Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/7f5e2e08407aeee661577dd3eabf5e7e8443ed9f.roa
File:                     7f5e2e08407aeee661577dd3eabf5e7e8443ed9f.roa (raw, json)
Hash identifier:          QCMF7MUYPRzRNEgq3HXdYarpUZ0vwRTOZCI/pzYy47I=
Subject key identifier:   39:34:19:C2:1F:A6:51:DA:E2:00:C6:F8:FC:DA:ED:C6:76:8B:9E:D0
Certificate issuer:       /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial:       1A682E
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/7f5e2e08407aeee661577dd3eabf5e7e8443ed9f.roa
Signing time:             Thu 04 Aug 2022 01:44:17 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 06 Apr 2032 03:00:00 +0000
asID:                     52347
IP address blocks:        186.177.228.0/22 maxlen: 22
                          186.177.232.0/21 maxlen: 21
                          186.177.240.0/24 maxlen: 24
                          190.93.40.0/24 maxlen: 24
                          190.93.41.0/24 maxlen: 24
                          190.93.42.0/24 maxlen: 24
                          190.93.43.0/24 maxlen: 24
                          190.111.56.0/24 maxlen: 24
                          190.111.60.0/24 maxlen: 24
                          190.111.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730606 (0x1a682e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Apr  6 03:00:00 2032 GMT
        Subject: CN=7f5e2e08407aeee661577dd3eabf5e7e8443ed9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:71:1e:49:c9:42:1c:8e:f3:aa:bf:ba:2a:
                    c5:34:60:bc:5b:58:3b:e2:d9:a6:6a:e4:68:a3:22:
                    98:a5:12:92:cd:3c:bb:97:6b:52:aa:d8:09:c3:21:
                    55:22:c9:7b:20:83:13:13:4b:64:44:c9:0d:2b:5e:
                    17:51:34:53:8f:d1:8b:23:e2:23:5b:d2:ae:96:be:
                    ff:7a:34:31:db:f0:30:b6:5c:75:49:88:18:09:ad:
                    26:5b:80:c9:91:82:0c:b7:0d:4a:2b:c4:c7:55:bf:
                    7f:77:6e:96:3e:ab:7e:dd:0b:0d:97:b0:24:2e:52:
                    d8:1d:55:1c:3d:0f:03:8c:67:40:e9:07:44:23:65:
                    9a:21:8c:1e:19:c6:90:0b:85:aa:07:26:1f:0f:87:
                    3f:06:65:b9:03:c9:18:d4:e8:fa:2e:d1:5f:a7:60:
                    4c:f4:7b:6a:4f:49:d6:f1:7c:1e:61:c7:07:07:8a:
                    fc:3f:3a:cb:30:9e:b2:49:55:82:c4:72:ba:e5:7b:
                    0a:2b:33:e3:49:5a:cc:f1:d9:c7:da:ad:95:cb:d9:
                    53:ad:32:a0:87:88:81:29:a4:77:c0:03:63:64:54:
                    96:a8:cb:6b:91:ed:cb:85:e5:58:53:91:40:fe:ad:
                    93:cd:ac:fe:5d:47:92:bd:12:e8:a8:3f:8b:2e:c9:
                    de:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:34:19:C2:1F:A6:51:DA:E2:00:C6:F8:FC:DA:ED:C6:76:8B:9E:D0
            X509v3 Authority Key Identifier:
                keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/7f5e2e08407aeee661577dd3eabf5e7e8443ed9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.228.0-186.177.240.255
                  190.93.40.0/22
                  190.111.56.0/24
                  190.111.60.0/24
                  190.111.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:19:37:16:d6:9d:06:8e:3b:b7:74:a5:4d:a8:84:08:d1:74:
         d1:9c:96:6c:5f:54:d7:a5:46:b1:41:75:55:80:b8:28:0d:48:
         92:38:a1:1c:c4:be:97:91:c6:66:3d:dd:b9:d7:10:38:34:7e:
         2a:d4:dd:19:61:3f:cd:78:e3:ed:7d:b6:a9:c2:55:35:a7:53:
         b3:d1:c5:77:6b:ae:f3:e1:aa:ab:24:a2:a9:3e:4a:b8:0e:2e:
         d4:60:08:2f:6c:88:69:a4:bb:7e:ec:2e:32:86:86:d5:fa:6f:
         c3:8e:0e:6e:37:3e:3b:9a:24:dd:33:7e:df:59:7f:66:47:a2:
         a3:a8:43:e7:f5:72:fe:07:2f:5c:6e:31:5a:f2:b1:d8:7a:59:
         d8:7e:66:76:ec:5a:6d:68:3d:d3:b5:17:32:0a:ff:af:a6:58:
         d4:a3:d3:59:b2:8e:b9:8c:94:06:4d:47:fd:10:07:81:aa:ff:
         4d:88:da:8b:5b:af:85:34:a1:7c:23:cb:38:9e:70:05:b5:8f:
         8f:39:46:75:40:f3:d0:52:94:e8:f8:38:cc:a4:5b:a6:84:42:
         8f:fd:92:50:ea:2a:50:83:a2:85:8c:79:83:d4:08:41:4e:2c:
         59:02:9e:d3:6e:48:83:b2:18:32:92:a9:b6:e4:03:e4:d6:bb:
         fe:e3:68:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org