Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/326645830d033d619ced6ace8f8c7195259d0caf.roa
File:                     326645830d033d619ced6ace8f8c7195259d0caf.roa (raw, json)
Hash identifier:          VGvHE+E3vHItcORkXh+1BsmxHt73zmW5NNlIbTlOnV4=
Subject key identifier:   90:1A:B9:6D:7B:0C:44:FD:D2:F1:A6:A8:A2:C3:84:D8:34:76:7A:85
Certificate issuer:       /CN=6410162b16fe94fd0a84d5440b3138f11f80bb21
Certificate serial:       11E087
Authority key identifier: 45:38:AC:6C:70:78:61:AD:60:CF:D1:72:57:29:A5:05:C4:00:13:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6410162b16fe94fd0a84d5440b3138f11f80bb21.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/326645830d033d619ced6ace8f8c7195259d0caf.roa
Signing time:             Tue 05 Oct 2021 21:37:54 +0000
ROA not before:           Tue 05 Oct 2021 03:00:00 +0000
ROA not after:            Thu 31 Jan 2041 03:00:00 +0000
asID:                     25607
IP address blocks:        161.0.32.0/19 maxlen: 24
                          190.106.48.0/20 maxlen: 24
                          191.103.112.0/20 maxlen: 24
                          200.85.160.0/20 maxlen: 24
                          2803:800::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1171591 (0x11e087)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6410162b16fe94fd0a84d5440b3138f11f80bb21
        Validity
            Not Before: Oct  5 03:00:00 2021 GMT
            Not After : Jan 31 03:00:00 2041 GMT
        Subject: CN=326645830d033d619ced6ace8f8c7195259d0caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:75:fa:52:f6:8a:ac:be:92:fd:13:ba:0f:6a:
                    cb:e0:8d:af:07:6a:a6:14:1c:80:f6:53:e2:bf:a2:
                    74:ec:bd:cd:c1:23:17:0a:5a:5c:47:bf:d0:47:fc:
                    e1:dc:24:ed:62:48:08:dd:37:e2:0c:2c:ff:a8:2d:
                    a0:3c:97:da:3c:19:f3:d5:dd:0e:b5:5a:2f:7b:e6:
                    83:b1:ad:ba:e1:3a:e4:95:5e:ab:b8:ed:97:9b:45:
                    df:58:af:57:50:d7:b9:ad:24:73:b3:3f:d4:e3:71:
                    57:1a:99:d9:52:b9:2f:ad:88:06:52:a1:17:13:c3:
                    4c:f6:76:f1:b8:99:b6:c5:64:40:4f:15:79:fd:1d:
                    f2:96:cf:a4:e7:e4:f6:e9:8a:06:c7:e8:94:02:65:
                    81:68:94:f2:64:80:e9:cf:db:a5:89:b1:2a:cf:91:
                    a7:98:d7:9d:a9:a3:a8:91:13:2d:3a:05:a4:8f:3a:
                    90:c2:79:8c:a8:3a:61:8f:8b:6b:97:c3:5e:25:f4:
                    dc:8e:69:28:17:61:61:14:e4:79:1e:cd:91:3f:31:
                    7d:c6:68:52:0d:b0:b0:8a:8a:e3:48:8f:32:9a:63:
                    a9:4f:8a:81:30:a8:d3:e5:62:91:46:8d:08:f0:3c:
                    dd:d9:88:85:9c:24:0f:72:a2:bc:a1:26:45:d8:9a:
                    97:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1A:B9:6D:7B:0C:44:FD:D2:F1:A6:A8:A2:C3:84:D8:34:76:7A:85
            X509v3 Authority Key Identifier:
                keyid:45:38:AC:6C:70:78:61:AD:60:CF:D1:72:57:29:A5:05:C4:00:13:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6410162b16fe94fd0a84d5440b3138f11f80bb21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/326645830d033d619ced6ace8f8c7195259d0caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ced9548-51d3-4d90-a5ea-188f13a549dd/6410162b16fe94fd0a84d5440b3138f11f80bb21.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.32.0/19
