Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/2ca282360f46fd30319ceecc1d1c6bb17631361f.roa
File:                     2ca282360f46fd30319ceecc1d1c6bb17631361f.roa (raw, json)
Hash identifier:          2MkLXDfMXLkGzZG6nFxV4W5/6+MW78AWzwugpH9jaLE=
Subject key identifier:   2F:A7:43:E2:DB:23:4C:62:2F:0E:2E:DF:AC:66:64:9B:DD:42:F0:5F
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       266891
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/2ca282360f46fd30319ceecc1d1c6bb17631361f.roa
Signing time:             Sun 16 Apr 2023 21:12:29 +0000
ROA not before:           Sat 15 Apr 2023 21:11:49 +0000
ROA not after:            Wed 16 Apr 2025 21:11:49 +0000
asID:                     263198
IP address blocks:        190.225.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2517137 (0x266891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 15 21:11:49 2023 GMT
            Not After : Apr 16 21:11:49 2025 GMT
        Subject: CN=2ca282360f46fd30319ceecc1d1c6bb17631361f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:b7:6f:a1:40:16:cb:e5:56:e8:74:e9:a6:
                    4c:16:19:fa:e1:d0:d5:6a:22:2a:17:01:7a:e3:28:
                    0e:a5:e2:01:c0:4a:3a:c9:f1:10:8f:0c:92:f6:97:
                    14:21:9c:1b:74:1c:40:36:fd:ba:d8:d1:c5:e0:d5:
                    8d:43:0d:a0:17:98:38:18:f8:b4:72:3f:39:47:2d:
                    ec:f1:4f:f8:fd:c3:67:ca:93:9d:67:86:64:d0:20:
                    b0:0c:b5:b2:8a:5f:55:b9:8a:35:1d:2e:be:5e:fa:
                    91:6d:b7:1d:5b:d0:8a:ba:fa:3c:cb:57:33:7e:b3:
                    e6:82:49:3c:19:64:56:97:16:12:0e:82:37:0a:69:
                    e5:34:6d:93:19:68:57:89:75:a2:d7:02:a0:42:fb:
                    7f:62:b7:65:fd:7d:01:4d:41:d2:f1:57:06:23:29:
                    b2:25:5b:57:89:ec:5c:7b:f4:31:a5:2a:59:2a:9f:
                    bb:65:77:82:42:6f:fb:5e:dd:17:7f:f8:2c:c6:6c:
                    a6:59:38:1c:6a:08:56:92:5b:0b:c3:11:6b:94:95:
                    ea:26:fc:ab:61:f6:db:73:b9:63:ba:fc:80:02:6b:
                    75:7f:b4:c8:88:04:eb:41:ef:7d:14:2e:34:5a:70:
                    e9:f9:18:c7:5f:55:0b:dd:ac:d3:1b:65:3f:e6:30:
                    6d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A7:43:E2:DB:23:4C:62:2F:0E:2E:DF:AC:66:64:9B:DD:42:F0:5F
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/2ca282360f46fd30319ceecc1d1c6bb17631361f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.225.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:73:c5:74:c5:e7:f2:28:b1:09:81:15:27:a5:03:29:b9:6d:
         e3:ab:9b:16:98:20:97:e3:7e:23:78:a9:23:bd:a1:e1:3b:df:
         30:99:b3:3f:d0:e6:cd:ec:90:10:3b:ab:97:64:c4:76:ed:73:
         71:8d:04:68:f7:88:03:16:87:13:55:c5:47:33:da:b2:41:e3:
         fc:cd:51:c2:92:ff:72:7e:5b:e9:89:f3:df:b7:dc:02:5e:b6:
         e0:ba:86:65:67:30:2e:71:6d:de:f3:42:ff:5d:cd:f5:45:81:
         2b:7f:70:4e:05:ee:0e:b9:4f:34:4d:88:f5:6c:34:c4:d5:3d:
         fd:f1:13:2a:1f:ed:89:3d:e0:f6:60:46:b1:75:40:aa:23:3c:
         5c:f6:8c:83:1b:c9:c2:90:dd:85:c9:85:4d:ee:9c:32:9d:0f:
         c4:05:69:18:b1:c0:b7:28:4a:ed:c5:c8:a5:ae:65:df:b6:7c:
         a1:42:0c:c0:54:b8:e3:d2:c5:31:90:3a:2f:bf:19:72:2a:ef:
         18:ea:aa:9b:08:d8:2b:77:71:d5:ae:e5:04:71:3b:d3:ea:a0:
         8b:fa:bd:fe:b8:7b:d3:a6:a9:6d:21:78:36:3d:90:c2:02:0d:
         39:11:fe:42:b1:34:f0:e1:e0:12:43:13:fa:72:c2:01:65:ab:
         00:7a:e7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org