Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/2163a8db97a3e15702494b3777e0a6bc59a952d8.roa
File:                     2163a8db97a3e15702494b3777e0a6bc59a952d8.roa (raw, json)
Hash identifier:          1royZIQ/s5jhuuQFVAy35e55zfoMe5+/7IGw6HYVuZc=
Subject key identifier:   B7:E9:84:6E:36:0B:C2:BA:63:43:B9:FB:2A:CD:B7:1E:6A:C8:82:E5
Certificate issuer:       /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial:       1A5C13
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/2163a8db97a3e15702494b3777e0a6bc59a952d8.roa
Signing time:             Wed 03 Aug 2022 01:18:14 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 06 Apr 2032 03:00:00 +0000
asID:                     52347
IP address blocks:        186.177.228.0/22 maxlen: 22
                          186.177.232.0/21 maxlen: 21
                          186.177.240.0/24 maxlen: 24
                          190.93.40.0/22 maxlen: 24
                          190.93.40.0/24 maxlen: 24
                          190.93.41.0/24 maxlen: 24
                          190.93.42.0/24 maxlen: 24
                          190.93.43.0/24 maxlen: 24
                          190.111.56.0/24 maxlen: 24
                          190.111.60.0/24 maxlen: 24
                          190.111.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1727507 (0x1a5c13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Apr  6 03:00:00 2032 GMT
        Subject: CN=2163a8db97a3e15702494b3777e0a6bc59a952d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:f3:ca:13:ca:2d:fe:83:eb:bc:15:83:47:
                    5e:8d:f1:97:30:40:1c:d9:1e:c2:9b:5a:9f:1b:11:
                    b0:89:8c:e0:eb:7a:77:0d:9b:ad:2e:a0:85:08:83:
                    9b:82:14:20:22:f1:ae:a0:9e:4a:b7:3a:23:c5:ee:
                    e7:9d:e3:6c:e0:f8:54:1d:75:99:44:d5:fd:be:81:
                    c3:ce:4a:5a:2f:eb:2c:8d:75:cb:b6:90:50:39:67:
                    37:14:d5:bb:0b:5d:de:51:04:f3:b5:51:e6:b9:5b:
                    f8:3f:cb:19:04:c2:e1:6c:15:a6:7e:c4:eb:d1:45:
                    63:50:12:8a:59:12:b6:da:59:be:f4:3c:fe:2e:55:
                    b9:4b:ab:48:10:a8:1d:5a:c5:49:f5:db:25:ee:de:
                    06:1c:2a:40:d6:6c:a2:72:c0:21:ec:cb:5c:d4:dd:
                    ba:5a:1e:cc:6c:6b:7e:0f:a5:a1:4f:55:4f:c7:a0:
                    02:26:66:50:65:ce:66:45:da:d2:a1:4c:55:2a:42:
                    c3:a2:fa:47:e2:b7:00:1b:24:03:92:fe:41:01:67:
                    89:78:92:c0:a2:11:6a:16:ff:50:33:2d:1b:c1:6a:
                    43:6a:5b:b9:a4:aa:85:46:d9:1e:d8:9c:17:ff:18:
                    a1:bc:60:80:79:b5:16:50:87:07:9f:10:90:6e:f6:
                    ec:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E9:84:6E:36:0B:C2:BA:63:43:B9:FB:2A:CD:B7:1E:6A:C8:82:E5
            X509v3 Authority Key Identifier:
                keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/2163a8db97a3e15702494b3777e0a6bc59a952d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.228.0-186.177.240.255
                  190.93.40.0/22
                  190.111.56.0/24
                  190.111.60.0/24
                  190.111.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:c7:63:c8:43:f9:c3:c2:d4:2e:0d:2b:28:5d:1a:9c:1d:42:
         b2:81:66:48:c6:9c:91:b8:c5:ea:fb:df:b7:ed:09:77:4b:82:
         dc:0b:69:2b:b4:a1:67:0b:ea:ab:fa:c2:c4:bd:73:6e:20:44:
         02:1e:3e:0f:dd:37:11:62:0b:a7:bf:9c:13:2b:cd:5a:7f:ea:
         63:99:02:fd:a1:ef:51:1e:4c:d4:17:93:3a:79:84:d0:d3:64:
         5b:4c:f3:54:81:b3:1f:3e:96:5d:a9:ec:83:8d:99:37:4e:42:
         21:e6:8c:e2:0c:f6:8c:47:a1:be:c2:b5:de:0a:dd:2e:01:e8:
         9d:98:23:02:c9:13:f6:5c:c6:b2:e9:f0:6a:81:89:54:bd:8e:
         81:4f:7f:bf:b2:21:65:c1:c1:ef:e7:54:27:9d:3c:51:96:28:
         c0:56:18:1f:88:83:9a:c8:a3:49:08:00:23:1a:e8:82:39:57:
         0f:ca:99:34:e3:e8:f9:08:1e:08:0f:cb:df:b8:ef:9b:8a:8a:
         5b:69:89:a3:2b:da:b3:37:d3:bf:0c:a3:2b:57:5e:4c:fb:58:
         87:c9:a8:d9:bf:01:09:56:9d:86:be:90:0a:22:0e:32:5f:33:
         8b:bf:6e:7d:42:14:0e:a6:5c:83:bb:34:25:c1:d1:7c:65:51:
         7a:dc:ba:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org