Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/2db7bf61cc4580c4058cc583d00be329a2ac86c6.roa
File:                     2db7bf61cc4580c4058cc583d00be329a2ac86c6.roa (raw, json)
Hash identifier:          dF5qKagHFrEcNjKqVkbfWOISQCKThQNNz+3wNvmhdFA=
Subject key identifier:   7B:FA:16:4C:5E:F5:8A:53:42:DB:A0:FC:7A:F1:5F:67:8C:88:FE:CE
Certificate issuer:       /CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
Certificate serial:       0D615C
Authority key identifier: 20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/2db7bf61cc4580c4058cc583d00be329a2ac86c6.roa
Signing time:             Wed 24 Mar 2021 22:50:58 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     263244
IP address blocks:        186.0.180.0/24 maxlen: 24
                          186.0.181.0/24 maxlen: 24
                          186.0.182.0/24 maxlen: 24
                          186.0.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876892 (0xd615c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=2db7bf61cc4580c4058cc583d00be329a2ac86c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:da:48:32:a4:14:50:b2:96:73:26:af:3c:d5:
                    12:f2:d6:19:78:fe:22:a9:f6:54:64:5c:4d:08:75:
                    57:18:d5:fa:c5:40:e1:2c:0d:2e:a5:53:f6:63:67:
                    c7:e0:09:56:16:23:47:30:7c:3c:35:ac:5f:2a:63:
                    1b:97:70:d4:89:99:db:8e:91:ad:07:fd:8b:a0:29:
                    87:83:b2:13:14:3b:bb:ff:f2:27:99:fe:a4:30:73:
                    d9:5a:9d:5d:a7:26:d5:3e:68:57:bd:c9:91:ff:b7:
                    4d:a9:2b:a4:13:48:60:73:72:6b:c0:06:f6:d9:77:
                    7f:a3:67:01:59:3e:5f:2d:62:88:5f:0e:ea:a1:df:
                    ac:2b:f0:40:20:3f:e3:2a:95:02:e4:56:c6:eb:37:
                    b4:66:a1:df:16:78:36:e4:a8:f8:84:b7:f5:8e:1e:
                    22:24:31:ea:07:ef:af:82:cc:77:a3:be:bf:0e:34:
                    ab:58:0f:03:ca:ca:c1:89:f1:17:35:33:e2:d7:8f:
                    eb:25:dc:d7:aa:a5:70:fd:91:5d:f8:34:0a:21:9e:
                    39:3c:f6:fe:f2:5f:f7:b4:00:4b:ee:26:06:f3:49:
                    90:c2:51:a0:22:8b:93:b2:27:ee:27:5c:f0:45:c7:
                    e6:05:64:76:6b:1d:e3:15:58:69:c4:45:e9:2d:37:
                    8b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FA:16:4C:5E:F5:8A:53:42:DB:A0:FC:7A:F1:5F:67:8C:88:FE:CE
            X509v3 Authority Key Identifier:
                keyid:20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/2db7bf61cc4580c4058cc583d00be329a2ac86c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/5cc9dbf17ab87f53456274667413bf07a4f85fc9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:c1:66:fa:56:48:3e:c8:44:f5:68:7b:14:8c:28:20:ef:96:
         dd:f7:ea:31:a4:d7:21:33:24:e0:13:b1:51:a6:ab:81:85:e2:
         3d:52:49:38:42:62:11:d7:37:aa:69:b9:1d:a3:df:e3:a7:9d:
         30:7d:dc:55:ec:fa:e4:0b:53:02:c7:40:90:ad:31:72:aa:de:
         48:15:ed:db:b4:fc:20:14:cb:e4:b0:c7:d5:cc:81:1a:be:0b:
         07:cc:75:cf:9c:10:a6:f3:98:34:fc:c9:06:c6:4e:3a:29:db:
         15:61:89:74:8c:ee:7d:5b:3d:93:31:42:f0:46:a6:15:b6:30:
         58:03:67:a7:45:0e:14:84:3e:a9:e1:e8:0f:7c:f1:df:1e:b3:
         30:5f:07:10:48:62:79:13:c4:95:5c:3e:4d:7a:ea:96:f6:0d:
         c9:10:5c:97:24:af:9b:0a:86:2a:c1:31:09:4d:8b:fd:f8:1b:
         97:7e:e9:b4:c2:0f:fa:5c:e7:a8:9f:b7:1b:6d:6c:f1:c5:26:
         f0:cf:38:89:8f:8e:64:5e:a5:20:ce:8d:fb:49:6d:33:6f:5a:
         12:48:16:3c:0e:68:24:69:26:35:45:8a:83:12:fa:5a:d7:ab:
         94:de:a8:3a:49:b5:65:a2:95:4f:c1:72:67:b6:21:78:09:29:
         61:df:a8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org