Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/11992e529e3d0af812a49035e8e3e597447af9a4.roa
File:                     11992e529e3d0af812a49035e8e3e597447af9a4.roa (raw, json)
Hash identifier:          thZaYw49jf0opk6W8V6X70d7zwjdwsRwffCZuHloEFQ=
Subject key identifier:   9E:9A:3D:5A:5C:95:CA:25:D9:ED:F9:7C:F9:32:65:75:29:02:AB:5D
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       268462
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/11992e529e3d0af812a49035e8e3e597447af9a4.roa
Signing time:             Sun 16 Apr 2023 21:12:46 +0000
ROA not before:           Sat 15 Apr 2023 21:11:49 +0000
ROA not after:            Wed 16 Apr 2025 21:11:49 +0000
asID:                     264715
IP address blocks:        186.153.128.0/22 maxlen: 24
                          181.81.248.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2524258 (0x268462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 15 21:11:49 2023 GMT
            Not After : Apr 16 21:11:49 2025 GMT
        Subject: CN=11992e529e3d0af812a49035e8e3e597447af9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4a:40:bf:3b:5b:b9:d6:5f:3a:5d:fe:a6:02:
                    66:87:7a:bc:bd:21:ce:1e:b7:d9:32:ee:6a:76:be:
                    cc:47:9c:d9:20:d9:23:1b:7d:42:76:9b:81:bb:e6:
                    7c:a3:37:63:33:75:60:2b:05:0b:77:25:84:db:03:
                    f4:c2:32:cf:bb:a2:45:dd:54:5f:2c:b4:c1:b1:2c:
                    d9:de:cd:54:1c:9f:82:42:20:9c:65:53:52:ee:b0:
                    7e:78:db:67:83:31:cb:17:2d:89:6b:0c:cd:85:97:
                    e6:90:29:05:63:92:12:01:57:c9:5d:43:f7:3d:24:
                    a9:ed:96:36:90:09:20:4e:cb:07:6a:d3:a8:7f:eb:
                    76:a8:31:b9:82:44:2f:17:1f:0b:60:fe:39:08:06:
                    8a:8a:a6:d5:b3:82:af:ff:03:af:74:e4:6c:ca:55:
                    22:f9:ec:c9:5d:9c:c0:1a:e6:09:75:2f:6d:27:45:
                    91:d4:0e:28:ea:ed:09:04:ce:c7:7d:28:dd:61:9b:
                    fc:0b:24:34:ff:a6:ba:7e:b4:f9:9b:bf:74:5f:8f:
                    78:88:c8:56:ec:6a:f2:56:f4:e0:60:e5:7b:d8:3f:
                    ad:51:08:96:c3:19:c4:9a:4c:6a:5b:ce:51:ac:7f:
                    0e:98:8b:17:be:8b:33:e2:35:1d:38:9f:68:c1:10:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9A:3D:5A:5C:95:CA:25:D9:ED:F9:7C:F9:32:65:75:29:02:AB:5D
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/11992e529e3d0af812a49035e8e3e597447af9a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.81.248.0/22
                  186.153.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:47:66:04:58:5f:f5:38:7f:70:15:5a:80:a6:46:fa:74:aa:
         be:28:92:44:67:fe:bf:0c:1a:91:da:b0:38:87:40:85:25:54:
         e8:d9:be:7a:c1:91:23:ab:db:4c:b5:8d:90:e1:e2:38:b5:4b:
         14:7a:93:c6:bf:cc:b8:4d:16:bc:f0:62:93:ae:1a:44:2c:e7:
         3a:93:4e:84:b3:76:4e:ee:06:60:ce:05:dd:39:42:0e:9c:63:
         43:17:e8:5c:59:74:31:c6:12:02:a3:83:e0:d2:a9:39:01:3f:
         95:55:09:27:72:6c:fe:48:a1:20:d0:19:a1:43:5e:45:eb:94:
         6a:fe:96:e8:b6:ca:49:6f:f7:95:f6:98:5c:b9:1f:dd:11:e5:
         e0:4e:c4:69:76:8f:97:47:4c:da:31:c3:21:0a:cb:4c:ca:f9:
         4d:85:9a:ed:d3:1a:1a:78:33:79:9b:ae:6e:b4:bf:17:17:2e:
         31:f7:f4:ad:06:3b:5d:3a:66:4e:b3:06:42:32:4d:d9:5a:10:
         63:84:c1:ec:dd:ba:53:25:d1:86:4a:b9:92:71:a4:e7:72:3d:
         ba:50:f5:b6:d4:2e:22:7e:ed:0a:ec:93:e4:5d:c4:0d:4e:ae:
         69:6a:a0:25:06:7f:29:6e:a4:12:dc:fd:37:61:be:87:60:3c:
         f8:e1:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org