Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/1d2d509048a4d913a7f0d59daac396dba5aee81d.roa
File:                     1d2d509048a4d913a7f0d59daac396dba5aee81d.roa (raw, json)
Hash identifier:          J+83gfTFfMgVu6UPp0Hm3vE9bQKtdYIShBovdB4o1bw=
Subject key identifier:   B7:CB:E8:0C:6F:C7:03:BA:1D:21:DA:BE:E3:7A:1C:12:6F:0A:D5:3E
Certificate issuer:       /CN=0d5340d79102b793331c752f0dbbe0ddca1e18f6
Certificate serial:       0DACB0
Authority key identifier: F6:86:EF:12:82:2D:FC:94:82:86:B4:5C:22:31:32:55:C1:75:E2:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d5340d79102b793331c752f0dbbe0ddca1e18f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/1d2d509048a4d913a7f0d59daac396dba5aee81d.roa
Signing time:             Wed 24 Mar 2021 14:30:24 +0000
ROA not before:           Wed 24 Mar 2021 14:30:24 +0000
ROA not after:            Tue 24 Mar 2026 14:30:24 +0000
asID:                     28009
IP address blocks:        190.93.192.0/20 maxlen: 24
                          190.93.208.0/20 maxlen: 24
                          200.85.176.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896176 (0xdacb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d5340d79102b793331c752f0dbbe0ddca1e18f6
        Validity
            Not Before: Mar 24 14:30:24 2021 GMT
            Not After : Mar 24 14:30:24 2026 GMT
        Subject: CN=1d2d509048a4d913a7f0d59daac396dba5aee81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:34:39:02:9a:76:12:87:c0:61:d4:f8:ed:a8:
                    29:f4:c0:ea:46:99:21:7e:47:1b:58:ad:51:67:a7:
                    ba:1a:ff:04:c0:3d:fe:e4:a2:f4:d5:54:fc:98:ed:
                    44:5c:5b:32:2d:12:45:df:9e:93:e2:e7:69:44:2f:
                    97:92:30:0d:de:ee:6c:f8:ae:60:d6:51:b5:41:4b:
                    7a:a9:d2:e8:45:74:94:14:48:38:9e:c4:cd:cd:f8:
                    d7:63:d6:d5:c2:00:3d:58:32:57:ff:d1:20:3e:b5:
                    db:9c:fc:30:87:04:34:35:95:78:17:97:c7:8b:41:
                    49:cf:72:fd:78:6b:84:a5:3e:c5:76:07:5d:15:d5:
                    0c:e5:f7:de:3d:be:63:f7:24:f3:33:22:f0:8d:b3:
                    f4:81:dc:24:39:1f:ff:f6:a0:eb:05:11:f9:ea:41:
                    8a:2b:cc:64:9b:d1:1d:e0:56:cf:c5:38:d2:dc:f4:
                    df:5e:1a:ab:57:5e:e0:20:a0:2e:cc:f8:ff:38:0c:
                    70:44:27:1e:c1:3d:48:6f:61:c7:72:f0:1e:8e:7a:
                    e5:36:3d:8e:86:18:6f:37:56:ff:b6:5b:ff:84:65:
                    97:b3:8c:8a:48:37:b8:e5:bf:9b:52:d8:ce:c2:ea:
                    ba:e6:40:32:43:87:cb:bb:44:c8:31:e5:a6:ea:b6:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CB:E8:0C:6F:C7:03:BA:1D:21:DA:BE:E3:7A:1C:12:6F:0A:D5:3E
            X509v3 Authority Key Identifier:
                keyid:F6:86:EF:12:82:2D:FC:94:82:86:B4:5C:22:31:32:55:C1:75:E2:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d5340d79102b793331c752f0dbbe0ddca1e18f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/1d2d509048a4d913a7f0d59daac396dba5aee81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/0d5340d79102b793331c752f0dbbe0ddca1e18f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.192.0/19
                  200.85.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:38:d8:d8:2e:fa:a1:c1:f5:ce:64:d0:e8:f3:de:fe:ab:1e:
         55:e8:e8:13:fa:bd:ff:ed:79:00:43:67:f8:83:53:c1:23:44:
         f2:0f:04:aa:ef:52:81:14:81:4b:ac:74:e9:e0:7e:dc:d5:fa:
         ff:09:f9:d7:aa:a9:14:49:07:21:47:58:56:f0:38:f2:38:d7:
         1b:13:13:c6:1b:3c:3b:2b:28:3b:05:f4:ef:c4:8d:de:c7:0a:
         aa:e0:e8:bf:f3:5a:b8:2c:e7:f6:13:61:e9:da:f1:31:7a:34:
         7b:8b:b3:a4:14:ac:85:2a:8e:06:84:55:40:45:2b:3c:c1:e8:
         ff:4f:f0:80:31:84:9d:b6:b3:e4:e8:88:ee:75:02:aa:42:be:
         2c:a2:7c:19:bd:3f:c0:e4:2d:ed:56:aa:d5:25:f2:d6:a9:0b:
         e9:08:d3:8b:70:5b:74:ba:e4:ae:1e:ea:bf:8c:4c:59:b6:d0:
         49:1e:5e:f5:fe:ab:15:03:63:03:cd:4a:bf:68:e0:b8:3b:c3:
         6d:d0:9b:74:41:ca:77:4e:b7:b0:27:35:5f:74:07:9b:78:e5:
         42:86:f1:c1:46:32:a0:bc:fb:0a:40:9f:d0:7d:42:2b:64:43:
         db:39:a3:7e:ae:fd:b5:01:8c:b1:45:88:b4:d5:9a:c0:8e:8d:
         55:c2:19:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 14:30:49 2023 by rpki-client on console-fra.rpki-client.org