Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/79ff558e8e4049e76b694d9e5f2ce096cf8e175f.roa
File:                     79ff558e8e4049e76b694d9e5f2ce096cf8e175f.roa (raw, json)
Hash identifier:          9QZqMukPo+9JG9HoE6gYrjZmmUEH2vPRAhxfOTkKUHA=
Subject key identifier:   BC:22:F3:6F:3B:43:32:95:E7:5B:AE:A7:C0:C5:D7:5B:D4:AF:93:83
Certificate issuer:       /CN=619037b36cd18d11904cb9935ece4cb8ee755731
Certificate serial:       0BDDD5
Authority key identifier: 35:66:10:B7:BB:39:08:4B:FC:26:DF:D1:C8:D4:2A:71:EC:52:82:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/619037b36cd18d11904cb9935ece4cb8ee755731.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/79ff558e8e4049e76b694d9e5f2ce096cf8e175f.roa
Signing time:             Mon 13 Jun 2022 13:04:14 +0000
ROA not before:           Mon 13 Jun 2022 13:04:13 +0000
ROA not after:            Sun 13 Jun 2027 13:04:13 +0000
asID:                     269905
IP address blocks:        190.112.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777685 (0xbddd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619037b36cd18d11904cb9935ece4cb8ee755731
        Validity
            Not Before: Jun 13 13:04:13 2022 GMT
            Not After : Jun 13 13:04:13 2027 GMT
        Subject: CN=79ff558e8e4049e76b694d9e5f2ce096cf8e175f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f6:e8:65:39:27:2d:87:ba:1f:1c:94:88:b5:
                    a2:a3:b4:c8:79:33:32:fe:fb:ad:a7:c4:34:f9:56:
                    55:83:79:6d:e6:71:9e:21:39:c3:5f:61:a4:5e:55:
                    e7:37:52:5e:1f:bf:b8:c1:f0:e4:cd:7b:3a:f6:a6:
                    89:e5:6c:a8:62:48:33:c4:79:94:e6:94:0e:8e:38:
                    0a:d1:cc:22:75:58:c3:52:2e:6c:37:e2:e5:4d:c4:
                    bf:36:a7:5b:e8:40:7d:12:89:9b:87:01:0b:c5:61:
                    4f:df:4f:41:d1:10:4e:bf:b2:b9:72:e5:63:52:32:
                    c1:33:94:91:69:19:ee:2d:aa:f6:ba:0f:78:d6:7b:
                    95:1c:65:d2:b9:a0:05:e5:24:30:c8:8a:a2:1f:61:
                    94:02:a3:1f:78:02:39:62:ec:b5:0c:db:40:2a:75:
                    20:a3:c3:18:c5:f5:3b:41:8e:ce:79:8c:af:b0:ff:
                    b5:5c:4c:fc:79:4c:e3:01:50:04:44:bb:ab:24:fa:
                    97:48:4b:05:5e:8f:d3:30:3e:3a:52:a9:d8:46:37:
                    05:2f:38:a0:ea:72:b6:60:f3:0f:aa:91:cc:74:94:
                    af:d3:63:a0:60:db:5e:00:69:37:70:ee:69:c2:54:
                    75:e2:29:87:93:32:bf:ac:71:5b:07:4d:5a:cc:92:
                    bd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:22:F3:6F:3B:43:32:95:E7:5B:AE:A7:C0:C5:D7:5B:D4:AF:93:83
            X509v3 Authority Key Identifier:
                keyid:35:66:10:B7:BB:39:08:4B:FC:26:DF:D1:C8:D4:2A:71:EC:52:82:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/619037b36cd18d11904cb9935ece4cb8ee755731.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/79ff558e8e4049e76b694d9e5f2ce096cf8e175f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/619037b36cd18d11904cb9935ece4cb8ee755731.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:28:2c:56:03:4c:7f:33:aa:e1:c2:0f:d4:4a:5b:b3:de:fe:
         04:47:0b:b6:74:0c:0c:9c:58:1d:24:39:d2:0b:e3:b4:cf:ce:
         44:e4:c0:98:6b:a5:5b:8a:a3:4e:87:8e:73:33:15:ca:2b:be:
         d7:0e:d5:8c:56:2b:08:c6:ee:1b:fd:b0:0d:34:20:49:c0:74:
         75:87:9c:d4:a7:a9:30:92:cc:57:a3:0f:cd:db:32:cb:9b:f7:
         40:16:82:ef:d6:81:a3:5d:7f:d5:1b:93:6c:a1:2a:ba:d2:a0:
         64:f6:df:2f:4f:c1:cb:3e:11:d4:32:05:f9:f0:ad:e1:18:87:
         2e:b9:1e:07:25:6e:d1:8e:51:29:38:09:e5:b0:b7:be:ba:fc:
         ef:61:b7:f0:9d:b3:6e:b6:07:91:54:40:db:86:c3:02:1e:de:
         3f:b3:c7:84:db:11:c8:1d:90:94:d7:da:ef:9b:f6:5d:4c:a5:
         06:db:77:0f:06:75:d7:43:86:37:44:24:a9:0e:d8:e7:dc:0c:
         71:99:73:58:16:fb:75:3e:f2:6f:b1:53:ba:34:93:2e:4c:19:
         a4:dc:37:b4:69:e5:f6:6d:77:22:26:ab:b2:e0:67:64:35:ca:
         53:3f:af:38:da:88:3f:e3:0e:89:38:07:79:9a:ca:7d:c9:ed:
         47:ac:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-ams.rpki-client.org