Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/899532d119bf72018662f4734d413a69b613cb40.roa
File:                     899532d119bf72018662f4734d413a69b613cb40.roa (raw, json)
Hash identifier:          nS530R6qKwc8lgi6yRDCsOEhOyhizy/CVJ6h/sOpgjA=
Subject key identifier:   F2:B4:82:B1:15:9C:99:FD:16:CD:1E:22:DF:A2:0B:F0:8F:E4:41:04
Certificate issuer:       /CN=8a1fb2a948dd0ade62e316b2f9231b002d40088e
Certificate serial:       09A6E0
Authority key identifier: 40:F5:A6:AF:1D:7A:85:94:04:37:DA:93:ED:C9:6C:5B:AA:4C:27:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a1fb2a948dd0ade62e316b2f9231b002d40088e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/899532d119bf72018662f4734d413a69b613cb40.roa
Signing time:             Wed 24 Mar 2021 14:30:32 +0000
ROA not before:           Wed 24 Mar 2021 14:30:31 +0000
ROA not after:            Tue 24 Mar 2026 14:30:31 +0000
asID:                     269912
IP address blocks:        45.190.15.0/24 maxlen: 24
                          187.62.110.0/24 maxlen: 24
                          187.62.111.0/24 maxlen: 24
                          2803:1ce0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632544 (0x9a6e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1fb2a948dd0ade62e316b2f9231b002d40088e
        Validity
            Not Before: Mar 24 14:30:31 2021 GMT
            Not After : Mar 24 14:30:31 2026 GMT
        Subject: CN=899532d119bf72018662f4734d413a69b613cb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e7:fe:b3:e9:69:15:ff:19:b6:ce:99:ca:ae:
                    9b:50:3b:ce:ec:cf:26:78:46:c9:d5:8a:d3:8c:30:
                    95:e6:46:7b:58:9c:8e:d8:44:81:57:b9:a2:86:df:
                    b1:fe:dc:d1:8b:68:50:53:d4:36:38:d7:8c:cf:69:
                    b8:81:ce:59:83:84:e3:aa:52:5f:a9:af:9b:73:b8:
                    59:8f:d7:ee:30:c0:fa:37:1d:e8:a3:9f:ba:97:47:
                    71:66:12:14:5c:29:1d:85:a7:e4:91:de:b8:bd:d6:
                    bf:ec:96:1b:33:d1:7b:55:b0:3f:3e:87:9a:a1:4d:
                    a4:57:97:bc:4b:54:90:b4:fe:b2:f8:e4:30:7b:ae:
                    8d:20:be:78:d6:41:b8:ba:1b:5b:74:60:85:03:a6:
                    d8:42:d6:8e:f4:3a:d5:df:2e:60:36:0d:f9:46:6a:
                    d6:63:e4:7f:85:4b:33:4f:8d:36:c8:70:03:af:f8:
                    1c:3c:45:a5:25:56:f9:a1:2b:53:a1:47:9c:61:7e:
                    bc:4c:7f:dc:24:19:48:3f:47:cb:74:f6:40:96:af:
                    15:0e:8f:8e:25:d6:4d:6a:9b:39:23:5e:fe:f9:1d:
                    39:6a:33:54:6b:1d:6b:ed:ea:5b:e2:59:d4:be:cc:
                    9c:af:3e:6f:04:29:cc:1a:a2:6e:38:d5:93:da:bd:
                    45:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B4:82:B1:15:9C:99:FD:16:CD:1E:22:DF:A2:0B:F0:8F:E4:41:04
            X509v3 Authority Key Identifier:
                keyid:40:F5:A6:AF:1D:7A:85:94:04:37:DA:93:ED:C9:6C:5B:AA:4C:27:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a1fb2a948dd0ade62e316b2f9231b002d40088e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/899532d119bf72018662f4734d413a69b613cb40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/8a1fb2a948dd0ade62e316b2f9231b002d40088e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.15.0/24
