Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/6bc267341782d2d6aab65e76ec98a31b683d1e1d.roa
File:                     6bc267341782d2d6aab65e76ec98a31b683d1e1d.roa (raw, json)
Hash identifier:          +0yBlzic+nV/UpqDZBv8EYqNrFwitLiZ1VyxaxWOrjs=
Subject key identifier:   01:E8:D9:ED:1C:94:D1:52:33:76:65:11:C6:3D:D8:EA:B9:54:3E:D8
Certificate issuer:       /CN=47b57565cafdf0ca1cb66c80d161a63b2210edb7
Certificate serial:       0B3073
Authority key identifier: 9D:C4:18:74:7F:F1:0D:DA:96:04:92:C5:03:61:48:94:E9:6D:BD:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b57565cafdf0ca1cb66c80d161a63b2210edb7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/6bc267341782d2d6aab65e76ec98a31b683d1e1d.roa
Signing time:             Wed 11 Oct 2023 20:20:55 +0000
ROA not before:           Tue 10 Oct 2023 20:20:55 +0000
ROA not after:            Sat 11 Oct 2025 20:20:55 +0000
asID:                     263809
IP address blocks:        190.92.111.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733299 (0xb3073)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b57565cafdf0ca1cb66c80d161a63b2210edb7
        Validity
            Not Before: Oct 10 20:20:55 2023 GMT
            Not After : Oct 11 20:20:55 2025 GMT
        Subject: CN=6bc267341782d2d6aab65e76ec98a31b683d1e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:a5:50:14:25:6d:60:12:fa:e8:23:9b:75:
                    f9:a3:07:06:8b:18:fd:8a:f8:de:e5:15:73:3f:86:
                    c2:21:c2:41:8e:50:ce:83:e3:f0:97:97:4a:b5:57:
                    e9:3f:28:24:e6:9f:70:6c:7a:02:8b:45:c5:34:34:
                    7e:ac:4f:78:f7:33:44:0c:75:fe:2e:9e:f5:b6:b2:
                    6b:03:e8:07:f6:d9:81:b1:50:97:89:d5:a8:a7:cd:
                    1e:34:dd:2e:39:5c:9e:33:c7:a0:14:3a:ac:60:95:
                    32:81:e7:06:db:eb:10:7b:25:67:ff:32:2a:cb:aa:
                    c8:06:87:58:29:15:be:5e:4e:cf:03:63:35:58:4b:
                    08:3b:5a:82:50:b8:71:2d:54:45:51:78:b3:fb:11:
                    26:39:1c:89:4b:0b:f5:7b:50:08:88:37:0a:e6:59:
                    c3:b8:4b:78:6d:66:d2:69:18:d4:02:46:a7:a0:cd:
                    7f:9e:42:1c:96:ad:1b:2d:a1:ed:f8:d4:19:87:a2:
                    25:df:73:7f:06:2d:09:9a:9f:50:51:f4:c8:a5:6a:
                    65:dc:65:e8:a1:64:f8:c6:06:4a:64:3b:2d:f2:7e:
                    76:4d:c1:66:75:10:a4:6a:c8:b4:da:9c:a8:7c:6a:
                    79:15:54:b4:98:b6:ce:d0:02:de:1d:1f:70:15:c5:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E8:D9:ED:1C:94:D1:52:33:76:65:11:C6:3D:D8:EA:B9:54:3E:D8
            X509v3 Authority Key Identifier:
                keyid:9D:C4:18:74:7F:F1:0D:DA:96:04:92:C5:03:61:48:94:E9:6D:BD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b57565cafdf0ca1cb66c80d161a63b2210edb7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/6bc267341782d2d6aab65e76ec98a31b683d1e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/47b57565cafdf0ca1cb66c80d161a63b2210edb7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:7d:53:08:f2:ac:f9:b6:ca:37:d6:d1:32:69:a2:b3:f6:b5:
         79:ce:5a:e5:6c:44:6b:32:26:5b:ec:7e:71:21:20:52:ea:36:
         28:51:20:3f:ff:de:df:a7:a3:e0:cd:9a:e2:05:8c:e8:bc:d9:
         43:d3:ea:8d:a8:bd:1a:ca:7f:66:40:64:e3:3f:7f:59:29:11:
         3d:69:27:03:01:dc:3b:47:9c:5b:29:53:a7:41:9c:0b:63:ef:
         e1:d9:bb:bb:89:57:84:8e:26:b4:ac:41:f8:1a:14:04:52:d3:
         93:c2:e7:1d:4f:49:36:ff:58:c5:21:a2:2d:71:1e:dd:c7:89:
         a5:fe:67:6e:8c:8e:50:bf:51:29:fe:ef:b6:f9:22:0d:97:55:
         57:f9:63:16:42:22:f6:32:3e:48:8a:72:4c:68:cd:48:06:cb:
         46:51:b1:62:82:c0:06:b2:f0:d9:45:1e:d7:55:24:91:59:66:
         fc:bd:c9:f6:28:34:80:31:7e:49:a5:3c:ce:0d:bf:cb:e4:26:
         11:b2:e1:61:99:b4:7d:97:d2:1e:e4:2c:52:b9:62:9a:65:50:
         66:a0:6f:06:de:64:08:bd:55:2a:4b:3d:8a:5e:77:2d:58:42:
         d6:8e:a1:28:cb:be:b9:25:72:bd:38:f2:92:10:77:7d:74:97:
         8a:15:fd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 19:41:25 2023 by rpki-client on console-fra.rpki-client.org