Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/fb2abe5c2a97dfd19444df299afcd94ec610a5f8.roa
File:                     fb2abe5c2a97dfd19444df299afcd94ec610a5f8.roa (raw, json)
Hash identifier:          lRrSE5x0AQmNsDv8tS+U035hDL2mc/qo+q+w7g+xcTE=
Subject key identifier:   67:34:98:A8:1E:F4:72:56:01:12:29:D9:27:B1:4D:7B:A7:26:2D:ED
Certificate issuer:       /CN=0eefd3ca564e9210c3e5d7e79504f7fd6e635260
Certificate serial:       10345D
Authority key identifier: EE:82:5D:83:CE:B3:3E:5B:AF:24:99:89:04:8D:ED:3F:92:5C:20:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0eefd3ca564e9210c3e5d7e79504f7fd6e635260.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/fb2abe5c2a97dfd19444df299afcd94ec610a5f8.roa
Signing time:             Mon 02 Aug 2021 22:06:49 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     27659
IP address blocks:        190.14.48.0/23 maxlen: 23
                          190.14.50.0/23 maxlen: 23
                          190.14.52.0/23 maxlen: 23
                          190.14.56.0/23 maxlen: 23
                          190.14.58.0/23 maxlen: 23
                          190.14.60.0/23 maxlen: 23
                          190.14.62.0/23 maxlen: 23
                          200.6.100.0/23 maxlen: 23
                          200.6.102.0/23 maxlen: 23
                          200.6.104.0/23 maxlen: 23
                          200.6.106.0/23 maxlen: 23
                          200.6.108.0/23 maxlen: 23
                          200.6.110.0/23 maxlen: 23
                          200.6.112.0/23 maxlen: 23
                          200.6.114.0/23 maxlen: 23
                          200.6.116.0/23 maxlen: 23
                          200.6.118.0/23 maxlen: 23
                          200.6.120.0/23 maxlen: 23
                          200.6.122.0/23 maxlen: 23
                          200.6.124.0/23 maxlen: 23
                          200.6.126.0/23 maxlen: 23
                          200.6.96.0/23 maxlen: 23
                          200.6.98.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061981 (0x10345d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eefd3ca564e9210c3e5d7e79504f7fd6e635260
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=fb2abe5c2a97dfd19444df299afcd94ec610a5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:22:d3:20:ba:bb:20:4a:ef:0a:4e:04:fd:
                    91:af:5a:53:6d:90:99:2a:b5:06:d0:c0:82:9b:6b:
                    84:0a:ee:c2:82:68:c3:41:8b:c4:1b:ec:df:0c:94:
                    9e:c7:8b:1b:39:33:bc:24:a1:21:7e:0b:79:da:dd:
                    a1:57:3c:5c:82:71:3e:10:04:ab:15:f8:5d:63:a6:
                    2b:8e:b9:c5:3c:91:ad:7c:8a:b6:f4:e4:5a:44:7c:
                    e9:e3:4e:8d:fa:99:04:24:11:2b:b7:ae:49:9b:42:
                    e6:3c:f4:ab:01:ca:71:0e:08:29:6c:d8:55:de:3d:
                    8e:d7:6d:df:d6:a4:09:83:8a:a1:b8:71:c5:43:ad:
                    00:32:15:df:7b:b3:0a:ee:e0:4c:ad:e9:36:b0:07:
                    d0:ad:6b:27:80:70:df:74:f8:6c:6f:85:1e:bf:de:
                    bb:45:76:b0:01:24:1d:21:e7:d2:8c:09:46:1f:16:
                    24:e3:34:0f:cf:c5:17:52:bc:20:b3:5d:c3:96:41:
                    ee:e6:b0:aa:a5:fa:dd:01:49:8f:b1:15:da:9b:9a:
                    9d:b4:47:19:41:3d:0a:3c:97:93:96:83:c9:56:af:
                    f3:56:a1:e5:3a:c0:6a:a3:2e:77:ac:30:21:94:0e:
                    f5:b8:e3:3c:06:60:a1:13:55:83:01:17:1b:4f:fe:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:34:98:A8:1E:F4:72:56:01:12:29:D9:27:B1:4D:7B:A7:26:2D:ED
            X509v3 Authority Key Identifier:
                keyid:EE:82:5D:83:CE:B3:3E:5B:AF:24:99:89:04:8D:ED:3F:92:5C:20:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0eefd3ca564e9210c3e5d7e79504f7fd6e635260.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/fb2abe5c2a97dfd19444df299afcd94ec610a5f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c5eb4eb-bb0e-4190-9762-cb00b8498c4d/0eefd3ca564e9210c3e5d7e79504f7fd6e635260.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.48.0-190.14.53.255
                  190.14.56.0/21
                  200.6.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:78:ce:48:9c:62:fa:81:8a:69:f7:0e:cf:c2:5c:25:cf:6f:
         0c:0d:70:68:0b:0c:8e:d5:e1:53:59:f4:27:11:96:c4:36:db:
         aa:28:ae:51:95:df:3f:76:34:2c:4d:fb:3c:bd:4b:9d:a5:ce:
         18:4d:19:8b:fd:1c:67:fe:c5:42:51:9f:46:e8:b1:43:93:a5:
         15:e1:7d:56:23:5d:8b:9a:de:4a:82:3d:91:4a:4a:e2:e3:49:
         26:03:e3:38:12:cb:3b:e7:a7:c7:9e:1c:71:ce:cb:0b:75:b9:
         75:27:76:d2:36:f1:b3:5a:e6:c9:32:4a:f9:69:c8:d5:26:c6:
         46:b5:2f:55:0b:8d:61:1b:23:41:f9:d0:16:0c:5d:65:c1:f4:
         bd:67:32:37:37:ed:61:0a:c6:41:9c:04:7e:9d:2b:6a:ba:6a:
         73:c2:32:e6:46:f0:63:2c:44:67:0e:f6:04:91:e7:e8:3e:3b:
         18:15:f9:30:64:01:d6:b3:ba:0c:4e:ef:66:2c:d6:59:c3:a4:
         0f:50:e3:6f:be:64:74:80:0a:26:ac:18:46:06:cb:ae:3d:ac:
         08:ca:42:2a:14:b2:21:a1:8a:95:ee:f3:fb:00:73:c0:63:85:
         8c:12:21:15:c1:03:7b:32:72:16:2e:20:c0:63:0e:27:4c:56:
         d1:5a:15:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:09 2023 by rpki-client on console-fra.rpki-client.org