                  187.62.110.0/23
                IPv6:
                  2803:1ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:3a:30:c8:d5:3a:9e:da:5c:c7:c8:3a:f7:a1:ac:0d:15:04:
         bb:c0:b9:74:ba:d2:28:6a:95:4e:18:70:82:50:e6:4c:ba:3f:
         e3:d6:a7:f3:e1:45:a9:bc:ea:42:94:ed:b8:ce:36:81:8e:46:
         2b:e6:73:74:70:48:6e:a9:75:02:3f:5f:8a:f0:47:3b:c2:52:
         d9:d6:cc:c7:76:ee:e3:d7:82:58:91:06:26:0e:62:28:5c:0c:
         8b:b9:91:59:16:a6:fd:86:fe:c3:ec:07:f4:88:1e:84:66:06:
         5b:86:a4:8c:f4:0d:7c:98:c9:ac:e2:85:cd:85:f0:78:15:7f:
         9f:8a:da:60:65:9c:8f:ce:d7:52:25:2a:18:20:4d:89:2a:5d:
         24:0b:3a:61:ec:99:3f:76:65:a9:27:32:23:11:fd:83:13:dc:
         46:07:59:56:fc:f3:31:30:ee:68:5c:fe:8a:c5:e0:95:c8:99:
         dc:6c:65:1c:14:fe:11:7e:0e:26:bf:d5:7e:02:bc:b4:f4:ae:
         e9:9a:36:63:e3:e8:d8:ab:70:f3:b1:76:38:f8:64:88:8f:43:
         fa:83:fa:c9:eb:95:15:a1:f9:44:52:4c:ec:8e:ab:b2:77:49:
         cc:ab:07:49:5f:dd:7f:6e:36:fc:54:2f:22:2a:5a:6e:1d:df:
         4c:0f:16:16
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDCabgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhh
MWZiMmE5NDhkZDBhZGU2MmUzMTZiMmY5MjMxYjAwMmQ0MDA4OGUwHhcNMjEwMzI0
MTQzMDMxWhcNMjYwMzI0MTQzMDMxWjAzMTEwLwYDVQQDEyg4OTk1MzJkMTE5YmY3
MjAxODY2MmY0NzM0ZDQxM2E2OWI2MTNjYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh+f+s+lpFf8Zts6Zyq6bUDvO7M8meEbJ1YrTjDCV5kZ7WJyO
2ESBV7miht+x/tzRi2hQU9Q2ONeMz2m4gc5Zg4TjqlJfqa+bc7hZj9fuMMD6Nx3o
o5+6l0dxZhIUXCkdhafkkd64vda/7JYbM9F7VbA/PoeaoU2kV5e8S1SQtP6y+OQw
e66NIL541kG4uhtbdGCFA6bYQtaO9DrV3y5gNg35RmrWY+R/hUszT402yHADr/gc
PEWlJVb5oStToUecYX68TH/cJBlIP0fLdPZAlq8VDo+OJdZNaps5I17++R05ajNU
ax1r7epb4lnUvsycrz5vBCnMGqJuONWT2r1FnQIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFPK0grEVnJn9Fs0eIt+iC/CP5EEEMB8GA1UdIwQYMBaAFED1pq8deoWUBDfa
k+3JbFuqTCfZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGExZmIy
YTk0OGRkMGFkZTYyZTMxNmIyZjkyMzFiMDAyZDQwMDg4ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGU4YzY4ZTktY2U1OC00NTgzLWJmYjEtNGE3MDU2
ZWQ4ZmVjLzg5OTUzMmQxMTliZjcyMDE4NjYyZjQ3MzRkNDEzYTY5YjYxM2NiNDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZThjNjhlOS1jZTU4LTQ1ODMtYmZiMS00YTcw
NTZlZDhmZWMvOGExZmIyYTk0OGRkMGFkZTYyZTMxNmIyZjkyMzFiMDAyZDQwMDg4
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAC2+DwMEAbs+bjANBAIAAjAHAwUAKAMc4DANBgkqhkiG9w0B
AQsFAAOCAQEAAjowyNU6ntpcx8g696GsDRUEu8C5dLrSKGqVThhwglDmTLo/49an
8+FFqbzqQpTtuM42gY5GK+ZzdHBIbql1Aj9fivBHO8JS2dbMx3bu49eCWJEGJg5i
KFwMi7mRWRam/Yb+w+wH9IgehGYGW4akjPQNfJjJrOKFzYXweBV/n4raYGWcj87X
UiUqGCBNiSpdJAs6YeyZP3ZlqScyIxH9gxPcRgdZVvzzMTDuaFz+isXglciZ3Gxl
HBT+EX4OJr/VfgK8tPSu6Zo2Y+Po2Ktw87F2OPhkiI9D+oP6yeuVFaH5RFJM7I6r
sndJzKsHSV/df242/FQvIipabh3fTA8WFg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-ams.rpki-client.org