Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/667d2486c7007cc57b813cb64889a6f0d36b37e2.roa
File:                     667d2486c7007cc57b813cb64889a6f0d36b37e2.roa (raw, json)
Hash identifier:          +kbtR/1LNEZLvV8Ytqc2ezdawtqC+t5CUO5t/jwKohI=
Subject key identifier:   26:E7:6A:18:E8:58:2E:8D:C8:C0:B6:13:97:8A:D8:C2:B0:80:67:41
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       267694
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/667d2486c7007cc57b813cb64889a6f0d36b37e2.roa
Signing time:             Sun 16 Apr 2023 21:12:40 +0000
ROA not before:           Sat 15 Apr 2023 21:11:49 +0000
ROA not after:            Wed 16 Apr 2025 21:11:49 +0000
asID:                     27997
IP address blocks:        200.43.55.0/24 maxlen: 24
                          190.226.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2520724 (0x267694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 15 21:11:49 2023 GMT
            Not After : Apr 16 21:11:49 2025 GMT
        Subject: CN=667d2486c7007cc57b813cb64889a6f0d36b37e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:06:87:b2:5f:ea:6f:5e:f1:41:0b:d4:72:89:
                    6c:6f:54:c0:b3:05:9b:70:d4:dc:b0:26:98:ca:86:
                    cc:65:51:22:19:63:cb:ef:3c:18:dc:f0:8c:91:37:
                    68:e9:4b:16:f9:53:06:05:04:1a:3e:7b:d4:cd:52:
                    79:63:d5:27:97:fc:82:a0:a1:3b:18:25:26:a8:c1:
                    4f:84:c7:a3:75:3f:cc:d0:da:22:c8:9a:f4:22:e1:
                    d6:a8:ca:ba:dc:92:0f:cc:24:6f:5e:9a:17:46:bd:
                    92:23:2d:24:69:38:43:a1:15:8a:d5:9e:24:1c:88:
                    da:ce:c7:91:46:96:7a:45:c3:2c:3f:4c:c1:09:d9:
                    12:62:16:52:47:b9:28:ad:6b:19:9f:2b:31:90:a5:
                    22:01:d5:a5:a7:1a:0d:a5:11:81:9f:15:bc:a8:fa:
                    13:08:c3:a9:61:a9:ec:3e:f2:02:f7:81:f0:50:98:
                    4c:06:aa:d1:38:b3:2d:6f:a9:37:35:ed:e8:1b:9e:
                    b3:68:9f:10:1b:e0:38:5e:cd:6c:7a:c0:72:f5:d7:
                    ad:d2:0a:d4:16:34:ca:47:a8:cb:c9:ee:65:8e:25:
                    f8:91:44:f0:f9:a3:01:88:fa:bb:4d:eb:72:ec:e7:
                    13:85:ae:79:ba:20:59:08:9e:a3:d4:17:bd:f7:e4:
                    3d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E7:6A:18:E8:58:2E:8D:C8:C0:B6:13:97:8A:D8:C2:B0:80:67:41
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/667d2486c7007cc57b813cb64889a6f0d36b37e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.226.241.0/24
                  200.43.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:f4:0d:07:06:e7:4b:a6:f5:09:75:d2:eb:3a:90:e4:5d:12:
         66:a5:33:a9:3e:e1:e1:97:b5:d6:08:b2:ef:13:72:ed:79:62:
         d8:20:6a:9c:6e:06:c1:a3:d2:78:03:88:99:55:39:ec:3d:31:
         4e:aa:4c:9b:91:13:1f:44:b3:bb:7c:3d:41:89:a4:5f:d2:b4:
         92:a8:81:c3:ed:7d:63:45:9a:df:38:9a:a9:f0:a8:52:b0:80:
         75:30:0d:7e:cb:7b:5d:f1:d9:b3:c5:e8:10:cb:fe:e3:9a:59:
         dc:5f:81:f1:ad:b3:c0:a2:2d:ce:23:b6:19:73:69:8d:68:f3:
         84:a3:37:39:7c:80:f8:07:e1:e9:18:7a:35:2e:53:89:5f:0b:
         07:87:0e:f4:6f:e3:5b:41:ee:a4:bb:f7:28:08:7c:9d:32:35:
         7b:8d:1b:7d:cc:83:1e:2f:3c:5f:80:86:5c:b6:65:4a:14:6a:
         3f:17:8a:79:d6:26:f1:f1:79:bb:0f:43:ad:87:17:6f:95:d4:
         57:98:5d:8d:d4:7f:97:30:55:45:9f:08:7b:10:ce:0c:6c:e1:
         65:68:c3:24:78:0f:ea:1a:e6:3e:dc:07:00:f8:eb:93:d2:3f:
         c0:d2:89:ce:88:b7:97:7c:a4:1e:f5:9b:b0:08:ed:07:7d:b1:
         f3:27:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org