Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/9bd3f86a8e58238d21d4fdafd95d6f513b3aeb4e.roa
File:                     9bd3f86a8e58238d21d4fdafd95d6f513b3aeb4e.roa (raw, json)
Hash identifier:          3wKGRn0a2aXrcf6GR320saD+4/d9FOR73giz5uiOFWU=
Subject key identifier:   3C:25:CD:BF:8B:56:3D:03:BE:1B:ED:00:8C:AC:60:FD:16:5B:7A:D7
Certificate issuer:       /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial:       1D34B4
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/9bd3f86a8e58238d21d4fdafd95d6f513b3aeb4e.roa
Signing time:             Fri 18 Nov 2022 01:09:55 +0000
ROA not before:           Sun 21 Mar 2021 03:00:00 +0000
ROA not after:            Tue 06 Apr 2032 03:00:00 +0000
asID:                     52347
IP address blocks:        186.177.228.0/22 maxlen: 22
                          186.177.232.0/21 maxlen: 21
                          186.177.240.0/24 maxlen: 24
                          190.93.40.0/24 maxlen: 24
                          190.93.41.0/24 maxlen: 24
                          190.93.42.0/24 maxlen: 24
                          190.93.43.0/24 maxlen: 24
                          190.111.40.0/21 maxlen: 21
                          190.111.56.0/24 maxlen: 24
                          190.111.60.0/24 maxlen: 24
                          190.111.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1914036 (0x1d34b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
        Validity
            Not Before: Mar 21 03:00:00 2021 GMT
            Not After : Apr  6 03:00:00 2032 GMT
        Subject: CN=9bd3f86a8e58238d21d4fdafd95d6f513b3aeb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:69:b4:bb:ed:cb:5f:ac:cc:25:ac:11:87:51:
                    6b:65:f2:ab:d3:cb:c8:96:3d:65:ec:18:8d:5f:0e:
                    ff:dd:6b:76:f6:65:f5:df:62:0b:ff:2a:f8:3f:f1:
                    60:ef:9c:ba:33:23:53:ea:04:60:0a:1a:dd:94:0e:
                    36:87:32:3e:90:da:f8:17:14:fb:bc:fe:9b:45:a3:
                    85:93:ec:22:ee:dd:fa:4b:6f:c4:96:4e:74:40:bc:
                    ed:6e:6e:04:b7:d2:7a:42:57:cf:21:82:ff:c0:dd:
                    5c:6a:c8:ed:84:95:a1:94:6b:81:fd:bb:5b:ed:89:
                    2e:e6:0c:44:03:08:67:02:78:75:81:2f:51:03:21:
                    0c:3c:3d:bd:10:cd:01:79:5e:09:e7:58:66:a5:96:
                    65:db:64:fc:63:01:5c:e9:70:69:b6:ae:66:e6:ad:
                    61:90:28:df:81:a1:29:b9:82:88:27:59:5d:7d:70:
                    32:38:d4:b7:78:48:5d:bf:4f:99:c8:ed:14:06:ac:
                    11:1d:8a:d9:6c:22:f5:81:3e:01:1e:4b:a1:03:18:
                    5c:99:c3:32:f3:79:b5:18:d3:ef:7a:3b:51:e1:15:
                    d1:bd:c6:b7:ca:3a:c6:63:bb:f9:6a:fa:fa:db:1b:
                    34:87:58:0e:fb:68:99:37:52:b3:da:45:88:6d:84:
                    79:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:25:CD:BF:8B:56:3D:03:BE:1B:ED:00:8C:AC:60:FD:16:5B:7A:D7
            X509v3 Authority Key Identifier:
                keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/9bd3f86a8e58238d21d4fdafd95d6f513b3aeb4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.228.0-186.177.240.255
