Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/78779893cf817d27fa33f36ea9afa07dbec608d7.roa
File:                     78779893cf817d27fa33f36ea9afa07dbec608d7.roa (raw, json)
Hash identifier:          1N2gFtSFK5WgYncq4WrFsMHFm1/MycKLwXX2HZkYFS0=
Subject key identifier:   21:5B:E5:55:DB:A1:55:47:50:F0:BD:3F:01:2B:22:CC:75:35:25:8B
Certificate issuer:       /CN=035480923cfb3fc749b393f95a7b72c277263815
Certificate serial:       04F6FC
Authority key identifier: 68:6A:59:4F:A9:67:FB:ED:13:5E:25:44:95:AE:8C:D6:9E:21:09:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/035480923cfb3fc749b393f95a7b72c277263815.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/78779893cf817d27fa33f36ea9afa07dbec608d7.roa
Signing time:             Wed 24 Mar 2021 22:51:17 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     269953
IP address blocks:        190.89.128.0/24 maxlen: 24
                          190.89.129.0/24 maxlen: 24
                          190.89.130.0/24 maxlen: 24
                          190.89.131.0/24 maxlen: 24
                          2803:46e0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325372 (0x4f6fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=035480923cfb3fc749b393f95a7b72c277263815
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=78779893cf817d27fa33f36ea9afa07dbec608d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9d:be:73:2f:03:f4:11:c4:44:c4:02:b3:bc:
                    a2:f8:e2:fe:57:21:dc:90:58:80:ac:3e:a0:f8:17:
                    05:49:37:b1:65:01:cb:ce:d8:79:55:bc:c0:72:95:
                    e8:0b:8a:aa:78:01:93:f2:63:64:b5:46:5e:3d:2c:
                    b9:ba:57:a2:a2:ae:cc:25:fc:2b:6e:c7:a1:df:2b:
                    c5:ea:2d:ac:eb:ef:4d:19:a5:46:e7:9f:c8:07:c6:
                    77:0b:1a:5d:2e:21:2a:91:7a:cc:9e:0e:5c:ad:49:
                    22:cd:65:b7:1d:97:be:ef:8f:4b:f5:87:49:72:c2:
                    f7:4d:a9:60:09:ec:7c:0f:8b:48:68:ba:a7:d0:5e:
                    6b:7c:7f:2c:14:16:0e:0f:ad:9c:cd:ec:9e:f2:1d:
                    4f:3b:cf:92:3f:8e:26:d4:6d:51:02:91:05:10:23:
                    36:54:2c:dd:52:a7:e8:82:fd:c2:f0:c4:3d:be:16:
                    c7:87:b5:13:a6:b2:a8:41:d1:16:e6:cd:89:ab:36:
                    87:a1:8a:94:f5:8d:25:f5:2b:45:be:42:ec:9f:88:
                    11:59:d9:48:bb:fd:45:3c:7a:3d:4a:9e:c7:8c:b5:
                    96:63:3f:aa:d8:bb:17:ab:d5:c0:a3:9e:2a:69:31:
                    29:19:77:da:42:3e:11:8a:ff:8d:64:07:f4:bf:46:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5B:E5:55:DB:A1:55:47:50:F0:BD:3F:01:2B:22:CC:75:35:25:8B
            X509v3 Authority Key Identifier:
                keyid:68:6A:59:4F:A9:67:FB:ED:13:5E:25:44:95:AE:8C:D6:9E:21:09:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/035480923cfb3fc749b393f95a7b72c277263815.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/78779893cf817d27fa33f36ea9afa07dbec608d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/035480923cfb3fc749b393f95a7b72c277263815.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.128.0/22
                IPv6:
                  2803:46e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:03:91:87:80:69:4a:26:8e:01:31:33:b2:31:09:80:9f:d2:
         9d:87:66:b2:04:d4:77:a3:a7:53:49:aa:81:6e:9a:0b:e2:8e:
         f0:40:00:a6:8c:09:bc:87:94:19:69:96:23:d0:c4:84:a5:bd:
         52:90:eb:bf:1e:e4:62:45:20:42:91:c7:b2:d1:cf:79:f8:bf:
         7b:f9:53:99:43:28:79:9f:99:88:43:fe:e8:2c:a0:2f:c3:c7:
         d0:d2:64:1b:2b:ff:59:e9:63:8b:15:c2:82:97:c9:a7:bf:4e:
         52:40:46:ed:e5:90:fc:3b:36:7d:57:40:e5:f1:3a:4d:46:9e:
         09:31:50:1e:28:44:8e:5e:63:ec:05:31:7f:68:1c:34:49:82:
         b1:b9:24:4f:18:05:a8:80:25:a0:34:27:eb:c2:d7:76:71:f0:
         bb:02:7b:32:2c:d1:44:e5:a2:5e:8d:e2:d7:3e:d2:7b:ec:10:
         ac:03:cc:9d:8a:9f:1f:ac:af:01:c8:1c:e4:d8:01:d7:ba:6d:
         e2:fe:48:af:a6:13:a3:70:c8:9f:62:b7:c7:b1:70:7e:8e:27:
         48:56:10:3d:10:22:fe:2e:c1:33:36:b1:4c:7f:88:03:b3:ac:
         be:ab:99:db:48:87:39:ea:5f:25:ea:5d:3f:83:d1:95:37:9e:
         a0:0a:43:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org