Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5ff7c6b15992a8a384181c7c46a5ec6857a17ad8.roa
File:                     5ff7c6b15992a8a384181c7c46a5ec6857a17ad8.roa (raw, json)
Hash identifier:          wJ8iDTybM/hCPknKazJFVKXwXKIrBk5cKEnT8M+6pUA=
Subject key identifier:   4B:67:4F:F9:D2:85:4B:06:6A:68:15:B2:56:84:9A:15:25:A9:EB:3E
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       198BC5
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5ff7c6b15992a8a384181c7c46a5ec6857a17ad8.roa
Signing time:             Fri 18 Mar 2022 20:48:28 +0000
ROA not before:           Fri 18 Mar 2022 03:00:00 +0000
ROA not after:            Mon 18 Mar 2024 03:00:00 +0000
asID:                     14080
IP address blocks:        190.145.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Sun 17 Mar 2024 08:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674181 (0x198bc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Mar 18 03:00:00 2022 GMT
            Not After : Mar 18 03:00:00 2024 GMT
        Subject: CN=5ff7c6b15992a8a384181c7c46a5ec6857a17ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:c8:78:53:25:e4:a8:ff:b6:f2:77:ec:03:
                    8a:cf:e2:5b:8f:35:3d:5c:2b:0c:84:db:3b:c3:72:
                    09:7f:fb:a4:f2:d6:87:5a:ef:ac:c7:d0:4d:99:9a:
                    fb:dd:2c:14:8e:53:4e:f3:0c:d4:33:b9:5d:27:93:
                    c0:26:a2:7d:37:8c:e6:4b:87:b2:c0:e4:bf:70:a6:
                    c7:40:51:f3:f8:3d:61:93:f3:3e:1b:a5:ec:14:13:
                    d4:31:08:03:50:f9:61:9c:9c:19:da:00:20:d2:75:
                    ba:b6:2b:6e:e5:88:ce:d8:bf:b3:0d:e2:4a:88:15:
                    55:08:1c:a6:4d:b5:f3:c7:f6:eb:25:e6:fe:f2:d2:
                    dc:58:6a:59:5f:36:57:9e:e8:9e:ce:a5:04:8b:9b:
                    92:d3:74:0c:5f:be:9c:e4:3a:86:4f:b6:90:94:ce:
                    4d:46:8d:d3:5e:57:f1:49:23:c8:65:3c:5c:de:95:
                    0a:94:5b:94:4d:53:69:f5:57:b9:1a:57:b9:39:47:
                    66:46:06:88:03:7d:79:51:64:3b:60:ef:0f:6b:17:
                    69:e0:10:3a:38:37:74:bf:79:4f:52:bd:39:d2:79:
                    21:32:a7:fe:f7:48:e7:0f:45:4d:7c:c8:76:a7:6c:
                    d3:70:86:cc:06:12:43:1f:e8:c9:be:8c:d4:44:a5:
                    69:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:67:4F:F9:D2:85:4B:06:6A:68:15:B2:56:84:9A:15:25:A9:EB:3E
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5ff7c6b15992a8a384181c7c46a5ec6857a17ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2a:38:1a:e7:d2:55:4d:76:96:37:74:c3:92:6a:91:d8:84:1a:
         ba:bd:b2:2b:ac:a2:9c:52:19:42:cf:27:26:c8:58:96:0d:5a:
         6e:a0:13:c2:14:a9:a3:3e:09:35:27:e2:d5:0d:5a:e4:ba:3e:
         ec:07:fe:19:13:f0:40:ec:9b:be:e2:16:f9:57:0e:15:5c:1f:
         a0:8f:b7:56:22:8c:15:5c:d0:9d:a2:8c:56:fb:b1:27:af:3b:
         98:c4:6a:c3:7d:cb:ff:d6:ad:0c:2b:42:14:62:a3:92:03:ba:
         1c:45:1b:c3:03:23:1b:ac:6b:31:56:b5:db:7f:04:85:48:bb:
         9f:b5:ec:36:90:a4:74:fc:28:46:06:32:e8:fd:07:cd:a3:38:
         58:0a:20:87:e9:45:3a:87:d9:f8:6f:ed:ee:b3:de:14:96:62:
         c4:bd:6b:e8:56:1d:b1:ff:01:09:34:c5:b4:ce:7f:6b:a0:57:
         b3:c7:13:36:bd:a2:bb:0b:12:0f:c2:bc:74:07:75:30:80:60:
         ed:d1:34:23:7a:87:09:ef:26:b8:5c:d0:62:3a:0c:27:68:ee:
         bf:8e:12:dc:db:fb:fc:6c:0f:d6:32:da:43:47:62:e2:ef:90:
         39:f2:31:09:90:50:19:48:f1:85:b1:df:e0:a2:2e:a5:f2:8b:
         7f:71:2e:f0
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDGYvFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjIwMzE4
MDMwMDAwWhcNMjQwMzE4MDMwMDAwWjAzMTEwLwYDVQQDEyg1ZmY3YzZiMTU5OTJh
OGEzODQxODFjN2M0NmE1ZWM2ODU3YTE3YWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp6bIeFMl5Kj/tvJ37AOKz+JbjzU9XCsMhNs7w3IJf/uk8taH
Wu+sx9BNmZr73SwUjlNO8wzUM7ldJ5PAJqJ9N4zmS4eywOS/cKbHQFHz+D1hk/M+
G6XsFBPUMQgDUPlhnJwZ2gAg0nW6titu5YjO2L+zDeJKiBVVCBymTbXzx/brJeb+
8tLcWGpZXzZXnuiezqUEi5uS03QMX76c5DqGT7aQlM5NRo3TXlfxSSPIZTxc3pUK
lFuUTVNp9Ve5Gle5OUdmRgaIA315UWQ7YO8Paxdp4BA6ODd0v3lPUr050nkhMqf+
90jnD0VNfMh2p2zTcIbMBhJDH+jJvozURKVpewIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFEtnT/nShUsGamgVslaEmhUlqes+MB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1
P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl
Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhLzVmZjdjNmIxNTk5MmE4YTM4NDE4MWM3YzQ2YTVlYzY4NTdhMTdhZDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAL6RMA0GCSqGSIb3DQEBCwUAA4IBAQAqOBrn0lVNdpY3dMOS
apHYhBq6vbIrrKKcUhlCzycmyFiWDVpuoBPCFKmjPgk1J+LVDVrkuj7sB/4ZE/BA
7Ju+4hb5Vw4VXB+gj7dWIowVXNCdooxW+7EnrzuYxGrDfcv/1q0MK0IUYqOSA7oc
RRvDAyMbrGsxVrXbfwSFSLuftew2kKR0/ChGBjLo/QfNozhYCiCH6UU6h9n4b+3u
s94UlmLEvWvoVh2x/wEJNMW0zn9roFezxxM2vaK7CxIPwrx0B3UwgGDt0TQjeocJ
7ya4XNBiOgwnaO6/jhLc2/v8bA/WMtpDR2Li75A58jEJkFAZSPGFsd/goi6l8ot/
cS7w
-----END CERTIFICATE-----
Generated at Sun Mar 17 11:22:28 2024 by rpki-client on console-ams.rpki-client.org