Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/a760f8d5bc7d84378793f49a613d5d01f1e9b641.roa
File:                     a760f8d5bc7d84378793f49a613d5d01f1e9b641.roa (raw, json)
Hash identifier:          URMgu11bZYpWiAPDjwKRZP8CkS5aE0kUebKnoJ5wJE4=
Subject key identifier:   DF:EC:E0:DE:C7:D5:17:D2:8E:68:4B:45:01:A7:53:91:B1:55:73:DE
Certificate issuer:       /CN=f04c66e47b3a8a66f313f04f07882f394b836678
Certificate serial:       08EED7
Authority key identifier: F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/a760f8d5bc7d84378793f49a613d5d01f1e9b641.roa
Signing time:             Wed 02 Nov 2022 15:17:22 +0000
ROA not before:           Wed 24 Nov 2021 03:00:00 +0000
ROA not after:            Sat 25 Nov 2023 03:00:00 +0000
asID:                     52235
IP address blocks:        190.99.64.0/22 maxlen: 25
                          190.99.68.0/23 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585431 (0x8eed7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04c66e47b3a8a66f313f04f07882f394b836678
        Validity
            Not Before: Nov 24 03:00:00 2021 GMT
            Not After : Nov 25 03:00:00 2023 GMT
        Subject: CN=a760f8d5bc7d84378793f49a613d5d01f1e9b641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:70:e7:03:78:cb:bd:8a:b6:39:cb:42:79:ea:
                    35:f1:10:31:98:64:df:54:7d:b8:ea:03:0d:c6:8c:
                    37:88:fc:e4:f7:55:32:54:b5:87:ec:aa:e7:35:7c:
                    19:43:92:fc:76:cd:b2:c0:71:47:7c:27:de:04:6a:
                    43:b0:02:36:bb:93:9c:8c:88:6f:df:32:eb:87:b3:
                    b0:dc:bc:58:eb:91:db:92:25:bd:cb:f9:be:e7:cf:
                    df:4e:ea:f4:08:c4:ed:20:89:fa:72:db:7f:77:13:
                    aa:b6:ac:c6:1a:fc:12:a9:3f:f2:f5:b3:2e:c2:d5:
                    c8:13:eb:2b:4d:81:27:3a:d6:0b:0d:7c:52:80:e7:
                    df:43:0d:b3:f5:3b:b1:08:8d:ce:02:f2:09:64:1c:
                    40:5e:cb:91:27:0d:90:e5:50:72:fd:e5:71:ab:ce:
                    ae:a9:54:20:49:92:13:06:18:35:64:67:47:23:e4:
                    6b:c9:3b:cf:e7:33:f4:63:7d:0a:02:5c:03:36:7e:
                    60:3a:76:ed:15:02:6b:45:0a:e2:7f:75:59:e9:34:
                    32:02:4e:8c:62:67:db:99:c5:17:8e:08:69:75:5c:
                    05:fb:48:6b:70:aa:17:30:a0:05:2b:c1:f9:77:a3:
                    93:65:30:92:9c:b6:4e:61:39:6f:42:ae:e9:de:d5:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EC:E0:DE:C7:D5:17:D2:8E:68:4B:45:01:A7:53:91:B1:55:73:DE
            X509v3 Authority Key Identifier:
                keyid:F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/a760f8d5bc7d84378793f49a613d5d01f1e9b641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/f04c66e47b3a8a66f313f04f07882f394b836678.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.64.0-190.99.69.255

    Signature Algorithm: sha256WithRSAEncryption
         4f:76:fe:bd:43:b1:60:f6:74:ee:52:7d:f5:f9:59:7c:70:86:
         ce:6e:1a:ef:30:99:7b:80:c9:72:ea:82:c4:2a:21:ab:2d:5c:
         c6:42:d3:ce:73:c3:2c:94:73:69:eb:6f:ed:ba:c7:af:cf:40:
         b4:dc:63:5b:76:5c:15:fd:30:97:f8:2a:43:c0:45:01:43:0e:
         51:3d:48:04:9e:6e:9f:c8:c1:17:47:fc:01:8a:0a:ca:3a:6b:
         36:2a:f7:a6:4b:3f:33:48:e6:2e:ad:6b:ea:53:08:d0:12:d7:
         c1:c6:24:0c:96:38:34:95:df:93:b4:83:de:61:fd:e9:1c:50:
         dd:7b:bd:1e:f5:10:d4:3c:8a:fb:f9:3c:ec:e2:a4:6a:f2:13:
         ab:11:e2:b1:5c:17:29:cf:c1:c6:43:89:c3:6c:9f:8e:2b:de:
         2f:5c:8c:b3:64:3a:6a:04:88:27:df:5f:3f:df:94:ee:78:88:
         fc:15:1f:2e:49:af:c0:4a:ba:a9:ec:90:ea:1b:4a:9e:38:a7:
         4d:66:22:b9:d7:c8:a6:bd:c6:54:80:3d:1a:8b:5f:05:98:e0:
         4f:7d:93:04:1e:2b:dd:31:c0:cc:aa:67:33:33:5c:d6:15:f5:
         43:ff:ca:af:9d:a4:6e:58:fd:5c:15:16:86:6b:b6:f4:81:ec:
         c9:52:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org