Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/dccd8a7248723a8dee1eaf41c2900f53b0e9b02e.roa
File:                     dccd8a7248723a8dee1eaf41c2900f53b0e9b02e.roa (raw, json)
Hash identifier:          Q0DGwwFWZ1eZ3R8sJMf163WzsKnxLUSfEfl8eqVC+I0=
Subject key identifier:   FB:65:F3:A4:C5:CC:6F:A8:DD:8B:4B:57:20:1A:EC:AE:7B:47:94:0F
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       22CC58
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/dccd8a7248723a8dee1eaf41c2900f53b0e9b02e.roa
Signing time:             Tue 04 Jul 2023 15:25:41 +0000
ROA not before:           Mon 03 Jul 2023 15:25:41 +0000
ROA not after:            Fri 04 Jul 2025 15:25:41 +0000
asID:                     263238
IP address blocks:        190.9.182.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2280536 (0x22cc58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Jul  3 15:25:41 2023 GMT
            Not After : Jul  4 15:25:41 2025 GMT
        Subject: CN=dccd8a7248723a8dee1eaf41c2900f53b0e9b02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:f1:d0:de:d6:b2:85:90:f0:9a:be:5b:8e:
                    9d:0f:8a:66:f3:7c:12:22:4d:f0:4f:ac:9e:d8:11:
                    6c:ae:c0:ec:b4:30:bd:5e:6f:d5:46:07:80:91:4e:
                    86:46:46:22:31:a4:73:e1:b0:30:65:67:30:81:cb:
                    61:bd:af:e8:66:22:1b:47:2a:bf:f9:ab:44:5d:66:
                    79:3a:48:e5:95:f0:44:12:63:8d:59:b0:4e:a1:29:
                    ba:8f:84:0f:21:75:98:81:ec:48:6a:6d:2f:80:59:
                    b7:17:6b:20:82:73:96:2d:20:e4:20:c4:f7:28:d7:
                    c8:98:ba:3f:e1:26:07:39:01:9f:32:79:00:c6:4e:
                    9f:e6:2d:8a:3b:9c:cd:49:2f:54:85:69:6b:7f:a9:
                    d9:11:b2:12:e0:b7:14:08:35:69:1b:94:6c:f8:ea:
                    88:91:f7:78:36:7b:15:6b:de:e1:b3:6a:c0:cc:b2:
                    b9:be:47:dd:6e:34:79:6f:81:ff:93:03:50:60:29:
                    36:a2:7d:8b:44:b4:a6:57:dd:91:a5:71:a7:7b:fc:
                    52:93:48:36:dc:13:fd:58:54:72:e4:ae:5b:ac:33:
                    b9:8d:de:7e:6c:56:c8:e7:d5:a2:9d:aa:5e:9c:42:
                    49:97:7a:75:a5:78:96:7c:e5:8b:be:67:f0:7b:9b:
                    5e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:65:F3:A4:C5:CC:6F:A8:DD:8B:4B:57:20:1A:EC:AE:7B:47:94:0F
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/dccd8a7248723a8dee1eaf41c2900f53b0e9b02e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:08:df:c6:cb:a1:5b:ab:66:bc:af:3d:76:35:c2:4c:a1:c3:
         76:46:9f:0c:bb:80:26:bb:00:23:ef:ae:82:4a:66:e3:bb:25:
         0d:ec:5c:ab:34:ed:a3:78:6a:f9:b5:14:56:8b:03:e6:d7:28:
         12:a2:c6:c7:c2:02:18:c3:d6:0f:a9:2e:df:d8:da:27:5c:0b:
         86:e1:6e:88:6c:df:5e:18:67:e1:33:b5:d8:b0:6b:9f:eb:6f:
         b2:0e:c2:88:f7:ed:88:77:27:6e:b7:2e:ae:34:ea:64:60:22:
         e4:e8:7b:fe:85:26:43:2f:c6:ea:50:ef:37:84:ba:c5:3e:a2:
         3d:9e:e5:df:68:da:27:5b:13:df:63:b8:28:51:19:f8:3a:c9:
         a7:3c:ce:cb:6e:74:ec:23:b0:b4:59:86:08:db:e4:20:06:c5:
         eb:f0:14:c7:9e:f6:4d:3a:e7:49:d7:b1:e4:aa:b6:2b:e5:6c:
         73:32:d2:bc:62:fd:69:b2:38:1f:05:0f:ad:33:6b:f4:d0:53:
         7e:79:64:c8:38:66:f4:32:a9:8c:fa:71:c5:8c:c6:8c:ff:5b:
         9c:ef:73:10:c3:77:97:9d:ed:93:bc:fb:66:90:5c:a2:3f:a3:
         4f:1a:11:de:0f:a9:13:33:e5:a1:c0:7d:ca:1a:45:32:27:62:
         77:16:de:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-ams.rpki-client.org