:65:13:0D:DF:B5:D9:19:9E:9E:A7:11:2F:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76ccd0d67eef4385f6211f2abd0d8f9b34227ca5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63c9b956-6a57-4ed4-80ef-e39b568c284f/718c2d0f5d4631e1bb79fe7878d410e87705b9af.roa
Signing time:             Fri 05 May 2023 22:35:54 +0000
ROA not before:           Thu 04 May 2023 22:35:54 +0000
ROA not after:            Mon 05 May 2025 22:35:54 +0000
asID:                     267772
IP address blocks:        190.109.110.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1030289 (0xfb891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ccd0d67eef4385f6211f2abd0d8f9b34227ca5
        Validity
            Not Before: May  4 22:35:54 2023 GMT
            Not After : May  5 22:35:54 2025 GMT
        Subject: CN=718c2d0f5d4631e1bb79fe7878d410e87705b9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:57:c6:6d:f4:87:7f:2b:5b:1b:98:3c:41:
                    34:91:a6:48:44:15:a3:67:e4:99:eb:f5:ae:08:bf:
                    9f:f1:8f:2b:3d:8c:7d:b2:1b:27:ce:bd:83:74:f8:
                    7c:8d:dd:7c:a8:54:54:a0:e8:82:95:52:a2:d7:49:
                    5f:2d:24:af:16:41:99:7b:32:58:b6:10:5b:0f:15:
                    55:c1:f6:0f:d3:72:af:ac:57:7e:c0:9a:aa:c3:30:
                    00:d2:01:d3:c2:ae:c4:52:f9:7f:f6:3a:e4:b2:2e:
                    48:76:cc:03:51:1e:1f:d1:09:0f:eb:b9:01:17:c2:
                    7c:17:4a:74:5b:57:34:76:27:30:b6:f9:eb:b6:77:
                    d4:73:cd:e3:a0:e9:13:ad:f9:0c:e2:7d:ea:25:2b:
                    b1:74:4c:19:d2:82:c2:00:42:91:f1:5c:b9:d8:7d:
                    6b:34:11:b6:c3:a1:a5:10:14:77:60:2c:7b:5d:1e:
                    e7:f2:51:b9:3d:d0:3d:6b:fa:02:ad:87:5d:78:df:
                    12:00:57:a2:7e:6e:af:0f:65:34:bb:91:64:66:af:
                    21:68:99:99:e2:e1:b1:f0:03:2f:1a:45:f4:8a:47:
                    bc:09:39:26:7e:df:c4:af:f4:a1:69:d8:bb:71:1f:
                    cb:bf:27:bd:82:fe:ce:65:f5:4a:ac:4a:83:f9:a3:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:02:9F:D1:5F:5B:9D:14:3D:B4:67:77:62:A9:FC:97:B0:A5:CF:07
            X509v3 Authority Key Identifier:
                keyid:F2:87:90:48:2C:F5:B5:65:13:0D:DF:B5:D9:19:9E:9E:A7:11:2F:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76ccd0d67eef4385f6211f2abd0d8f9b34227ca5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63c9b956-6a57-4ed4-80ef-e39b568c284f/718c2d0f5d4631e1bb79fe7878d410e87705b9af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63c9b956-6a57-4ed4-80ef-e39b568c284f/76ccd0d67eef4385f6211f2abd0d8f9b34227ca5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:94:fa:06:11:e3:79:01:e2:ca:a8:98:d8:d5:77:63:dc:15:
