Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/2c93bc048426083b07e3498d9c6e9ee169ac4ce3.roa
File:                     2c93bc048426083b07e3498d9c6e9ee169ac4ce3.roa (raw, json)
Hash identifier:          LfSnbTHe0YCgCbptmGwfq3JOqmzhqRiffHTitjQfm68=
Subject key identifier:   37:41:A3:96:71:0F:3D:89:66:0B:9D:7D:43:51:D5:4B:A8:0F:63:7C
Certificate issuer:       /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial:       1489A1
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/2c93bc048426083b07e3498d9c6e9ee169ac4ce3.roa
Signing time:             Fri 24 Dec 2021 20:42:43 +0000
ROA not before:           Fri 24 Dec 2021 03:00:00 +0000
ROA not after:            Sun 24 Dec 2023 03:00:00 +0000
asID:                     262202
IP address blocks:        186.159.218.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1345953 (0x1489a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
        Validity
            Not Before: Dec 24 03:00:00 2021 GMT
            Not After : Dec 24 03:00:00 2023 GMT
        Subject: CN=2c93bc048426083b07e3498d9c6e9ee169ac4ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:82:5b:70:93:c1:e9:7c:48:08:25:c1:15:6e:
                    0b:e5:24:28:50:d1:e9:0b:08:0b:55:a2:8b:ff:e3:
                    4c:e3:8d:03:23:39:1d:38:37:c3:fa:03:9a:9c:ab:
                    6d:d2:52:16:a5:fc:1b:27:61:1f:23:d0:ea:a8:a9:
                    52:7e:07:1a:b7:7c:e4:df:b9:ef:1b:a4:6f:7f:81:
                    b7:c1:61:4e:97:c5:41:c9:ba:b6:79:a5:47:37:5e:
                    7f:93:10:69:d3:af:9f:a8:f2:28:87:9d:0c:da:e6:
                    fa:7e:d9:06:b2:c1:b1:8b:ee:70:24:27:32:e7:1c:
                    d3:1b:51:c5:b3:58:92:0b:6a:ab:f7:6d:b3:aa:75:
                    14:fd:9b:2b:d1:3a:d5:e1:8b:24:b6:44:16:e1:7d:
                    74:38:ee:26:41:d2:dd:c3:59:15:54:71:83:e4:28:
                    5b:24:80:a0:bd:c2:6d:f5:77:82:c3:e1:5f:d2:e5:
                    20:3e:97:6a:a3:a5:76:18:28:dd:67:d5:a3:95:c2:
                    b6:4e:bf:e8:75:49:6d:23:c1:0a:43:67:0b:8b:73:
                    88:f1:9b:b2:7d:e9:b7:a8:da:91:ec:64:0a:4d:69:
                    2e:88:dd:fb:b1:93:5f:93:a6:51:01:d1:9b:1f:9c:
                    d8:6c:76:eb:ca:f5:1e:65:60:5f:66:b4:d8:c8:8b:
                    6d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:41:A3:96:71:0F:3D:89:66:0B:9D:7D:43:51:D5:4B:A8:0F:63:7C
            X509v3 Authority Key Identifier:
                keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/2c93bc048426083b07e3498d9c6e9ee169ac4ce3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:12:9b:8c:56:96:ce:a4:f5:88:87:85:01:79:4d:f9:0c:f2:
         ec:b7:8a:cd:51:7f:19:d2:1c:b4:c5:1e:26:dc:de:40:b1:1d:
         a3:53:91:2b:b9:0d:39:1a:23:f3:05:17:f4:09:ce:50:de:a3:
         2e:c9:05:8e:53:1b:9a:1e:65:5c:bf:6f:71:8c:86:3d:ee:f8:
         a1:34:7f:72:1e:f7:31:80:7f:c5:64:5d:5a:c2:37:56:2f:b9:
         9d:8e:3a:e7:60:ad:92:b4:8a:48:dc:1c:8b:33:01:15:7e:dd:
         ec:06:56:1f:4c:ca:da:47:21:5c:28:d8:4a:5a:64:dc:da:6f:
         a8:fb:61:04:9b:e5:04:00:58:5d:f1:99:d6:df:f8:db:b7:d3:
         f8:e1:cf:20:cd:36:48:6a:b1:cd:21:16:c1:4b:f5:65:85:99:
         6a:a3:1a:b0:b2:b9:0f:4e:79:34:f8:70:f8:f8:06:d4:6a:c1:
         97:18:46:64:ae:e1:ce:c8:ce:f3:92:ce:89:f4:c4:dc:0f:a2:
         e4:20:09:21:d6:34:a2:d4:58:64:92:5f:6f:a2:bb:2b:ef:a8:
         b4:5f:f2:0a:9e:eb:bf:cf:17:a9:42:2b:fe:b2:53:5a:35:04:
         e5:e1:60:af:5d:25:8b:c0:c2:88:14:cf:be:39:50:eb:1f:bc:
         fc:78:2b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 21:03:45 2023 by rpki-client on console-ams.rpki-client.org