Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/ef56808975f0ce8c071b014e40f1dbad6809614c.roa
File:                     ef56808975f0ce8c071b014e40f1dbad6809614c.roa (raw, json)
Hash identifier:          Ne3ezlHkBTfD0fsN8bClgBA5vmVDVN10FjQ8Gbmok1E=
Subject key identifier:   64:E4:E7:BF:34:10:E1:02:37:B1:2F:6B:DA:BA:BB:3B:8E:E2:F9:A8
Certificate issuer:       /CN=429f210b98677033fc9a53a0399f1ebe43c09997
Certificate serial:       0CAA3F
Authority key identifier: 46:E3:01:7B:00:E8:72:F1:93:B3:E8:09:E9:FF:C3:4E:C4:0F:31:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429f210b98677033fc9a53a0399f1ebe43c09997.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/ef56808975f0ce8c071b014e40f1dbad6809614c.roa
Signing time:             Wed 24 Mar 2021 14:45:15 +0000
ROA not before:           Wed 24 Mar 2021 14:45:15 +0000
ROA not after:            Tue 24 Mar 2026 14:45:15 +0000
asID:                     11556
IP address blocks:        186.72.0.0/14 maxlen: 24
                          190.32.0.0/14 maxlen: 24
                          201.224.0.0/14 maxlen: 24
                          2800:350::/29 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 830015 (0xcaa3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429f210b98677033fc9a53a0399f1ebe43c09997
        Validity
            Not Before: Mar 24 14:45:15 2021 GMT
            Not After : Mar 24 14:45:15 2026 GMT
        Subject: CN=ef56808975f0ce8c071b014e40f1dbad6809614c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:5e:a3:e0:23:65:0d:b4:a9:62:9c:a6:81:
                    c0:02:15:1b:88:5c:35:9d:cc:28:bf:7b:c8:f4:fe:
                    c3:9d:56:c8:fe:a2:1f:d1:d6:c5:67:0b:e5:2c:33:
                    5c:b6:b9:76:15:73:74:40:b0:3d:20:6b:f5:21:d1:
                    9c:43:9d:c5:bb:c4:05:93:dd:34:11:ab:22:ad:d3:
                    28:06:d7:97:17:98:39:2b:a6:84:cb:7a:bc:98:d3:
                    ad:08:7b:eb:11:40:d5:a1:14:32:ee:bb:3f:90:e8:
                    8b:58:c5:fc:52:22:cd:2f:d8:4b:45:a2:45:97:3a:
                    66:42:a3:5e:a6:95:82:19:d5:6b:b2:62:5f:db:e3:
                    d1:c7:4f:40:c8:f5:a8:13:d6:40:7d:a0:22:b1:11:
                    0c:58:31:25:38:bd:90:3c:ac:b8:8e:04:61:15:f2:
                    1f:2a:7a:84:42:e1:10:d7:d9:04:00:8d:46:70:69:
                    a6:53:ac:8a:ec:61:07:3e:4c:c8:4b:20:8e:23:88:
                    15:48:32:c0:35:25:83:c8:b5:e9:46:57:5e:8a:13:
                    9a:4d:23:54:16:ce:80:66:e8:82:f8:53:79:ed:1b:
                    8d:40:a4:44:2e:60:c0:14:ce:e1:e6:80:13:fb:8a:
                    c9:cf:02:b7:24:2b:21:3d:a4:25:aa:98:8f:d0:32:
                    5b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E4:E7:BF:34:10:E1:02:37:B1:2F:6B:DA:BA:BB:3B:8E:E2:F9:A8
            X509v3 Authority Key Identifier:
                keyid:46:E3:01:7B:00:E8:72:F1:93:B3:E8:09:E9:FF:C3:4E:C4:0F:31:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429f210b98677033fc9a53a0399f1ebe43c09997.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/ef56808975f0ce8c071b014e40f1dbad6809614c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/429f210b98677033fc9a53a0399f1ebe43c09997.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.72.0.0/14
                  190.32.0.0/14
                  201.224.0.0/14
                IPv6:
                  2800:350::/29

    Signature Algorithm: sha256WithRSAEncryption
         19:92:32:f1:a3:c7:18:4f:49:da:28:72:79:b3:fa:d4:cf:8b:
         c0:2f:dd:9f:e9:20:0a:a8:f0:c4:7c:cc:c9:52:ef:e7:5c:97:
         89:66:fb:11:14:46:fd:86:4c:55:ed:92:64:d2:83:45:5d:28:
         ed:7c:60:75:b4:bb:7b:b1:75:07:ba:35:2c:da:0d:9c:76:11:
         c0:2f:aa:f8:a6:5e:2d:fe:26:9a:97:43:cc:73:c9:45:78:fe:
         ac:03:b7:e1:90:12:61:28:f4:fd:2c:df:d5:3b:ad:7f:d7:01:
         1d:52:3f:86:fc:6d:9c:94:2a:66:18:28:06:3a:2c:72:09:a3:
         67:3c:e1:be:de:9e:00:5c:36:28:94:6e:47:0d:6c:ae:01:33:
         6a:ba:b6:79:76:ce:a4:a8:0e:47:42:c1:38:fe:a0:a7:8c:e8:
         e1:ea:23:fe:58:63:1e:61:66:08:ac:d8:66:01:11:5b:08:e8:
         96:3c:88:66:bb:83:e9:6c:2c:93:28:5e:f5:6b:b7:ef:6d:6f:
         98:c2:84:d5:a7:64:27:9e:59:4c:3d:4b:16:87:70:97:17:64:
         48:67:b4:de:24:cc:d9:20:09:ac:2c:82:06:d3:31:e6:3d:6e:
         10:70:85:59:f2:cf:56:82:a8:f3:b0:51:23:32:a6:3c:78:0a:
         89:11:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org