Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/174d8e20-6eaf-4b11-a9f3-dc3626a9b736/f8c7ada6d8340ae8ebeaef5d3a61f28a758faaf4.roa
File:                     f8c7ada6d8340ae8ebeaef5d3a61f28a758faaf4.roa (raw, json)
Hash identifier:          0iaqTLth3j5kPuadH27YxqtyaatYR5VjoHxwy99UhS8=
Subject key identifier:   1C:5A:08:C5:0C:D0:B3:85:7F:01:5E:32:81:EC:83:61:3E:29:E6:DB
Certificate issuer:       /CN=ede5db541032308f013d787d037b94dae9d93c0e
Certificate serial:       09D3
Authority key identifier: CC:BF:E1:1E:30:B4:CD:09:64:00:FA:99:75:96:72:29:B0:B1:A4:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ede5db541032308f013d787d037b94dae9d93c0e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/174d8e20-6eaf-4b11-a9f3-dc3626a9b736/f8c7ada6d8340ae8ebeaef5d3a61f28a758faaf4.roa
Signing time:             Thu 24 Jun 2021 14:42:49 +0000
ROA not before:           Thu 24 Jun 2021 03:00:00 +0000
ROA not after:            Sat 24 Jun 2023 03:00:00 +0000
asID:                     19905
IP address blocks:        161.190.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2515 (0x9d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede5db541032308f013d787d037b94dae9d93c0e
        Validity
            Not Before: Jun 24 03:00:00 2021 GMT
            Not After : Jun 24 03:00:00 2023 GMT
        Subject: CN=f8c7ada6d8340ae8ebeaef5d3a61f28a758faaf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:12:05:76:d0:d1:2d:f8:84:b2:eb:c6:e5:2c:
                    85:34:cf:a4:44:d2:8a:94:e3:55:9d:26:9e:da:d9:
                    5c:00:9a:b9:fc:e0:92:74:ae:42:47:de:50:fa:19:
                    4b:04:d6:83:63:15:9d:af:61:19:1e:a0:34:cd:45:
                    f7:f5:b7:63:13:82:2d:aa:93:1a:ce:f4:a3:c7:c5:
                    90:b0:f0:c0:34:ec:36:c3:79:a1:58:e2:0c:9b:f7:
                    b9:a4:d7:04:e4:64:83:78:b7:cc:f3:79:6d:7a:80:
                    a7:a8:bf:f7:dd:ef:89:43:3c:34:27:b0:88:7a:13:
                    a5:d4:08:db:8f:c4:bb:4e:cd:a2:88:c2:af:ae:4f:
                    57:fe:44:94:1e:7f:ae:6a:d1:5d:47:55:85:d9:dc:
                    d0:c8:a9:10:73:4f:b6:7f:c6:b8:c3:ac:cb:72:bc:
                    03:89:48:07:19:b5:46:3e:9c:c6:8c:11:19:84:6b:
                    aa:77:8c:a0:7b:47:49:13:6d:ca:a1:0c:c3:55:76:
                    e7:2e:84:20:fd:e4:72:9c:56:1f:91:5b:5a:30:19:
                    5f:d6:2a:98:ed:aa:32:17:5f:20:fa:da:23:99:e7:
                    3a:38:a7:ae:95:ac:56:c9:df:1a:fc:52:69:29:26:
                    57:45:fa:01:74:5e:55:ce:02:16:12:db:34:38:b6:
                    e6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5A:08:C5:0C:D0:B3:85:7F:01:5E:32:81:EC:83:61:3E:29:E6:DB
            X509v3 Authority Key Identifier:
                keyid:CC:BF:E1:1E:30:B4:CD:09:64:00:FA:99:75:96:72:29:B0:B1:A4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ede5db541032308f013d787d037b94dae9d93c0e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/174d8e20-6eaf-4b11-a9f3-dc3626a9b736/f8c7ada6d8340ae8ebeaef5d3a61f28a758faaf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/174d8e20-6eaf-4b11-a9f3-dc3626a9b736/ede5db541032308f013d787d037b94dae9d93c0e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4e:1f:be:b4:e6:02:23:f0:0a:10:61:b6:fc:91:82:c7:33:21:
         f0:90:03:cc:df:22:32:92:0c:1c:e2:7d:93:e3:c5:1a:48:d7:
         21:b9:07:38:07:47:ba:87:3a:cf:52:a3:ea:c3:af:8c:8c:4d:
         b3:54:ec:f7:15:8f:07:b8:f5:5b:e6:57:07:64:1d:63:95:4d:
         75:91:35:f3:0e:a1:8d:ff:05:d6:30:f0:6d:56:0d:bb:68:8b:
         a5:99:29:19:96:83:40:6c:4b:3d:a2:1c:01:dd:18:83:7c:17:
         b8:3f:e7:f6:1d:56:bb:1c:10:bc:50:6d:af:f4:9b:35:81:07:
         fe:0f:f6:c4:a4:ac:17:7e:b9:8f:97:22:a4:5f:bd:36:47:43:
         aa:e0:ef:87:47:83:c6:fa:3c:39:ed:4d:bb:3b:7f:7b:32:ad:
         71:1e:46:61:4e:0e:d5:3a:f5:c3:09:a2:b4:2a:ed:26:a6:16:
         0d:89:4b:cd:ca:ea:69:09:29:61:6f:ac:c3:7d:96:6e:0e:4d:
         af:43:03:02:35:10:06:49:48:18:1d:41:59:40:86:a4:52:b5:
         84:57:c7:8a:9e:22:ea:7f:29:ab:b4:b2:57:a1:07:30:0f:38:
         d9:04:4a:7e:86:85:e0:d4:02:57:18:5d:e3:71:cc:57:8f:2e:
         06:c0:45:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org