Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/70ca6260b155adee0290c5acc3204621d929de9c.roa
File:                     70ca6260b155adee0290c5acc3204621d929de9c.roa (raw, json)
Hash identifier:          SQn3HEsdszn6wOmDuMKyb/ySYc+h9cowK+9vokc3cDo=
Subject key identifier:   DB:30:C8:F6:89:D0:42:43:B6:41:C8:42:CE:B4:C6:9B:85:76:DC:EC
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       181623
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/70ca6260b155adee0290c5acc3204621d929de9c.roa
Signing time:             Wed 26 Jan 2022 22:46:55 +0000
ROA not before:           Mon 10 Jan 2022 03:00:00 +0000
ROA not after:            Wed 10 Jan 2024 03:00:00 +0000
asID:                     10620
IP address blocks:        181.54.216.0/22 maxlen: 22
                          181.52.72.0/22 maxlen: 22
                          181.55.128.0/22 maxlen: 22
                          181.55.232.0/22 maxlen: 22
                          181.54.72.0/24 maxlen: 24
                          181.51.17.0/24 maxlen: 24
                          181.51.104.0/22 maxlen: 22
                          181.55.92.0/24 maxlen: 24
                          181.51.40.0/22 maxlen: 22
                          181.54.9.0/24 maxlen: 24
                          181.54.192.0/22 maxlen: 22
                          181.53.30.0/24 maxlen: 24
                          181.51.208.0/22 maxlen: 22
                          181.48.0.0/13 maxlen: 24
                          181.48.176.0/24 maxlen: 24
                          181.49.106.0/24 maxlen: 24
                          190.144.130.0/24 maxlen: 24
                          190.144.174.0/24 maxlen: 24
                          190.145.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578531 (0x181623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Jan 10 03:00:00 2022 GMT
            Not After : Jan 10 03:00:00 2024 GMT
        Subject: CN=70ca6260b155adee0290c5acc3204621d929de9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:93:dc:cc:a5:56:e3:f5:a4:a0:f5:65:69:ab:
                    55:2c:a8:15:76:a4:be:29:7a:20:9f:44:87:57:94:
                    29:9a:41:38:e9:ac:23:0b:71:bd:9d:72:20:d1:17:
                    20:a6:c6:43:93:86:fd:c1:c3:a6:35:cc:16:e9:fb:
                    0b:a2:17:c5:94:42:0d:cb:87:6a:45:40:9b:25:c2:
                    d9:17:14:ca:2d:1f:7b:aa:83:f4:c9:62:fc:38:ab:
                    c7:f8:95:b3:80:16:89:92:19:e4:3d:c8:22:97:64:
                    a3:10:53:ad:e6:36:38:95:89:58:1a:49:4b:d5:ac:
                    2b:6c:59:3c:16:97:54:09:40:99:2a:38:7a:5e:59:
                    d8:92:b8:bf:3f:97:91:6f:1f:50:80:67:49:9c:0e:
                    22:6e:7d:4a:c4:62:50:44:b8:e6:1b:50:90:b3:b4:
                    a5:88:6e:3f:01:c9:a1:e0:4d:a6:79:f3:4f:b9:a9:
                    c6:36:b4:b1:dc:a6:6a:2a:00:16:6b:62:2d:eb:61:
                    58:9f:b7:b5:ed:1e:75:a1:64:06:a7:a0:39:b5:2c:
                    ab:d9:45:6d:e8:db:d1:e3:e3:34:0e:4e:3c:78:28:
                    73:ab:5c:a6:de:a3:9d:1f:8d:3f:fa:b2:51:92:d6:
                    e8:71:e4:2b:86:6c:cc:ae:0c:f1:a7:41:c6:0c:a0:
                    f0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:30:C8:F6:89:D0:42:43:B6:41:C8:42:CE:B4:C6:9B:85:76:DC:EC
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/70ca6260b155adee0290c5acc3204621d929de9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.48.0.0/13
                  190.144.130.0/24
                  190.144.174.0/24
                  190.145.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:d4:63:11:cc:4a:9f:b3:91:bd:16:f0:fd:46:fb:d2:9d:27:
         c6:5d:80:0e:b1:c3:ef:fb:fe:8c:4a:e2:df:3c:1f:f5:7f:30:
         e6:11:db:c6:3e:0c:09:99:f7:c1:0c:87:3a:4c:2f:b0:09:e0:
         5e:2d:49:93:8b:0d:55:80:bb:6c:7d:4f:93:ff:58:22:8f:3a:
         0a:33:bb:cb:b9:db:3f:72:41:ee:e7:c3:44:31:52:bb:f6:b8:
         11:0c:86:69:f6:fa:64:df:d5:ad:da:9e:11:e1:c2:23:28:32:
         47:6e:d1:4c:a8:41:09:51:df:5c:0e:c8:53:64:74:36:78:4b:
         24:fc:c4:10:38:91:d9:da:be:99:07:f9:81:48:d7:3d:f9:75:
         9a:b4:d6:20:fd:6b:3f:84:36:aa:b1:72:93:f1:6c:c8:f7:a4:
         3f:05:14:07:66:ff:50:cb:22:15:6b:1b:62:00:77:39:c7:84:
         e0:1e:73:59:5f:e2:95:84:a6:49:34:f7:31:54:3e:7f:55:32:
         50:df:19:f0:b8:f8:96:75:a9:fe:b1:56:53:5f:0a:99:58:ec:
         27:1f:52:29:71:c1:b3:d6:d1:b8:f4:11:1f:5f:bb:69:dd:17:
         53:da:f6:15:db:33:71:91:d5:bc:a5:d9:a5:dd:80:f2:f8:a4:
         bd:0d:15:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org