Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/1708f033470a4eeeb447437bcdace3f8c11c8366.roa
File:                     1708f033470a4eeeb447437bcdace3f8c11c8366.roa (raw, json)
Hash identifier:          hxOvO7j54SB7WfnX7z/r97nSLeGrK3yr4/1MvXjKBqA=
Subject key identifier:   53:87:BC:BF:E7:65:0D:EE:9A:85:BC:03:5B:A7:55:7F:64:3D:55:92
Certificate issuer:       /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial:       1C57D6
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/1708f033470a4eeeb447437bcdace3f8c11c8366.roa
Signing time:             Thu 22 Sep 2022 21:10:20 +0000
ROA not before:           Thu 22 Sep 2022 21:08:32 +0000
ROA not after:            Sun 22 Sep 2024 21:08:32 +0000
asID:                     22368
IP address blocks:        190.96.160.0/19 maxlen: 19
                          190.96.160.0/24 maxlen: 24
                          190.96.161.0/24 maxlen: 24
                          190.96.162.0/24 maxlen: 24
                          190.96.163.0/24 maxlen: 24
                          190.96.164.0/24 maxlen: 24
                          190.96.166.0/24 maxlen: 24
                          190.96.167.0/24 maxlen: 24
                          190.96.168.0/24 maxlen: 24
                          190.96.170.0/24 maxlen: 24
                          190.96.171.0/24 maxlen: 24
                          190.96.172.0/24 maxlen: 24
                          190.96.173.0/24 maxlen: 24
                          190.96.175.0/24 maxlen: 24
                          190.96.176.0/23 maxlen: 23
                          190.96.178.0/23 maxlen: 23
                          190.96.180.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1857494 (0x1c57d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
        Validity
            Not Before: Sep 22 21:08:32 2022 GMT
            Not After : Sep 22 21:08:32 2024 GMT
        Subject: CN=1708f033470a4eeeb447437bcdace3f8c11c8366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:86:45:6f:0b:b7:ca:99:90:56:8d:fd:6a:9a:
                    2c:b2:63:7f:61:ac:53:d0:01:8f:0f:a0:9a:a1:6f:
                    27:ed:57:b4:ec:c5:05:2c:9c:3e:e0:38:ef:90:9d:
                    c0:a9:c5:57:ac:0a:f7:ec:1b:e2:91:41:61:cb:35:
                    d9:be:32:56:c3:7e:f2:25:d0:3c:3a:45:d6:84:72:
                    b6:29:b3:93:fa:17:04:f9:39:6a:5d:28:61:3a:a5:
                    1a:48:88:73:0a:71:45:cf:bc:a0:7b:1f:5f:77:63:
                    dd:ac:33:20:43:4d:dd:7e:5b:45:1c:46:e5:4d:15:
                    80:e3:74:46:cc:50:61:21:16:98:ca:31:20:4b:20:
                    4b:b6:a4:f6:74:2e:58:49:8c:0a:52:4b:1e:4d:01:
                    73:77:c3:5a:f5:ec:c7:91:47:95:d9:4e:b3:a7:24:
                    8e:4e:2f:6c:9e:a8:2c:53:93:93:92:90:fb:c6:f2:
                    ba:61:a3:32:23:89:7b:3d:54:01:fd:92:bf:bd:f2:
                    04:4b:41:a5:be:23:1b:4c:c4:50:83:b5:66:37:d0:
                    be:e5:81:21:82:6a:24:02:6e:c5:66:47:0b:bb:72:
                    15:12:29:a1:85:4c:a6:eb:58:52:e1:01:87:37:d8:
                    60:31:51:46:b9:3b:12:ef:46:f9:ce:99:8d:9c:a3:
                    9a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:87:BC:BF:E7:65:0D:EE:9A:85:BC:03:5B:A7:55:7F:64:3D:55:92
            X509v3 Authority Key Identifier:
                keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/1708f033470a4eeeb447437bcdace3f8c11c8366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         dc:86:50:16:c4:a2:65:95:91:4d:c7:12:36:12:56:ca:d8:68:
         6c:9b:e6:fa:eb:3d:42:ff:38:e5:da:84:cc:40:3d:1b:93:90:
         f5:f6:b0:76:50:df:3c:9c:9d:7e:39:e8:cb:b6:e9:d7:a4:2c:
         ff:a6:4f:47:1f:d1:18:1a:04:40:70:1f:96:36:77:c4:70:ae:
         69:dc:36:ec:4a:a7:0d:a8:a6:cd:e4:43:2d:73:e0:39:f2:92:
         89:a4:59:04:3b:79:5b:59:84:44:f0:63:eb:16:ca:d1:31:fb:
         9b:1a:df:fa:1a:d0:91:ae:c5:5e:19:f8:05:2c:ec:1b:6b:1a:
         99:24:29:31:b0:84:3b:90:1d:55:5e:45:a0:b1:00:ef:9f:a3:
         c9:d0:4f:77:0d:21:78:74:2f:80:5e:d4:30:44:5e:33:da:2c:
         06:fc:25:03:3a:09:a3:26:19:b3:25:6e:ee:80:8e:aa:ae:a1:
         c6:f2:9c:75:d0:57:10:30:35:e1:ac:44:51:ae:9a:d6:36:3b:
         3a:32:24:c3:68:1b:7f:66:59:22:a4:96:c7:55:ac:bf:da:cb:
         5b:3e:ed:9c:cd:b1:04:8d:15:e2:61:ad:3c:45:9d:83:60:1b:
         23:73:8c:aa:f6:74:4c:89:ef:e3:eb:d1:28:f5:9d:48:ba:cb:
         21:01:cf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 17:43:26 2023 by rpki-client on console-fra.rpki-client.org