Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/7eb855f56d14df78861071b97b28e67f5f7f091a.roa
File:                     7eb855f56d14df78861071b97b28e67f5f7f091a.roa (raw, json)
Hash identifier:          sNt9ZQn8mX9b8juTyqKCcqkusA1cF7t42t2WzeUAkk0=
Subject key identifier:   51:FE:27:CE:85:65:3B:AA:53:CB:09:4C:08:ED:49:6D:5B:2F:31:07
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       17A7E3
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/7eb855f56d14df78861071b97b28e67f5f7f091a.roa
Signing time:             Tue 11 Jan 2022 17:41:06 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        186.147.0.0/16 maxlen: 24
                          186.80.0.0/16 maxlen: 24
                          186.81.0.0/16 maxlen: 24
                          186.82.0.0/16 maxlen: 24
                          186.83.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1550307 (0x17a7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=7eb855f56d14df78861071b97b28e67f5f7f091a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6b:df:57:f7:74:10:09:68:51:0a:a4:7b:00:
                    7c:30:cb:7c:43:44:bc:9c:5a:85:95:d3:57:63:34:
                    27:54:8f:62:44:d6:09:a5:e2:49:f3:15:c7:31:21:
                    31:c7:de:b2:65:45:f3:6b:a0:38:82:8d:8c:e6:71:
                    0c:03:3c:3e:8b:61:95:91:c9:c0:e8:6b:5a:8a:58:
                    20:9b:cd:5e:66:20:68:2a:fc:55:41:c7:44:b5:27:
                    b0:38:ce:d4:a3:ad:b7:d8:00:3b:11:8b:31:fd:90:
                    57:6d:be:d7:06:06:c9:c8:fe:5a:97:5f:16:79:6e:
                    71:7f:a1:45:f7:d5:47:09:61:70:e9:37:c8:37:56:
                    c5:3d:bb:0c:c5:07:cf:74:14:17:31:a1:bb:76:00:
                    90:93:31:ca:2b:6b:ad:93:10:00:bc:d5:32:50:8e:
                    7f:16:79:b2:3a:f5:5a:39:6b:ec:05:b3:b6:fc:09:
                    4b:15:c4:f0:10:e0:f7:2f:79:7a:fb:fa:b8:a2:50:
                    55:ff:69:d6:23:f6:ed:0f:fc:ea:2b:96:2c:6a:bd:
                    5e:f5:88:7c:7d:94:b8:2d:1e:cf:c6:29:dd:a5:7e:
                    d3:50:02:5c:9d:20:34:55:20:69:3f:85:af:5b:97:
                    86:27:80:22:c5:6d:7c:a5:db:fb:80:6d:c1:be:4d:
                    09:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FE:27:CE:85:65:3B:AA:53:CB:09:4C:08:ED:49:6D:5B:2F:31:07
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/7eb855f56d14df78861071b97b28e67f5f7f091a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.80.0.0/14
                  186.147.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:0c:8c:84:4c:b5:7f:4b:9a:92:6d:00:6b:e7:06:56:7c:45:
         d8:cd:ef:b8:85:b0:da:85:ba:38:9d:73:c5:13:0a:89:0c:33:
         29:12:38:69:e8:8b:0a:66:7c:77:24:da:2e:04:a4:96:7f:a1:
         47:3f:c0:d3:cf:d5:a8:d5:6b:e1:82:38:e4:c4:5e:fb:0a:2c:
         cc:cb:28:86:db:eb:a3:ef:75:e0:41:d0:ab:c6:2f:5f:e2:1a:
         9f:03:d3:64:57:d0:b3:f1:f1:6b:f6:9a:aa:cc:79:b1:01:ef:
         28:10:b9:ec:51:2d:a3:c4:e9:ae:fe:bf:75:4f:9f:ab:cb:df:
         77:4a:e6:de:63:84:48:23:da:ff:73:fd:ef:25:dc:65:bb:a1:
         44:6b:24:90:4c:52:b7:9b:70:4f:03:cf:14:96:c5:cf:f5:44:
         8c:b6:64:a8:c8:ec:86:8e:17:a5:1f:7b:95:b9:88:31:24:60:
         3e:6c:63:25:fe:29:68:1c:0c:81:06:a8:d8:89:a9:3e:ca:cb:
         93:ff:0e:d8:17:77:ad:c6:40:39:5d:1c:8a:63:90:8b:08:59:
         6f:34:66:85:d7:59:de:90:32:3b:97:52:49:7f:0a:f3:27:cc:
         a4:c7:bb:70:fa:51:03:21:fb:b0:42:4d:f0:7d:4c:2e:03:fa:
         a5:79:fb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:07 2023 by rpki-client on console-fra.rpki-client.org