Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/827bc5721fdfea8bac09e37ed1846975fbcb71a2.roa
File:                     827bc5721fdfea8bac09e37ed1846975fbcb71a2.roa (raw, json)
Hash identifier:          z7XNH5qXO4HCYrMUxKBufgOFvNmZPVMomQN34WzmD4k=
Subject key identifier:   FF:F6:9B:64:13:49:72:DE:D7:51:88:8B:D0:91:FC:97:F5:8F:B6:76
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       1C7085
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/827bc5721fdfea8bac09e37ed1846975fbcb71a2.roa
Signing time:             Tue 04 Oct 2022 18:58:02 +0000
ROA not before:           Tue 04 Oct 2022 18:57:23 +0000
ROA not after:            Fri 04 Oct 2024 19:57:23 +0000
asID:                     52399
IP address blocks:        190.110.232.0/22 maxlen: 22
                          190.110.232.0/23 maxlen: 23
                          190.110.234.0/23 maxlen: 23
                          190.110.232.0/24 maxlen: 24
                          190.110.233.0/24 maxlen: 24
                          190.110.234.0/24 maxlen: 24
                          190.110.235.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863813 (0x1c7085)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Oct  4 18:57:23 2022 GMT
            Not After : Oct  4 19:57:23 2024 GMT
        Subject: CN=827bc5721fdfea8bac09e37ed1846975fbcb71a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7d:4b:74:20:48:b4:3c:14:5a:68:03:6f:66:
                    33:d3:6a:7e:a2:b2:62:89:0d:f2:b1:7f:70:2f:dc:
                    47:bd:eb:87:66:13:c6:27:af:c5:4a:bb:d0:3f:69:
                    ae:c1:56:8c:ff:da:61:64:b0:e2:f9:23:fe:09:25:
                    c6:cc:4c:3b:eb:be:03:71:ea:c6:d2:98:5e:a8:58:
                    ca:b8:39:9f:70:7d:e8:1e:2a:91:d5:e3:3f:8c:ad:
                    30:27:07:35:8f:24:79:8e:ac:6f:32:70:a1:f7:f7:
                    5a:41:26:e0:8b:74:ec:ca:7c:9e:ba:cb:be:98:12:
                    7b:2d:e6:f3:06:6c:05:be:40:fb:eb:f2:b8:61:12:
                    24:ac:7e:b4:e4:c1:df:0b:93:94:20:de:d3:89:26:
                    67:de:d9:3e:a7:6a:c0:0f:09:25:55:9e:25:9c:15:
                    8b:8a:51:ab:51:6b:7c:93:31:6d:bb:06:c7:fe:c1:
                    c8:64:ed:49:48:1e:4d:d3:0f:2b:df:d0:5c:fd:4e:
                    c3:92:46:38:09:49:eb:49:80:54:de:50:69:5c:8f:
                    64:85:a0:56:2d:1a:12:f2:d5:2e:a7:c8:39:7d:fd:
                    98:b1:83:59:64:5e:5f:a6:b1:22:e0:a7:0c:ab:16:
                    21:8d:4c:3b:a4:a0:5e:ca:f6:11:6d:13:2b:64:5e:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F6:9B:64:13:49:72:DE:D7:51:88:8B:D0:91:FC:97:F5:8F:B6:76
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/827bc5721fdfea8bac09e37ed1846975fbcb71a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:9c:aa:ff:b0:26:d4:08:88:b4:77:80:1e:06:c0:3b:7e:78:
         5e:7b:01:54:a9:9b:ee:a2:0a:11:68:15:60:40:86:12:42:47:
         de:06:d6:91:95:6a:f3:2a:31:35:2f:24:7b:4d:d4:86:36:16:
         71:f9:1d:75:4c:ec:d5:0e:e0:ad:72:e2:11:da:0a:98:e8:e5:
         2d:89:30:8e:62:ff:c0:29:66:d8:3e:c2:e8:ad:4b:da:5e:9b:
         11:36:e1:8c:44:eb:e0:7e:68:db:75:a5:eb:48:da:6c:1e:bc:
         6f:b8:bd:3d:3c:88:b6:ed:33:9d:35:8d:d1:df:f4:e6:99:b3:
         7a:08:36:46:5e:a1:21:8a:a8:94:29:c8:44:67:96:3c:07:8a:
         d9:48:d1:7e:38:c8:19:e1:fa:03:95:e5:d5:a5:a9:cf:84:b7:
         0a:6e:56:03:bc:42:5a:81:6d:70:ab:16:d9:ce:bb:df:32:36:
         99:a3:c5:b8:c5:b0:f7:86:01:d3:28:17:12:22:af:11:0f:37:
         fa:ba:14:4f:5a:6a:0d:e9:2a:ed:fc:d0:52:44:59:bf:44:59:
         2c:a3:de:7b:47:0c:34:e8:57:28:6f:d7:eb:02:14:d0:a9:f1:
         03:e1:e3:2b:09:c3:ba:dc:39:4a:a7:dd:65:df:42:0b:71:0f:
         b2:0e:7f:0e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHHCFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
YjdhNDNmYzMzYmZjN2ZmNWVhNTkyZGVjYWRkZTY0NTI4ODcwNWUwHhcNMjIxMDA0
MTg1NzIzWhcNMjQxMDA0MTk1NzIzWjAzMTEwLwYDVQQDEyg4MjdiYzU3MjFmZGZl
YThiYWMwOWUzN2VkMTg0Njk3NWZiY2I3MWEyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4n1LdCBItDwUWmgDb2Yz02p+orJiiQ3ysX9wL9xHveuHZhPG
J6/FSrvQP2muwVaM/9phZLDi+SP+CSXGzEw7674DcerG0pheqFjKuDmfcH3oHiqR
1eM/jK0wJwc1jyR5jqxvMnCh9/daQSbgi3Tsynyeusu+mBJ7LebzBmwFvkD76/K4
YRIkrH605MHfC5OUIN7TiSZn3tk+p2rADwklVZ4lnBWLilGrUWt8kzFtuwbH/sHI
ZO1JSB5N0w8r39Bc/U7DkkY4CUnrSYBU3lBpXI9khaBWLRoS8tUup8g5ff2YsYNZ
ZF5fprEi4KcMqxYhjUw7pKBeyvYRbRMrZF7iAwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFP/2m2QTSXLe11GIi9CR/Jf1j7Z2MB8GA1UdIwQYMBaAFMGk+QbXxWt9XjK0
PK4zar0RfTlWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNiN2E0
M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzgyN2JjNTcyMWZkZmVhOGJhYzA5ZTM3ZWQxODQ2OTc1ZmJjYjcxYTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvMzNiN2E0M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr5u6DANBgkqhkiG9w0BAQsFAAOCAQEAXpyq/7Am1AiItHeA
HgbAO354XnsBVKmb7qIKEWgVYECGEkJH3gbWkZVq8yoxNS8ke03UhjYWcfkddUzs
1Q7grXLiEdoKmOjlLYkwjmL/wClm2D7C6K1L2l6bETbhjETr4H5o23Wl60jabB68
b7i9PTyItu0znTWN0d/05pmzegg2Rl6hIYqolCnIRGeWPAeK2UjRfjjIGeH6A5Xl
1aWpz4S3Cm5WA7xCWoFtcKsW2c673zI2maPFuMWw94YB0ygXEiKvEQ83+roUT1pq
Dekq7fzQUkRZv0RZLKPee0cMNOhXKG/X6wIU0KnxA+HjKwnDutw5SqfdZd9CC3EP
sg5/Dg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org