Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/02a984eaacd8fc49f7b906cfacb199f223c8c641.roa
File:                     02a984eaacd8fc49f7b906cfacb199f223c8c641.roa (raw, json)
Hash identifier:          hEQOhP8C7QcTYbM6oW2pk0EfiodOX4Gd6xM7IAbDz9o=
Subject key identifier:   F0:B9:0A:3E:75:15:E7:EF:F9:F7:75:BF:A6:20:42:D8:E1:3C:D8:BD
Certificate issuer:       /CN=e804a389c3b0880219ecf5f7a3c62d96a274b592
Certificate serial:       0D410C
Authority key identifier: 4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/02a984eaacd8fc49f7b906cfacb199f223c8c641.roa
Signing time:             Wed 24 Mar 2021 14:47:25 +0000
ROA not before:           Wed 24 Mar 2021 14:47:25 +0000
ROA not after:            Tue 24 Mar 2026 14:47:25 +0000
asID:                     27889
IP address blocks:        190.76.244.0/24 maxlen: 24
                          190.76.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868620 (0xd410c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e804a389c3b0880219ecf5f7a3c62d96a274b592
        Validity
            Not Before: Mar 24 14:47:25 2021 GMT
            Not After : Mar 24 14:47:25 2026 GMT
        Subject: CN=02a984eaacd8fc49f7b906cfacb199f223c8c641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ba:db:a5:d9:fc:85:bf:6e:db:f5:e3:67:f4:
                    61:5d:3d:af:25:17:a6:d7:c9:2c:c3:cc:72:f4:73:
                    97:c3:71:53:72:f6:5e:64:6a:f7:b7:a9:79:b3:e7:
                    7d:d6:64:c3:95:7c:21:bf:32:3c:b6:0c:a2:9e:26:
                    15:35:c8:7c:7f:5d:43:c0:40:76:13:35:be:4d:fa:
                    5a:01:26:fd:76:85:9e:72:4e:22:d8:53:c6:90:b8:
                    67:00:d3:6b:5a:d2:89:21:9d:8f:c3:e9:23:ab:d0:
                    3d:88:43:b6:52:93:54:13:42:a1:d6:55:ad:e2:97:
                    30:96:83:38:24:4f:1a:10:b9:53:28:41:b0:df:ae:
                    fd:f4:ce:2b:17:6d:a5:9b:9f:02:2f:17:6e:18:e2:
                    c6:f4:ff:a0:7f:65:37:a9:67:3b:a2:b8:5f:9e:4f:
                    ea:d9:e0:d4:95:d7:57:6d:f7:ad:32:ea:5e:0c:44:
                    5c:77:fe:6c:a5:1d:46:7d:99:79:5b:bf:b4:5c:f4:
                    2a:42:a4:30:59:e1:79:3e:a0:9d:65:cc:3f:ee:15:
                    bc:ca:31:bd:e8:27:f2:6c:40:67:bc:9d:18:85:c2:
                    d8:37:81:79:a6:66:a1:b0:4e:2e:32:af:98:61:2a:
                    50:4f:35:76:9b:48:7a:c2:26:98:50:08:55:1f:f4:
                    02:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B9:0A:3E:75:15:E7:EF:F9:F7:75:BF:A6:20:42:D8:E1:3C:D8:BD
            X509v3 Authority Key Identifier:
                keyid:4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/02a984eaacd8fc49f7b906cfacb199f223c8c641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/e804a389c3b0880219ecf5f7a3c62d96a274b592.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.76.244.0/24
                  190.76.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:a1:b9:69:19:1f:f7:c0:23:07:c1:13:98:ca:44:47:bc:fd:
         f8:7d:36:78:0e:37:c1:45:37:eb:ae:1d:d1:1d:f5:1d:be:e5:
         54:7c:28:84:a2:cd:1f:fc:a6:f5:d6:ff:f3:81:b0:b3:1b:17:
         53:4e:9c:19:3e:f7:ba:61:83:e2:1c:0a:1b:01:fa:bc:45:e2:
         ed:fd:6e:a8:e8:ca:a5:c9:fd:e5:a6:9a:dd:e9:d5:94:bc:45:
         7c:40:f5:fb:ae:16:9f:3d:01:58:c9:a0:e9:b7:3f:a6:96:e7:
         4d:6d:5b:28:9c:c1:d7:cc:f6:7d:0d:76:9d:31:ae:a1:25:ec:
         3c:6b:d2:25:73:fc:1a:84:4f:2e:e2:b0:87:0f:76:6a:72:2f:
         00:8a:9d:0c:0a:d4:fc:2c:cc:7f:67:9f:fe:76:17:b2:3a:38:
         57:74:76:b4:89:3f:aa:bf:38:e7:bd:d2:a3:51:4c:af:33:fd:
         2f:e5:a6:bb:10:a5:eb:b7:fd:18:23:c1:8c:81:80:96:87:e2:
         ea:2d:ef:70:53:06:eb:55:27:7b:62:a7:be:6e:ea:57:8d:bb:
         d0:45:6d:87:59:ba:b4:8c:1f:87:e8:46:d6:74:1b:bc:dc:ff:
         c9:fb:a2:50:7a:b5:a3:c5:5d:20:93:75:cb:37:1f:d3:53:00:
         e7:ac:98:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org