Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/e650fc1f5083e7f8507908fc4d2e920f043eb25c.roa
File:                     e650fc1f5083e7f8507908fc4d2e920f043eb25c.roa (raw, json)
Hash identifier:          vQSC9JCksBVsoIhVYg4PoeWb29BfE0aGJZJ7ur8Py9M=
Subject key identifier:   4A:A3:0A:FC:92:B9:20:24:51:3C:99:C3:1D:20:01:BD:18:26:37:95
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       19E08B
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/e650fc1f5083e7f8507908fc4d2e920f043eb25c.roa
Signing time:             Mon 27 Jun 2022 19:17:21 +0000
ROA not before:           Mon 27 Jun 2022 03:00:00 +0000
ROA not after:            Fri 27 Jun 2036 03:00:00 +0000
asID:                     52399
IP address blocks:        190.110.250.0/23 maxlen: 23
                          190.110.250.0/24 maxlen: 24
                          190.110.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1695883 (0x19e08b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Jun 27 03:00:00 2022 GMT
            Not After : Jun 27 03:00:00 2036 GMT
        Subject: CN=e650fc1f5083e7f8507908fc4d2e920f043eb25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:78:02:10:4f:f0:ff:46:0a:9f:17:32:f7:71:
                    d2:0e:59:b4:d9:bb:72:fb:6e:b0:30:51:86:ee:43:
                    1e:c3:9c:ce:b9:c4:ff:fb:5b:37:58:9f:8b:8c:18:
                    b7:9e:51:ca:79:e1:1b:f4:ca:6e:50:e3:95:bd:51:
                    d6:10:d8:24:d7:d1:d1:44:28:2f:90:4e:7e:3b:55:
                    5b:ed:64:fe:6e:8d:7a:4c:96:33:ca:b7:fb:2e:77:
                    bf:f2:89:ff:87:d3:2e:80:03:3b:80:0e:9d:80:d6:
                    a1:38:11:bc:1f:fe:d6:2b:b6:b2:a0:fd:b6:4a:5c:
                    ef:c5:33:bd:4c:bf:66:38:3f:48:9d:a6:16:dd:1f:
                    a1:03:06:17:fb:71:6f:4c:f2:d0:e0:56:b0:3c:d6:
                    b9:00:15:e5:e8:7e:43:d2:2c:0a:b6:f5:ef:a1:76:
                    f5:ca:76:d7:60:f7:71:f6:ed:ab:b1:7d:8a:95:cb:
                    74:e6:40:26:ab:8c:6e:55:2c:bd:97:d3:bb:61:ee:
                    e6:2c:1a:77:fb:7a:26:d2:6c:3e:3c:09:0c:2c:1d:
                    c9:7e:e6:27:a5:76:77:a6:87:72:94:05:9b:11:34:
                    a5:2c:12:08:e1:43:4c:56:92:6a:8e:ba:f6:8a:4d:
                    4f:c4:02:79:a9:e1:da:15:cb:04:58:ab:f6:df:63:
                    9c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A3:0A:FC:92:B9:20:24:51:3C:99:C3:1D:20:01:BD:18:26:37:95
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/e650fc1f5083e7f8507908fc4d2e920f043eb25c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:92:69:c9:ff:48:d8:ee:ee:ed:0d:5d:4d:27:d3:a7:2a:8d:
         2f:31:2b:61:61:8a:1f:0c:73:6a:b2:39:c7:b8:2d:3e:95:ec:
         dd:9f:3f:79:94:62:51:04:88:2f:e4:af:d9:7a:b8:a1:09:f6:
         be:71:ff:65:5d:c0:f8:5b:4d:7c:56:63:8b:8e:47:cb:61:b9:
         24:d5:1e:a7:4e:1b:3d:07:df:bf:4c:5d:fe:b6:61:1c:ce:89:
         47:ee:75:8a:2e:8f:ad:6d:ff:bf:c6:dd:36:41:2b:d5:e4:1d:
         f6:ca:67:ac:c8:79:b6:6a:64:d7:97:67:05:31:76:d8:c5:58:
         48:86:31:dd:73:85:72:4c:85:da:83:87:9e:01:dd:4c:2e:2e:
         55:82:c0:c9:7e:60:5b:5f:57:61:65:8b:e4:ea:27:bb:c7:56:
         dc:d6:8b:bf:e0:7f:c6:8a:af:40:f1:0d:44:69:bb:0a:18:76:
         2b:37:83:98:0e:37:43:6f:14:fd:b5:e3:36:b0:be:5c:35:84:
         ef:b1:e6:95:b9:a3:62:2a:73:b6:16:58:c5:33:7d:00:e0:29:
         5f:d3:1f:8c:9c:46:be:12:3c:86:13:18:76:9f:87:f2:c7:26:
         f9:43:07:92:74:2b:db:4f:66:70:b4:d8:44:a7:d0:03:92:20:
         09:c2:e6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-ams.rpki-client.org