Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/6ac927c2f23c41b24816450a1044704bf040fb99.roa
File:                     6ac927c2f23c41b24816450a1044704bf040fb99.roa (raw, json)
Hash identifier:          LbOdFbNtLNRxL2+Z6UMYNsjF1tfcZXO4uTo3LNXGjy0=
Subject key identifier:   4E:BF:FA:E5:5A:6E:64:93:54:46:3C:C0:A7:FB:CB:B4:72:BB:39:F1
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       1C3E95
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/6ac927c2f23c41b24816450a1044704bf040fb99.roa
Signing time:             Thu 16 Jun 2022 22:52:24 +0000
ROA not before:           Fri 25 Jun 2021 03:00:00 +0000
ROA not after:            Fri 25 Jun 2060 03:00:00 +0000
asID:                     14080
IP address blocks:        190.144.62.0/24 maxlen: 24
                          181.49.92.0/22 maxlen: 22
                          186.86.140.0/22 maxlen: 22
                          186.86.155.0/24 maxlen: 24
                          190.144.169.0/24 maxlen: 24
                          190.144.177.0/24 maxlen: 24
                          190.144.196.0/24 maxlen: 24
                          190.144.201.0/24 maxlen: 24
                          190.144.202.0/24 maxlen: 24
                          190.144.203.0/24 maxlen: 24
                          190.144.204.0/24 maxlen: 24
                          190.144.205.0/24 maxlen: 24
                          190.144.209.0/24 maxlen: 24
                          190.145.116.0/24 maxlen: 24
                          190.145.126.0/24 maxlen: 24
                          190.145.224.0/22 maxlen: 22
                          190.145.230.0/23 maxlen: 23
                          190.145.232.0/21 maxlen: 21
                          190.145.240.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1851029 (0x1c3e95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Jun 25 03:00:00 2021 GMT
            Not After : Jun 25 03:00:00 2060 GMT
        Subject: CN=6ac927c2f23c41b24816450a1044704bf040fb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:72:6d:c4:41:57:86:2f:5c:42:bd:f4:e4:10:
                    74:e4:0c:ed:32:44:ae:84:e9:ec:b1:98:5d:52:f4:
                    69:48:bf:80:1b:5a:ed:d4:8c:ee:e4:f4:5a:ce:cf:
                    3a:38:52:94:5c:14:a3:a9:6f:b0:0d:2d:06:68:08:
                    d6:f6:79:b1:36:b8:0e:d2:aa:10:16:16:0d:be:44:
                    76:a0:66:f5:02:cc:62:65:f5:68:93:9a:e9:ac:11:
                    d0:79:b7:8c:66:fe:be:5e:11:ed:97:71:ce:07:85:
                    94:00:78:00:e0:ea:c5:7e:dc:91:13:22:e2:5a:cb:
                    a0:ea:db:a6:33:89:f2:16:5d:65:5f:fe:49:06:38:
                    11:d1:b6:19:02:d6:84:73:b0:98:1d:d9:1d:c5:e3:
                    88:7e:87:7d:da:d1:08:a4:4d:a4:06:6a:22:52:e7:
                    0f:d5:cc:fb:78:1b:3f:07:26:12:44:19:06:40:31:
                    e4:14:04:21:ba:71:ca:af:28:cd:02:6d:e1:3b:89:
                    74:78:0d:81:e7:77:30:bc:6c:8f:e6:76:26:39:a8:
                    91:7e:24:91:e2:cb:4f:fd:91:11:06:bd:f5:5d:a7:
                    62:1c:a5:fc:4e:cd:22:4b:1a:8e:e1:33:db:6c:7b:
                    a1:c7:e2:a0:c6:c4:37:77:82:88:ed:ab:8d:5a:b8:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BF:FA:E5:5A:6E:64:93:54:46:3C:C0:A7:FB:CB:B4:72:BB:39:F1
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/6ac927c2f23c41b24816450a1044704bf040fb99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.49.92.0/22
                  186.86.140.0/22
                  186.86.155.0/24
                  190.144.62.0/24
                  190.144.169.0/24
                  190.144.177.0/24
                  190.144.196.0/24
                  190.144.201.0-190.144.205.255
                  190.144.209.0/24
                  190.145.116.0/24
                  190.145.126.0/24
                  190.145.224.0/22
                  190.145.230.0-190.145.255.255

    Signature Algorithm: sha256WithRSAEncryption
         27:ae:e0:7d:fe:cf:89:09:12:8d:8f:0f:f7:f7:b2:3e:7e:eb:
         6a:f0:91:16:11:42:01:2f:a9:ba:77:fd:07:c9:9d:84:13:30:
         c6:7f:4d:55:08:d6:b3:8f:7c:3a:fc:a5:5b:df:bf:05:14:12:
         25:4c:e8:17:ce:90:cb:64:ec:1e:70:b8:0b:aa:8b:fe:aa:c6:
         6a:a0:70:86:35:16:56:3c:d9:26:8c:3d:d2:e8:05:c8:fb:b8:
         47:c2:b5:3a:0a:85:5b:36:5c:37:64:be:33:31:a5:11:6f:ac:
         5f:58:7b:b7:11:4c:cd:49:96:ca:20:39:c9:f7:df:ee:95:74:
         f7:5d:5a:06:85:5b:80:45:2c:78:f8:33:d4:f2:6f:f1:ec:a4:
         89:b4:5b:cc:68:05:2c:2a:d5:a8:0c:08:93:8f:b5:5e:de:ee:
         66:17:d6:26:0e:00:d9:a1:95:b0:ec:0b:51:75:ba:d3:f1:8a:
         6c:34:eb:71:66:9f:11:ba:1f:6c:fa:e1:c8:da:90:0e:3a:85:
         bb:dc:e8:4e:ca:a4:52:30:19:bb:92:e7:60:cf:75:76:24:c3:
         3e:56:88:70:fc:bb:a9:fa:7a:0a:d0:9c:18:49:af:03:0c:6d:
         43:7d:39:0c:19:2a:18:b4:fe:01:d6:2f:70:1e:ac:48:3b:c4:
         37:59:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:07 2023 by rpki-client on console-fra.rpki-client.org