Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/d715ac2a9109cafd0499d768385831265cb0802a.roa
File:                     d715ac2a9109cafd0499d768385831265cb0802a.roa (raw, json)
Hash identifier:          Mr0x1M7jKcxUjL7TFdpAVFXNEVfMlWpEQXjD1kOm1So=
Subject key identifier:   86:FC:56:7A:8F:06:D5:26:3F:60:70:59:4B:1A:F9:FA:C7:AA:EE:DB
Certificate issuer:       /CN=36e192b55cb56ddb327e18a090fa757000686249
Certificate serial:       0D0C0F
Authority key identifier: 75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/d715ac2a9109cafd0499d768385831265cb0802a.roa
Signing time:             Wed 24 Mar 2021 14:35:05 +0000
ROA not before:           Wed 24 Mar 2021 14:35:05 +0000
ROA not after:            Tue 24 Mar 2026 14:35:05 +0000
asID:                     262928
IP address blocks:        191.102.192.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855055 (0xd0c0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e192b55cb56ddb327e18a090fa757000686249
        Validity
            Not Before: Mar 24 14:35:05 2021 GMT
            Not After : Mar 24 14:35:05 2026 GMT
        Subject: CN=d715ac2a9109cafd0499d768385831265cb0802a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:89:30:0d:14:67:50:be:c3:c3:32:b0:f5:4e:
                    c2:b0:2e:20:68:e0:74:95:1c:98:19:5f:31:80:e3:
                    66:3b:5a:a3:61:80:1c:a7:96:53:9a:f9:94:ca:7e:
                    05:5d:34:bb:c1:5e:5e:72:6b:0b:28:81:70:c7:d8:
                    a8:2f:a6:26:38:34:55:66:fa:6c:96:25:02:10:99:
                    1c:dc:d2:70:ca:f5:2a:fc:14:c3:79:0c:5f:3e:f8:
                    2b:bd:5e:ae:e0:5f:bb:96:50:45:9b:37:7b:d4:c0:
                    b5:16:6f:6b:6e:16:00:d8:c8:3a:e7:df:5f:9f:0d:
                    d8:05:e5:15:94:3d:f9:25:1d:82:79:8b:88:3c:a6:
                    1c:2b:59:46:91:1c:2d:31:2d:1e:b7:5a:02:09:50:
                    f6:a3:1d:7f:1b:50:cf:f9:15:0b:fa:07:bd:83:a1:
                    9f:b2:d6:51:8d:45:73:a2:31:de:45:e1:ff:36:0d:
                    a8:fe:ab:0e:c6:4a:b1:c9:a7:b6:e2:8b:02:16:bb:
                    ac:79:73:58:d1:30:45:e0:30:e8:9e:11:b3:ab:54:
                    ea:8c:92:96:35:77:d3:34:86:07:5b:3c:f2:ba:c8:
                    45:15:3c:8d:e3:20:a9:e0:00:a9:2f:21:59:e2:cc:
                    bc:3a:76:4d:b4:34:b2:eb:83:9c:bc:9e:c1:4e:61:
                    8c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FC:56:7A:8F:06:D5:26:3F:60:70:59:4B:1A:F9:FA:C7:AA:EE:DB
            X509v3 Authority Key Identifier:
                keyid:75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/d715ac2a9109cafd0499d768385831265cb0802a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/36e192b55cb56ddb327e18a090fa757000686249.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3d:87:1a:da:57:e3:bb:7a:2b:cf:f8:96:77:1a:79:6e:ef:41:
         52:66:d4:05:b6:03:35:03:32:38:15:83:1e:de:7a:08:64:9a:
         a0:65:37:5e:91:f9:2a:50:f3:b4:bb:a2:e1:4f:c6:18:b4:ec:
         f6:90:cd:13:00:61:12:5a:65:e7:b7:12:83:46:75:a6:3e:22:
         a6:6e:b8:09:29:51:78:47:89:66:8f:23:f0:f5:a5:5a:96:5a:
         b3:64:75:46:45:f4:83:35:17:70:ad:f0:04:03:55:7d:13:f5:
         7a:00:df:7b:24:06:e4:2e:e8:a1:52:7d:51:60:cf:66:28:85:
         08:59:a9:9a:d5:2a:1d:3d:91:c1:28:ea:2f:c9:40:54:ed:47:
         f5:b5:bf:1c:4b:3b:b2:b8:97:de:b2:3e:51:4b:1e:27:4a:ef:
         2a:70:d5:86:ba:a9:e2:8d:2e:34:3d:c9:4e:22:ea:33:ec:18:
         cb:20:20:98:4b:2b:7b:4e:90:11:42:b4:b3:e9:64:d0:23:70:
         7a:e6:6c:6c:50:81:97:6f:74:c5:32:3f:ba:3a:fe:00:f2:61:
         42:9f:53:2e:bb:c7:ce:e2:d8:27:24:ae:50:df:6c:8d:45:df:
         46:06:03:49:d1:15:f5:27:03:fc:5a:a9:d1:42:87:52:c5:67:
         9f:f3:b8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 16:22:58 2023 by rpki-client on console-ams.rpki-client.org