Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/8fbc88374f93b4cb81d5580c709ac26017924cce.roa
File:                     8fbc88374f93b4cb81d5580c709ac26017924cce.roa (raw, json)
Hash identifier:          hxWPVhrgKt2s/TISorrrKS+E9muZtEKFU6/0woRfQwE=
Subject key identifier:   A1:58:83:1C:FD:F1:1E:C7:BC:2C:55:E7:F1:BE:96:A1:D9:D4:26:F7
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       119DE4
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/8fbc88374f93b4cb81d5580c709ac26017924cce.roa
Signing time:             Thu 15 Apr 2021 23:44:54 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265686
IP address blocks:        181.94.252.0/22 maxlen: 24
                          181.105.221.0/24 maxlen: 24
                          181.105.233.0/24 maxlen: 24
                          181.105.234.0/23 maxlen: 24
                          190.228.177.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154532 (0x119de4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=8fbc88374f93b4cb81d5580c709ac26017924cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:03:2f:45:14:fc:7b:51:90:a5:90:44:0f:83:
                    b2:51:3b:81:d4:84:72:59:fe:0b:74:f9:46:1a:f3:
                    72:f4:f6:7f:ae:61:73:0e:98:be:ef:81:b2:e8:b6:
                    41:50:a2:14:58:19:b0:27:33:0d:49:af:49:24:c1:
                    a0:08:fd:44:a6:dd:07:89:09:eb:a3:cf:15:c6:5a:
                    92:b2:c6:70:d6:f2:bc:45:28:ce:dd:1c:f6:31:b5:
                    46:40:0b:3a:3e:ed:a9:a8:cf:1b:f0:d8:29:fb:67:
                    9f:1e:be:01:4a:70:52:0c:df:af:b1:b2:c3:d2:27:
                    c4:1b:62:b1:65:8c:cf:b5:c4:11:a4:12:64:b6:bd:
                    86:d5:63:25:c2:55:7b:24:b1:1c:92:de:e3:e1:33:
                    6f:5b:79:db:99:53:43:9b:bb:21:75:c0:c4:85:f5:
                    77:da:f6:30:1f:8e:e2:51:1b:51:1e:79:68:e0:6f:
                    4a:15:da:78:ca:58:ac:5d:8b:c3:ea:3f:ee:1d:3b:
                    09:0a:9a:25:98:90:12:f7:f4:ad:a7:0a:42:11:06:
                    4b:2b:16:99:86:a3:f1:a9:6e:22:ca:b3:6a:c0:3d:
                    42:c9:0a:dc:db:01:38:27:db:8e:96:58:9a:83:aa:
                    6a:7e:2e:a5:e8:7e:58:40:38:0b:cc:cb:90:0c:91:
                    b3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:58:83:1C:FD:F1:1E:C7:BC:2C:55:E7:F1:BE:96:A1:D9:D4:26:F7
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/8fbc88374f93b4cb81d5580c709ac26017924cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.252.0/22
                  181.105.221.0/24
                  181.105.233.0-181.105.235.255
                  190.228.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:39:d5:be:88:53:50:75:19:7b:82:54:01:e1:70:d1:d9:bb:
         f2:7b:a9:d5:bc:b2:80:aa:b1:ee:8b:b4:e2:cb:74:4a:d8:3a:
         29:3e:90:ba:68:76:20:7e:7c:0f:6b:db:35:0d:85:cb:f3:d5:
         b7:97:72:62:b8:f4:8a:33:1f:b8:c6:75:60:75:c1:47:56:1c:
         59:9a:d2:c1:17:11:ea:46:9e:d9:fc:ac:48:31:7b:d0:01:40:
         b8:e3:79:50:03:d6:43:07:33:04:2f:cd:7c:95:ea:24:57:38:
         f0:b2:96:bc:55:7d:42:c0:a1:0b:87:eb:35:8e:5c:d2:6c:fb:
         38:1e:f2:ab:2c:70:5f:a3:f7:a4:4c:c3:fa:ff:f8:66:6b:11:
         23:8d:c7:40:16:f2:88:79:c7:e1:09:81:64:cf:4b:06:08:73:
         9f:fc:f6:5b:0a:77:24:d3:59:c1:40:0a:83:a8:35:5d:85:06:
         d1:9d:71:36:d0:61:9f:6a:5f:c9:7e:6e:b8:28:69:b8:e5:ff:
         b4:d5:30:74:6d:14:3d:e6:0c:5d:4a:95:61:2d:aa:61:91:db:
         7b:31:d9:e4:79:94:ab:1e:45:b9:94:7f:3e:ba:3d:94:41:96:
         4c:ad:70:27:a2:c6:80:f4:0a:b3:3e:fe:bd:47:61:a9:b0:8f:
         11:65:6f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org