Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/8b4d2a4273d9d854bdcde6e4580d73fc3c463e6d.roa
File:                     8b4d2a4273d9d854bdcde6e4580d73fc3c463e6d.roa (raw, json)
Hash identifier:          iBNB5RkkuIjPI6pyeJlYcrixDgW0nvZXltvlyeNxqoQ=
Subject key identifier:   BB:AF:64:66:7A:BD:87:80:52:17:3D:56:1F:1C:CD:A7:E9:F1:39:FA
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       1E9C52
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/8b4d2a4273d9d854bdcde6e4580d73fc3c463e6d.roa
Signing time:             Tue 13 Sep 2022 14:38:55 +0000
ROA not before:           Thu 18 Nov 2021 03:00:00 +0000
ROA not after:            Thu 18 Nov 2060 03:00:00 +0000
asID:                     14080
IP address blocks:        186.82.62.0/23 maxlen: 23
                          190.158.112.0/22 maxlen: 24
                          201.221.164.0/22 maxlen: 24
                          201.216.12.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2006098 (0x1e9c52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Nov 18 03:00:00 2021 GMT
            Not After : Nov 18 03:00:00 2060 GMT
        Subject: CN=8b4d2a4273d9d854bdcde6e4580d73fc3c463e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:ee:86:e1:e5:18:50:a7:e7:4d:98:a7:96:
                    65:bb:9a:75:71:7c:51:e0:64:2d:c8:1f:03:4a:69:
                    4a:00:54:a5:1a:e5:41:11:b8:3e:90:23:66:f2:01:
                    18:f8:93:71:fd:f6:f3:fd:d2:cf:0e:1b:96:5a:90:
                    fb:28:89:73:28:13:6b:a2:62:b9:42:5a:4f:2c:2c:
                    4c:7a:f3:45:31:aa:2a:38:7a:ed:84:20:ff:ab:ff:
                    2e:19:64:8d:9a:f4:76:8a:e7:c0:38:16:1b:9f:28:
                    fa:47:51:53:57:ee:75:84:24:34:4a:23:d2:04:41:
                    ae:19:e6:2d:9c:bc:78:03:24:30:6c:74:2d:35:06:
                    8b:ef:24:1c:f4:57:a2:e3:e1:fe:04:66:5f:75:db:
                    7c:e0:0a:37:45:78:9e:43:0a:dd:f0:ce:4e:0d:d8:
                    78:e0:f0:ab:58:fe:b4:fa:c6:d5:ee:60:f7:d6:0d:
                    46:ef:d4:55:50:9c:cf:81:46:5b:c3:77:d9:5d:d3:
                    13:09:c3:a4:c5:c0:7e:f9:eb:8a:a9:0d:8f:6f:69:
                    a5:cc:69:c2:ab:a9:bc:bc:4d:df:c7:fb:a9:c8:82:
                    e9:23:e2:cb:e4:41:74:b1:73:ea:21:6a:fb:8a:35:
                    7d:a5:2e:df:8a:5f:8a:e7:98:00:5c:92:d3:ca:8a:
                    ea:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AF:64:66:7A:BD:87:80:52:17:3D:56:1F:1C:CD:A7:E9:F1:39:FA
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/8b4d2a4273d9d854bdcde6e4580d73fc3c463e6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.82.62.0/23
                  190.158.112.0/22
                  201.216.12.0/22
                  201.221.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:70:77:a5:26:ff:aa:a8:b4:d2:91:63:42:c5:a2:3b:32:57:
         48:98:16:68:9f:0d:64:aa:e4:f4:3c:d0:2d:b6:08:8b:cf:c4:
         99:6f:d0:7f:0a:34:91:0f:ed:15:8b:80:8d:e6:62:72:9b:98:
         3d:1e:2f:8d:b1:44:8d:3b:33:70:24:00:59:11:70:6d:d3:37:
         e0:7b:6b:04:7a:47:94:4f:8a:78:42:75:f6:4a:5a:66:a5:95:
         44:ce:aa:2c:da:26:1d:2b:6e:c9:b1:62:d8:4a:48:2f:82:14:
         b4:f9:b3:2f:e9:05:0d:9b:a8:ea:48:32:cf:5a:c2:0c:24:3a:
         51:ea:fb:11:39:2f:3f:76:57:d3:21:31:e9:5f:26:5c:42:f8:
         15:e7:be:49:9e:32:51:a4:29:e6:c3:0b:28:e1:0b:97:72:c3:
         90:87:2e:42:a0:97:22:8d:d3:53:9d:f6:48:06:be:8d:18:30:
         93:99:c4:7a:f2:98:37:9c:b2:68:26:10:9b:95:49:7f:19:08:
         40:a4:4a:27:d9:db:14:86:72:a6:d5:95:8d:c6:4f:08:2d:ef:
         f6:f8:9a:b7:f4:50:5b:df:c6:58:ec:fb:2c:bf:32:89:c8:59:
         3a:db:7e:e4:3c:7f:8d:e3:0f:89:47:f1:12:b8:6c:8b:4c:4c:
         63:56:e9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:07 2023 by rpki-client on console-fra.rpki-client.org