Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/6a85707566a86ebffc841a7a5ecc1df5ff53f684.roa
File:                     6a85707566a86ebffc841a7a5ecc1df5ff53f684.roa (raw, json)
Hash identifier:          sagn4NmAHGZRclhkYC4CUPrNOO0zeVVI+q3SjHPM2pE=
Subject key identifier:   6B:A8:D1:62:9E:D0:82:30:7D:A8:B5:98:EA:A2:D6:B6:00:34:75:A6
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       1F4F22
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/6a85707566a86ebffc841a7a5ecc1df5ff53f684.roa
Signing time:             Thu 13 Oct 2022 12:56:44 +0000
ROA not before:           Wed 17 Nov 2021 03:00:00 +0000
ROA not after:            Thu 18 Nov 2060 03:00:00 +0000
asID:                     14080
IP address blocks:        186.82.62.0/23 maxlen: 23
                          190.158.112.0/22 maxlen: 24
                          201.221.164.0/22 maxlen: 24
                          201.216.12.0/22 maxlen: 24
                          190.84.115.0/24 maxlen: 24
                          200.118.96.0/22 maxlen: 24
                          200.118.187.0/24 maxlen: 24
                          200.118.198.0/24 maxlen: 24
                          200.118.194.0/24 maxlen: 24
                          190.157.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2051874 (0x1f4f22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Nov 17 03:00:00 2021 GMT
            Not After : Nov 18 03:00:00 2060 GMT
        Subject: CN=6a85707566a86ebffc841a7a5ecc1df5ff53f684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:82:2f:aa:20:d9:bd:1b:72:60:c2:66:6c:
                    fb:1a:6c:b8:58:19:61:ba:8b:2d:f3:b2:dd:87:31:
                    ed:3a:52:a2:29:10:7b:61:51:05:ac:42:0e:09:c1:
                    c6:62:39:1e:1f:d9:84:9a:84:15:b4:22:1f:5f:5f:
                    82:22:12:c8:bb:df:67:46:d0:79:72:82:3d:9e:4d:
                    fa:ad:04:86:1c:d2:22:e9:ac:99:08:2c:0c:19:e9:
                    39:ef:cc:c6:59:28:e3:4a:58:7e:fb:14:04:54:8e:
                    0b:62:77:07:92:f2:d7:87:d5:ae:8f:ec:bc:e3:cf:
                    03:1d:97:5b:c3:bb:a2:cc:e9:76:3b:87:fb:a5:c4:
                    c0:d4:19:b7:1a:ec:e6:a3:09:b6:78:58:b3:e8:e6:
                    3e:60:7f:fc:bd:f4:99:eb:2b:0c:db:2e:0d:6b:7d:
                    17:1a:b4:3b:4a:94:6e:27:c7:b1:61:98:6c:ae:45:
                    13:d6:4d:f4:f9:13:30:90:6e:0c:7b:82:44:3d:e4:
                    83:80:37:40:57:5d:dd:db:6b:39:38:32:ad:99:62:
                    14:44:4e:dd:4a:a5:bc:80:26:b3:6e:c2:c8:23:dd:
                    6b:66:9b:2a:06:af:00:a6:69:15:78:d2:c6:0c:bb:
                    07:88:ce:64:fe:de:3e:48:2b:be:ed:0b:1c:6d:76:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A8:D1:62:9E:D0:82:30:7D:A8:B5:98:EA:A2:D6:B6:00:34:75:A6
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/6a85707566a86ebffc841a7a5ecc1df5ff53f684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.82.62.0/23
                  190.84.115.0/24
                  190.157.0.0/16
                  190.158.112.0/22
                  200.118.96.0/22
                  200.118.187.0/24
                  200.118.194.0/24
                  200.118.198.0/24
                  201.216.12.0/22
                  201.221.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:33:1f:ed:38:62:ab:b6:b6:51:3d:19:e0:38:12:e3:f7:60:
         73:d9:ef:4f:87:f4:2b:ae:81:ef:57:77:dd:66:c5:93:68:93:
         6b:27:f0:99:23:0a:c2:9b:da:71:30:ad:e1:d8:1e:68:1d:a0:
         ab:e8:34:33:a7:10:98:1c:37:6b:8d:c4:cf:84:73:c2:23:16:
         08:d6:6b:e3:38:c8:5b:3c:cd:05:e5:08:b6:bd:85:d7:f7:14:
         e3:6e:86:fe:8f:29:25:72:16:eb:ee:61:ce:9d:12:a5:c7:5f:
         b6:5f:b9:b4:e4:99:28:5a:68:39:cd:0a:60:9c:79:5e:70:6a:
         a3:b1:45:92:4e:07:f4:ec:96:37:ff:2c:c5:1a:5d:95:f8:04:
         e4:69:5c:50:d7:7e:3e:fd:01:67:ef:e1:83:ae:c3:cb:d8:aa:
         30:eb:f8:17:bf:04:4d:5d:dc:a4:2e:93:c1:fb:cb:16:61:75:
         b3:23:b9:25:96:14:7c:47:40:cb:12:8a:6d:2c:31:32:02:ac:
         ac:9f:67:19:29:b2:bc:59:3e:bf:46:3a:7f:07:b9:a5:39:03:
         44:2a:00:53:a8:9a:63:08:f2:6a:50:cc:e1:c1:7b:19:8f:2b:
         62:99:20:1c:39:c0:5c:a4:c5:b6:b9:9b:bf:a0:86:1e:98:1c:
         e2:64:fc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org