Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7cea726824ae41a562351aef1d6e45ca345868ff.roa
File:                     7cea726824ae41a562351aef1d6e45ca345868ff.roa (raw, json)
Hash identifier:          p0N8zGNvh2I9kSIdV9VPP5Dx5cHRVKzrpqj4gnImib4=
Subject key identifier:   A6:60:F1:0F:4B:48:BF:C1:24:CF:36:4B:38:F7:61:15:F0:79:01:C9
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       11E4FB
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7cea726824ae41a562351aef1d6e45ca345868ff.roa
Signing time:             Fri 16 Apr 2021 01:54:30 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265663
IP address blocks:        181.14.239.0/24 maxlen: 24
                          190.227.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172731 (0x11e4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=7cea726824ae41a562351aef1d6e45ca345868ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:95:81:88:b0:f0:2c:4f:75:04:29:c2:62:38:
                    ea:ab:99:e2:dc:a7:4a:03:3b:9b:c0:bd:98:74:cd:
                    0c:40:3a:3e:1f:db:ea:61:18:05:a8:d0:cb:df:52:
                    e2:c3:0e:b8:f0:b7:f4:14:e2:f1:48:b9:a4:e7:44:
                    5d:87:b4:3c:d5:4c:33:4f:dd:1d:8f:a8:48:b8:90:
                    dc:65:cc:5c:79:41:a2:73:bf:d7:a8:90:b4:e7:0d:
                    ec:9b:63:ec:22:91:b9:97:a0:68:6c:60:a5:66:a1:
                    10:17:c3:03:31:2c:81:76:b3:e7:9e:58:3c:7b:75:
                    5a:1b:ee:3e:2d:32:be:69:a2:e4:fc:d9:a4:07:d3:
                    4c:2a:26:e9:51:2d:3b:74:6e:57:f0:22:10:d3:84:
                    ae:c6:1a:43:7f:4b:97:b0:f7:23:1e:52:df:eb:b1:
                    6a:48:0e:e8:6b:2c:f2:af:0c:fb:28:8a:bf:a6:d3:
                    c5:6d:1b:6f:02:9a:a0:fe:6d:73:bd:68:21:fc:be:
                    31:7b:7d:28:9a:ce:8a:01:e4:9d:0a:f9:19:6b:31:
                    6e:53:36:36:30:c1:08:6f:74:a5:80:6d:53:c7:23:
                    b1:0f:f4:f4:0a:d3:8f:5c:d1:a0:2f:15:7b:36:e8:
                    6a:7b:87:88:5e:04:89:d9:da:50:3c:f5:6f:df:52:
                    14:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:60:F1:0F:4B:48:BF:C1:24:CF:36:4B:38:F7:61:15:F0:79:01:C9
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7cea726824ae41a562351aef1d6e45ca345868ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.14.239.0/24
                  190.227.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:3a:2c:04:be:b9:29:67:c3:a7:ae:65:ae:da:61:6f:94:
         0f:d5:a9:54:47:60:3a:34:63:ab:bc:63:06:6e:6b:1b:81:49:
         9e:e3:e9:6d:e1:df:e3:4b:14:5e:32:0e:42:03:d7:3c:dc:09:
         bd:45:29:aa:11:fd:05:f1:3b:4e:70:0b:08:0d:ab:a7:33:8e:
         6e:b1:f6:09:7b:31:f5:04:53:a9:b9:08:c2:08:f7:c2:1b:9e:
         ef:60:fa:9a:9f:0a:6b:c1:0c:b4:3d:7e:9b:10:3b:10:8c:63:
         22:b4:0e:40:3d:40:e1:95:81:af:e1:17:7b:5d:f4:3f:bd:25:
         6a:97:14:86:92:e7:fc:49:aa:29:67:5e:b6:23:0d:66:9b:c2:
         77:f6:be:15:85:53:a1:ad:c8:45:be:1e:c5:81:83:37:b1:e1:
         de:e6:92:f8:75:de:e7:3c:d6:15:44:63:04:55:5a:9f:11:46:
         36:e6:c2:52:d9:c3:01:a0:bd:bd:7c:59:64:5b:21:d8:f0:95:
         7f:73:e1:51:24:f5:d6:0c:9e:e5:75:54:5a:63:d5:6b:3d:cc:
         4d:27:cf:bb:49:05:52:2a:95:73:ba:b7:03:62:28:cb:26:3e:
         4d:f6:e2:52:a4:06:4d:ba:3f:95:ef:17:a1:09:9a:17:23:4f:
         36:1d:f9:44
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDEeT7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
M2E0NDRkMDYxZmM0ZDkxNGRjNTZkODAzMWE5YzQ1NzRjYTU3YWQwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg3Y2VhNzI2ODI0YWU0
MWE1NjIzNTFhZWYxZDZlNDVjYTM0NTg2OGZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg5WBiLDwLE91BCnCYjjqq5ni3KdKAzubwL2YdM0MQDo+H9vq
YRgFqNDL31Liww648Lf0FOLxSLmk50Rdh7Q81UwzT90dj6hIuJDcZcxceUGic7/X
qJC05w3sm2PsIpG5l6BobGClZqEQF8MDMSyBdrPnnlg8e3VaG+4+LTK+aaLk/Nmk
B9NMKibpUS07dG5X8CIQ04SuxhpDf0uXsPcjHlLf67FqSA7oayzyrwz7KIq/ptPF
bRtvApqg/m1zvWgh/L4xe30oms6KAeSdCvkZazFuUzY2MMEIb3SlgG1TxyOxD/T0
CtOPXNGgLxV7Nuhqe4eIXgSJ2dpQPPVv31IUNQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFKZg8Q9LSL/BJM82Szj3YRXweQHJMB8GA1UdIwQYMBaAFMmcjKrH/3v04XrK
8I/d1uVu/M2tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkzYTQ0
NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzdjZWE3MjY4MjRhZTQxYTU2MjM1MWFlZjFkNmU0NWNhMzQ1ODY4ZmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZDkzYTQ0NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEALUO7wMEAL7joDANBgkqhkiG9w0BAQsFAAOCAQEACiA6LAS+
uSlnw6euZa7aYW+UD9WpVEdgOjRjq7xjBm5rG4FJnuPpbeHf40sUXjIOQgPXPNwJ
vUUpqhH9BfE7TnALCA2rpzOObrH2CXsx9QRTqbkIwgj3whue72D6mp8Ka8EMtD1+
mxA7EIxjIrQOQD1A4ZWBr+EXe130P70lapcUhpLn/EmqKWdetiMNZpvCd/a+FYVT
oa3IRb4exYGDN7Hh3uaS+HXe5zzWFURjBFVanxFGNubCUtnDAaC9vXxZZFsh2PCV
f3PhUST11gye5XVUWmPVaz3MTSfPu0kFUiqVc7q3A2IoyyY+TfbiUqQGTbo/le8X
oQmaFyNPNh35RA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org