Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/771c7cb38fd9c60d25b033ff16a6b97f3d073eb8.roa
File:                     771c7cb38fd9c60d25b033ff16a6b97f3d073eb8.roa (raw, json)
Hash identifier:          tJJDxbEJU/47wHfDChLJc4l+w+hKDm+b5WQrtmjHXNE=
Subject key identifier:   56:C4:95:FD:D8:7F:02:1E:DE:3B:F4:4A:4C:49:CB:20:B9:39:F7:D2
Certificate issuer:       /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial:       1748AA
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/771c7cb38fd9c60d25b033ff16a6b97f3d073eb8.roa
Signing time:             Wed 06 Apr 2022 17:08:58 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 06 Apr 2032 03:00:00 +0000
asID:                     52347
IP address blocks:        186.177.228.0/22 maxlen: 22
                          186.177.232.0/21 maxlen: 21
                          186.177.240.0/24 maxlen: 24
                          190.93.40.0/23 maxlen: 24
                          190.93.43.0/24 maxlen: 24
                          190.111.56.0/24 maxlen: 24
                          190.111.60.0/24 maxlen: 24
                          190.111.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1525930 (0x1748aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Apr  6 03:00:00 2032 GMT
        Subject: CN=771c7cb38fd9c60d25b033ff16a6b97f3d073eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ce:62:42:dd:71:62:18:89:5c:f1:45:d4:f9:
                    c1:95:ce:75:cb:51:a5:fb:7d:e6:29:a5:c0:bf:7d:
                    ef:39:c4:11:fb:b0:a4:71:b0:e0:ff:88:6f:09:a3:
                    c5:e7:21:68:d5:47:3e:40:a9:42:ec:dc:aa:bc:6b:
                    4e:62:a9:7a:33:9f:10:02:d1:0b:09:29:85:6b:0d:
                    8f:39:86:77:78:a7:3e:16:18:fd:e9:73:3b:38:4c:
                    b6:09:47:8b:08:f8:cd:a2:79:61:7b:0c:43:af:79:
                    ab:f7:cd:e4:37:b8:8f:50:cc:27:ad:ce:f8:05:ce:
                    27:b6:c3:f4:bf:82:90:12:c7:cf:bb:e1:4b:03:64:
                    74:ce:e7:6f:3c:5a:5b:de:c1:2d:fd:9d:04:f2:ea:
                    3f:a3:d5:c4:16:ea:3a:0d:06:0e:a1:37:66:07:ef:
                    f6:99:9b:40:24:a6:2f:3f:cd:e7:d4:c0:db:21:11:
                    df:cc:7c:35:bc:b4:e1:e9:89:6a:b1:8b:32:66:3e:
                    73:68:a5:fc:06:07:f8:3e:8e:00:2d:ff:15:ce:db:
                    4d:66:7b:9b:4a:d0:b8:df:c2:79:1e:d7:f7:bd:8b:
                    fa:ff:1d:6d:b5:fd:c3:2a:48:00:e2:aa:72:eb:bd:
                    b6:82:6f:f9:7a:31:cd:96:29:1a:65:b6:a7:10:9d:
                    83:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C4:95:FD:D8:7F:02:1E:DE:3B:F4:4A:4C:49:CB:20:B9:39:F7:D2
            X509v3 Authority Key Identifier:
                keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/771c7cb38fd9c60d25b033ff16a6b97f3d073eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.228.0-186.177.240.255
                  190.93.40.0/23
                  190.93.43.0/24
                  190.111.56.0/24
                  190.111.60.0/24
                  190.111.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:a2:58:50:28:17:3e:ed:67:16:97:5b:7b:45:1f:b3:94:fb:
         c3:d0:5c:2a:fb:12:81:09:b9:15:98:f3:d5:89:1d:ce:e1:a3:
         85:4e:24:d4:f8:a8:75:67:f9:41:76:bb:ce:80:f4:81:be:0e:
         22:6d:6f:aa:3b:d0:a2:78:83:23:9b:3b:6a:51:99:a9:3a:b9:
         b2:26:65:db:55:a1:ca:37:f9:75:8e:c3:42:3b:b4:97:30:e1:
         b4:2d:bb:3d:75:b9:7f:d8:d2:d8:51:c5:ce:01:f2:5a:50:39:
         0c:1e:d7:25:89:7a:e4:ca:e8:98:d3:9c:2a:b2:40:37:c6:1b:
         5a:bf:97:4f:25:14:70:3f:15:ac:c7:bb:4f:69:82:ad:ca:bd:
         16:8b:e8:f2:03:df:a1:55:5f:ad:92:98:7c:98:ec:e3:41:ab:
         18:49:23:e8:6a:65:7d:7b:fe:26:14:9b:11:a9:05:53:61:d0:
         4f:20:3e:93:f7:b4:4d:af:79:91:bc:34:f7:ac:f5:99:e8:58:
         39:c4:48:57:cf:ca:8f:1f:c0:29:e7:82:e5:c2:89:3a:3f:16:
         f4:0a:c3:0a:61:e4:b4:01:63:9a:07:08:94:34:b0:ff:d7:a3:
         4b:0a:99:9e:94:94:c4:97:67:07:65:2d:1e:c6:3f:cf:00:7f:
         5c:c4:8d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org