Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/fa43097593e94e7f4965df70f62a3ecb95c282f2.roa
File:                     fa43097593e94e7f4965df70f62a3ecb95c282f2.roa (raw, json)
Hash identifier:          sDEQhKYQE/E7Azdl0tG2TgAJSqXOBnazWDwAqx1g3HM=
Subject key identifier:   9C:8D:2E:44:B6:C4:73:3F:7A:21:5D:31:77:4C:90:A2:5A:A9:6A:A6
Certificate issuer:       /CN=444e0076eea4611dce8c3e39bffef12743fb4711
Certificate serial:       19BE72
Authority key identifier: EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/fa43097593e94e7f4965df70f62a3ecb95c282f2.roa
Signing time:             Thu 15 Jun 2023 14:42:43 +0000
ROA not before:           Wed 14 Jun 2023 14:42:40 +0000
ROA not after:            Sun 15 Jun 2025 14:42:40 +0000
asID:                     263801
IP address blocks:        189.90.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687154 (0x19be72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444e0076eea4611dce8c3e39bffef12743fb4711
        Validity
            Not Before: Jun 14 14:42:40 2023 GMT
            Not After : Jun 15 14:42:40 2025 GMT
        Subject: CN=fa43097593e94e7f4965df70f62a3ecb95c282f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:ab:9a:dd:3b:bd:af:53:c8:97:8e:f4:1b:
                    6d:e1:fb:8e:38:5f:ad:a6:66:c1:9d:5d:27:cf:13:
                    ef:78:c5:fc:ec:d6:e8:56:0a:69:c1:f7:78:a7:9b:
                    5f:a7:fa:83:9f:ea:18:f5:7a:22:17:88:3f:08:c9:
                    7c:dc:a3:4e:82:21:e4:61:fc:89:8b:27:30:88:21:
                    44:9e:9f:98:6c:d8:da:d3:a0:ec:32:98:34:3d:5f:
                    61:b9:8f:3e:72:4c:84:ce:81:1b:8d:fc:2e:f2:9b:
                    f1:8a:4c:7e:9f:f8:ae:33:67:c5:48:99:e9:d0:d9:
                    02:6e:b0:28:c5:5a:91:41:71:a2:82:d8:11:5d:84:
                    d0:91:8e:ea:96:ad:27:d6:0f:ba:ff:99:e4:ec:2c:
                    66:51:69:cf:70:f1:7d:6a:ce:13:7d:42:05:17:fb:
                    5c:5d:aa:18:27:b8:b4:7c:eb:5a:97:1e:23:93:a3:
                    32:89:4f:c1:d0:21:3d:eb:61:eb:30:83:52:8e:eb:
                    35:08:d6:9c:2f:14:55:bd:fe:c3:ad:a8:37:80:48:
                    59:63:38:04:79:3d:80:78:9e:ac:74:77:c4:77:fc:
                    ef:2f:74:64:0d:26:bd:d3:9b:86:ca:74:f4:16:c1:
                    ae:6e:cc:c8:5a:44:0c:51:ef:44:a8:b9:04:56:37:
                    24:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8D:2E:44:B6:C4:73:3F:7A:21:5D:31:77:4C:90:A2:5A:A9:6A:A6
            X509v3 Authority Key Identifier:
                keyid:EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/fa43097593e94e7f4965df70f62a3ecb95c282f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/444e0076eea4611dce8c3e39bffef12743fb4711.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:69:e7:de:58:83:1f:06:ed:b6:3c:c6:78:d1:fc:90:fb:c1:
         08:d1:a9:4a:6d:c7:bb:1f:de:b0:ca:c3:da:c7:33:7e:57:51:
         d5:ae:6f:93:1b:a7:f4:98:c5:bd:5f:db:40:f1:a3:2c:c0:b8:
         14:8e:c6:19:7a:20:c3:6a:99:a0:9c:68:9b:72:57:04:f1:4f:
         67:55:14:a6:ff:97:fc:65:0e:75:46:2d:85:ee:2e:f4:c7:c5:
         05:d7:d9:26:8f:26:12:68:1e:07:6b:7b:9c:65:1c:2c:ce:9c:
         6b:f4:d7:b6:89:96:44:0a:49:1e:35:56:e5:1e:d0:5d:9e:62:
         3d:11:8e:c1:92:d0:6f:5f:f4:3d:15:64:14:c4:3d:ff:58:c9:
         5f:47:bb:56:68:10:de:cf:02:97:68:5a:78:bc:99:21:f8:26:
         a3:3b:cf:ad:3c:75:91:43:7a:4a:f1:e1:1c:5f:1d:55:d6:30:
         04:23:cd:8e:a1:53:f9:c4:fd:78:61:db:12:ab:04:b7:65:82:
         ff:3f:42:04:60:a2:0b:62:dc:0f:fa:b3:ac:cc:13:0c:6f:70:
         64:b3:b6:15:0f:bc:d8:5b:e0:52:55:1e:6d:20:97:a0:c4:a2:
         12:5a:76:4d:65:54:9c:b6:c1:2c:35:67:89:a0:18:49:b5:60:
         83:4a:f2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-ams.rpki-client.org