         5b:ab:24:03:f9:28:fb:d0:59:62:e9:a4:e3:eb:26:58:51:c1:
         23:2d:69:c2:d4:a5:17:76:d1:3f:bc:96:d1:12:e6:e8:8c:a7:
         a5:92:18:f4:d9:43:98:bd:f9:e7:ed:dd:01:4c:a5:aa:95:f4:
         0f:78:5e:41:24:1e:42:87:69:b9:d0:75:c6:9f:0d:bb:28:34:
         98:74:37:1e:91:e8:68:35:2b:ad:e0:45:a1:39:d1:ae:5f:51:
         f4:d9:fe:ed:8f:55:53:4c:21:bf:fb:2f:cd:2f:65:25:21:37:
         9e:4a:83:5d:f0:40:cb:08:89:92:2f:87:b4:b5:40:cf:3e:2a:
         cd:06:36:47:ef:c3:db:ef:7c:9e:a8:43:a5:f8:1b:55:94:ef:
         af:5d:c0:17:a1:8f:6f:90:0c:1a:3d:c7:0d:f4:aa:05:ac:06:
         84:89:8f:09:1c:a7:2d:79:05:4c:bc:16:e4:82:08:03:3c:53:
         af:c6:20:b8:26:a8:54:4a:34:2e:63:03:ea:f8:1f:ee:19:1c:
         a6:25:16:3c:a8:4d:23:a6:ec:b0:62:3e:a6:9e:b3:13:d3:8d:
         2b:28:15:2d:ba:6e:ce:ad:7a:79:77:ad:ea:dc:a2:f2:94:97:
         9c:fb:bf:8b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDD7iRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc2
Y2NkMGQ2N2VlZjQzODVmNjIxMWYyYWJkMGQ4ZjliMzQyMjdjYTUwHhcNMjMwNTA0
MjIzNTU0WhcNMjUwNTA1MjIzNTU0WjAzMTEwLwYDVQQDEyg3MThjMmQwZjVkNDYz
MWUxYmI3OWZlNzg3OGQ0MTBlODc3MDViOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwKVXxm30h38rWxuYPEE0kaZIRBWjZ+SZ6/WuCL+f8Y8rPYx9
shsnzr2DdPh8jd18qFRUoOiClVKi10lfLSSvFkGZezJYthBbDxVVwfYP03KvrFd+
wJqqwzAA0gHTwq7EUvl/9jrksi5IdswDUR4f0QkP67kBF8J8F0p0W1c0dicwtvnr
tnfUc83joOkTrfkM4n3qJSuxdEwZ0oLCAEKR8Vy52H1rNBG2w6GlEBR3YCx7XR7n
8lG5PdA9a/oCrYddeN8SAFeifm6vD2U0u5FkZq8haJmZ4uGx8AMvGkX0ike8CTkm
ft/Er/Shadi7cR/Lvye9gv7OZfVKrEqD+aPIMQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAgCn9FfW50UPbRnd2Kp/Jewpc8HMB8GA1UdIwQYMBaAFPKHkEgs9bVlEw3f
tdkZnp6nES/wMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzZjY2Qw
ZDY3ZWVmNDM4NWY2MjExZjJhYmQwZDhmOWIzNDIyN2NhNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjNjOWI5NTYtNmE1Ny00ZWQ0LTgwZWYtZTM5YjU2
OGMyODRmLzcxOGMyZDBmNWQ0NjMxZTFiYjc5ZmU3ODc4ZDQxMGU4NzcwNWI5YWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82M2M5Yjk1Ni02YTU3LTRlZDQtODBlZi1lMzli
NTY4YzI4NGYvNzZjY2QwZDY3ZWVmNDM4NWY2MjExZjJhYmQwZDhmOWIzNDIyN2Nh
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAb5tbjANBgkqhkiG9w0BAQsFAAOCAQEAMZT6BhHjeQHiyqiY
2NV3Y9wVW6skA/ko+9BZYumk4+smWFHBIy1pwtSlF3bRP7yW0RLm6IynpZIY9NlD
mL355+3dAUylqpX0D3heQSQeQodpudB1xp8Nuyg0mHQ3HpHoaDUrreBFoTnRrl9R
9Nn+7Y9VU0whv/svzS9lJSE3nkqDXfBAywiJki+HtLVAzz4qzQY2R+/D2+98nqhD
pfgbVZTvr13AF6GPb5AMGj3HDfSqBawGhImPCRynLXkFTLwW5IIIAzxTr8YguCao
VEo0LmMD6vgf7hkcpiUWPKhNI6bssGI+pp6zE9ONKygVLbpuzq16eXet6tyi8pSX
nPu/iw==
-----END CERTIFICATE-----
Generated at Sun Oct 1 16:32:19 2023 by rpki-client on console-fra.rpki-client.org