                  190.106.48.0/20
                  191.103.112.0/20
                  200.85.160.0/20
                IPv6:
                  2803:800::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:08:69:50:4b:85:5d:a6:a1:16:10:e4:ad:ac:91:7d:2c:e2:
         72:14:4a:74:5b:65:af:17:15:d2:55:42:ad:27:06:f3:10:0e:
         e9:3a:94:ea:16:08:dc:60:85:0d:12:46:d6:5c:b6:4d:82:f4:
         75:6f:93:15:06:2e:b8:4d:ee:11:d8:ab:49:ba:8b:52:05:68:
         df:fa:21:ae:6b:1a:0a:fd:33:bf:3b:69:f3:e9:a7:54:14:bf:
         a1:bd:c9:a2:9c:29:43:24:aa:ca:24:ac:4f:91:43:44:e0:a7:
         ae:74:a1:62:17:84:4e:b5:a8:c9:cd:e4:47:58:b0:a2:e7:39:
         2a:13:00:47:89:40:7d:69:81:4f:7e:d8:cd:c5:85:30:e3:1c:
         ac:48:b6:10:3d:1f:b8:30:ee:9e:53:e6:a4:36:17:d2:f0:1e:
         71:28:3b:51:fa:04:80:ec:b6:15:0d:b0:90:ba:cc:2b:e6:d7:
         c3:0a:32:fb:e7:19:3c:67:c4:3a:04:ab:bd:8d:82:59:18:39:
         84:d9:6a:ac:30:9c:29:a2:a7:69:e7:12:9e:fb:4e:4d:13:19:
         8a:9b:fe:c6:60:cb:6e:bd:66:3e:ce:11:cb:79:74:2c:ef:8c:
         13:1a:6a:d2:01:a0:27:88:11:cc:8e:ad:24:1c:9b:ec:0c:6f:
         14:74:c3:57
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIDEeCHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY0
MTAxNjJiMTZmZTk0ZmQwYTg0ZDU0NDBiMzEzOGYxMWY4MGJiMjEwHhcNMjExMDA1
MDMwMDAwWhcNNDEwMTMxMDMwMDAwWjAzMTEwLwYDVQQDEygzMjY2NDU4MzBkMDMz
ZDYxOWNlZDZhY2U4ZjhjNzE5NTI1OWQwY2FmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAinX6UvaKrL6S/RO6D2rL4I2vB2qmFByA9lPiv6J07L3NwSMX
ClpcR7/QR/zh3CTtYkgI3TfiDCz/qC2gPJfaPBnz1d0OtVove+aDsa264TrklV6r
uO2Xm0XfWK9XUNe5rSRzsz/U43FXGpnZUrkvrYgGUqEXE8NM9nbxuJm2xWRATxV5
/R3yls+k5+T26YoGx+iUAmWBaJTyZIDpz9ulibEqz5GnmNedqaOokRMtOgWkjzqQ
wnmMqDphj4trl8NeJfTcjmkoF2FhFOR5Hs2RPzF9xmhSDbCwiorjSI8ymmOpT4qB
MKjT5WKRRo0I8Dzd2YiFnCQPcqK8oSZF2JqXsQIDAQABo4ICfDCCAngwHQYDVR0O
BBYEFJAauW17DET90vGmqKLDhNg0dnqFMB8GA1UdIwQYMBaAFEU4rGxweGGtYM/R
clcppQXEABOPMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjQxMDE2
MmIxNmZlOTRmZDBhODRkNTQ0MGIzMTM4ZjExZjgwYmIyMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGNlZDk1NDgtNTFkMy00ZDkwLWE1ZWEtMTg4ZjEz
YTU0OWRkLzMyNjY0NTgzMGQwMzNkNjE5Y2VkNmFjZThmOGM3MTk1MjU5ZDBjYWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80Y2VkOTU0OC01MWQzLTRkOTAtYTVlYS0xODhm
MTNhNTQ5ZGQvNjQxMDE2MmIxNmZlOTRmZDBhODRkNTQ0MGIzMTM4ZjExZjgwYmIy
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQx
MC8wHgQCAAEwGAMEBaEAIAMEBL5qMAMEBL9ncAMEBMhVoDANBAIAAjAHAwUAKAMI
ADANBgkqhkiG9w0BAQsFAAOCAQEAJghpUEuFXaahFhDkrayRfSzichRKdFtlrxcV
0lVCrScG8xAO6TqU6hYI3GCFDRJG1ly2TYL0dW+TFQYuuE3uEdirSbqLUgVo3/oh
rmsaCv0zvztp8+mnVBS/ob3JopwpQySqyiSsT5FDROCnrnShYheETrWoyc3kR1iw
ouc5KhMAR4lAfWmBT37YzcWFMOMcrEi2ED0fuDDunlPmpDYX0vAecSg7UfoEgOy2
FQ2wkLrMK+bXwwoy++cZPGfEOgSrvY2CWRg5hNlqrDCcKaKnaecSnvtOTRMZipv+
xmDLbr1mPs4Ry3l0LO+MExpq0gGgJ4gRzI6tJByb7AxvFHTDVw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-ams.rpki-client.org