Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/e294ed082266837809e0df840008a04632196de4.roa
File:                     e294ed082266837809e0df840008a04632196de4.roa (raw, json)
Hash identifier:          2cbrvuKGU4TxPUv68Apgpa7tyen5VGHt/QC38lwIIhQ=
Subject key identifier:   84:9F:1D:B1:43:F4:6A:3A:AA:52:1C:A3:3A:8F:D8:13:7B:20:D3:7F
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       1D060B
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/e294ed082266837809e0df840008a04632196de4.roa
Signing time:             Fri 21 Oct 2022 17:46:25 +0000
ROA not before:           Wed 19 Oct 2022 17:40:43 +0000
ROA not after:            Mon 21 Oct 2024 17:40:43 +0000
asID:                     11514
IP address blocks:        190.114.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1902091 (0x1d060b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Oct 19 17:40:43 2022 GMT
            Not After : Oct 21 17:40:43 2024 GMT
        Subject: CN=e294ed082266837809e0df840008a04632196de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:99:29:9a:4e:5b:1e:29:41:35:48:60:da:10:
                    d0:2c:af:45:7d:81:33:94:ca:c8:c5:d2:ea:78:91:
                    de:85:03:38:0b:21:92:a1:e4:97:58:f6:a1:fc:4b:
                    f8:10:68:d3:29:f6:83:12:92:d8:19:a3:8c:50:d4:
                    40:ef:b9:2b:ca:a3:3c:e3:5d:d7:8f:43:b5:37:66:
                    85:6e:5e:1a:fe:81:f1:26:7d:6f:a6:ce:3d:d5:73:
                    cf:ce:5b:40:c9:55:bf:cd:5e:73:89:0b:cd:b1:de:
                    e1:dd:74:e5:d1:df:f7:d2:d2:de:eb:08:75:0a:0f:
                    a6:56:3b:32:d9:2f:07:ee:84:eb:07:94:05:ef:f3:
                    ce:eb:9c:20:a9:e8:13:07:d1:7f:b2:80:98:69:8f:
                    a9:9d:00:cf:d8:8e:11:29:c2:23:2e:e4:ae:e4:be:
                    95:fa:7e:f2:76:3e:c5:34:8d:ef:3c:53:be:ac:98:
                    58:7b:b7:32:9e:56:45:71:9e:ce:36:f1:6d:99:2b:
                    2f:0c:48:26:79:fa:db:34:cc:7f:a6:ed:6c:55:13:
                    e1:23:5b:22:6c:64:4b:97:e4:f6:07:a5:7a:a9:ef:
                    ad:76:bf:ff:bb:ea:38:be:35:09:97:b8:0d:14:79:
                    7d:90:b7:36:48:ce:08:61:1c:09:75:22:2a:1c:b7:
                    4e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9F:1D:B1:43:F4:6A:3A:AA:52:1C:A3:3A:8F:D8:13:7B:20:D3:7F
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/e294ed082266837809e0df840008a04632196de4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:c0:3d:0b:ed:8f:90:62:3c:aa:aa:cb:b6:b4:e6:43:bc:f1:
         2f:98:b5:e8:c4:de:b4:71:0a:5b:f7:3e:22:95:75:ca:19:85:
         b4:c2:5d:29:03:17:d7:b8:84:73:64:35:6e:8a:15:8b:e4:ca:
         55:86:2b:78:05:42:1e:f9:cc:02:c1:d6:7d:48:80:52:75:e5:
         9b:f5:3c:85:2d:3f:88:08:ef:81:91:85:d6:aa:31:ce:a7:f6:
         f7:72:2e:78:c1:3b:66:7f:01:31:ed:7b:9e:70:0b:20:5c:fb:
         cb:c0:5a:f4:49:ce:75:85:79:aa:67:c3:41:c9:97:99:d4:c6:
         37:f9:9a:34:10:15:ed:54:55:f6:61:63:28:0a:df:64:af:73:
         ce:70:cf:75:a3:28:66:77:a9:00:cc:40:12:7b:54:b7:49:4e:
         70:6d:76:51:32:70:93:cd:6a:66:71:5e:7e:e3:a0:25:29:33:
         0c:38:7a:e6:0b:30:d9:c7:3b:fa:6e:0b:dc:1b:23:f9:28:21:
         a2:16:8a:91:7c:0a:1b:6a:cd:8a:7b:3e:da:f4:f7:12:eb:a3:
         ad:49:c2:40:ce:ee:8f:a5:98:0c:4f:e6:59:0c:e6:64:66:55:
         5c:96:7b:a2:9a:08:a6:08:2c:bb:cf:e6:45:68:52:24:20:9d:
         7c:6f:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----