                  190.93.40.0/22
                  190.111.40.0/21
                  190.111.56.0/24
                  190.111.60.0/24
                  190.111.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:2f:cd:fe:a7:e4:bd:f3:5e:9a:a8:bb:d3:0e:06:fd:13:24:
         50:e7:c7:2d:2d:f2:49:7d:eb:e9:87:7d:23:69:54:9c:90:e9:
         7a:4a:cb:b7:8a:f8:c3:98:19:d3:75:4e:21:d7:24:13:22:29:
         df:ad:7c:63:2f:2c:b4:21:4b:56:51:6d:1a:81:d6:82:b4:2f:
         0d:ce:e1:85:3d:bc:a6:97:8a:34:84:ab:e5:cc:60:7a:59:59:
         19:98:9b:11:b1:11:5b:c9:41:80:3f:14:5b:db:e1:8f:2d:3a:
         fa:63:0d:47:32:2f:45:f2:25:d6:2c:21:38:83:fc:d8:a8:6a:
         ce:58:11:4f:08:ea:25:84:41:86:c6:8c:6d:1a:c6:6e:fb:d9:
         b2:2a:39:11:8c:b6:e2:6e:8b:44:d0:1b:6d:e4:2f:55:a4:22:
         12:44:05:45:97:16:7e:8e:f1:bb:f2:6d:b5:2c:27:ab:1e:34:
         cb:00:7a:4d:d6:0f:a5:f9:15:70:20:90:8d:7c:1a:0a:07:ec:
         b1:67:45:b9:44:5e:70:22:8f:d9:bf:c4:22:9b:b6:02:c9:20:
         58:d2:5f:19:41:36:66:97:b6:00:f3:c2:3d:cb:52:9f:18:4b:
         e7:c2:e9:86:ab:5a:68:ad:c5:f8:f8:31:03:d5:76:2f:3f:96:
         9c:e1:76:bc
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIDHTS0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRi
YTgzNGFlYjUyMDMzMWQyMWM3NjhlMTNlNzU2NGU3MDU2MzBkMmMwHhcNMjEwMzIx
MDMwMDAwWhcNMzIwNDA2MDMwMDAwWjAzMTEwLwYDVQQDEyg5YmQzZjg2YThlNTgy
MzhkMjFkNGZkYWZkOTVkNmY1MTNiM2FlYjRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlmm0u+3LX6zMJawRh1FrZfKr08vIlj1l7BiNXw7/3Wt29mX1
32IL/yr4P/Fg75y6MyNT6gRgChrdlA42hzI+kNr4FxT7vP6bRaOFk+wi7t36S2/E
lk50QLztbm4Et9J6QlfPIYL/wN1casjthJWhlGuB/btb7Yku5gxEAwhnAnh1gS9R
AyEMPD29EM0BeV4J51hmpZZl22T8YwFc6XBptq5m5q1hkCjfgaEpuYKIJ1ldfXAy
ONS3eEhdv0+ZyO0UBqwRHYrZbCL1gT4BHkuhAxhcmcMy83m1GNPvejtR4RXRvca3
yjrGY7v5avr62xs0h1gO+2iZN1Kz2kWIbYR5twIDAQABo4ICgTCCAn0wHQYDVR0O
BBYEFDwlzb+LVj0DvhvtAIysYP0WW3rXMB8GA1UdIwQYMBaAFEztm7dkkEa+gAE2
nJqYTr334XjQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGJhODM0
YWViNTIwMzMxZDIxYzc2OGUxM2U3NTY0ZTcwNTYzMGQyYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDI4MWExNGUtYjZhNS00Yzg5LWI0YmEtMDU3NTAw
OGRhYzEzLzliZDNmODZhOGU1ODIzOGQyMWQ0ZmRhZmQ5NWQ2ZjUxM2IzYWViNGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80MjgxYTE0ZS1iNmE1LTRjODktYjRiYS0wNTc1
MDA4ZGFjMTMvNGJhODM0YWViNTIwMzMxZDIxYzc2OGUxM2U3NTY0ZTcwNTYzMGQy
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBFBggrBgEFBQcBBwEB/wQ2
MDQwMgQCAAEwLDAMAwQCurHkAwQAurHwAwQCvl0oAwQDvm8oAwQAvm84AwQAvm88
AwQAvm8/MA0GCSqGSIb3DQEBCwUAA4IBAQBUL83+p+S9816aqLvTDgb9EyRQ58ct
LfJJfevph30jaVSckOl6Ssu3ivjDmBnTdU4h1yQTIinfrXxjLyy0IUtWUW0agdaC
tC8NzuGFPbyml4o0hKvlzGB6WVkZmJsRsRFbyUGAPxRb2+GPLTr6Yw1HMi9F8iXW
LCE4g/zYqGrOWBFPCOolhEGGxoxtGsZu+9myKjkRjLbibotE0Btt5C9VpCISRAVF
lxZ+jvG78m21LCerHjTLAHpN1g+l+RVwIJCNfBoKB+yxZ0W5RF5wIo/Zv8Qim7YC
ySBY0l8ZQTZml7YA88I9y1KfGEvnwumGq1porcX4+DED1XYvP5ac4Xa8
-----END CERTIFICATE-----
Generated at Mon Sep 4 18:15:16 2023 by rpki-client on console-fra.rpki-client.org