Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/e795e9529f32faeb90ea49b6872aa42d1d141b56.roa
File:                     e795e9529f32faeb90ea49b6872aa42d1d141b56.roa (raw, json)
Hash identifier:          xDCVHNF3lemFySxLzwuFNg75IvoaFMg03qIDnqacFto=
Subject key identifier:   DB:EE:A5:CF:A1:5D:78:48:53:EE:74:3B:C0:BA:FE:DD:C5:09:37:33
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       118830
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/e795e9529f32faeb90ea49b6872aa42d1d141b56.roa
Signing time:             Thu 15 Apr 2021 23:27:26 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27997
IP address blocks:        190.226.241.0/24 maxlen: 24
                          200.43.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1148976 (0x118830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=e795e9529f32faeb90ea49b6872aa42d1d141b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:b3:be:ae:6f:10:e6:8a:e7:56:f0:33:bc:
                    56:c9:ec:d2:b8:60:8c:7f:48:cd:24:42:34:02:7b:
                    e1:8a:18:99:7b:9c:6a:9e:03:2d:1f:1c:da:20:68:
                    0f:10:c3:f7:5a:f3:90:f2:18:50:5b:73:9f:a1:43:
                    66:c5:5a:b9:74:7e:ee:48:a8:1c:e7:b3:62:e7:31:
                    a6:d4:d0:14:51:0f:c5:b4:32:51:bf:64:00:11:e7:
                    77:87:72:a4:45:74:95:3f:fa:ab:ec:d4:42:ed:b1:
                    55:03:a5:72:d0:53:26:7d:7f:98:af:34:9b:ac:a4:
                    7d:b8:f4:55:f1:a2:5a:ee:22:34:6a:08:b2:2d:f0:
                    3b:c9:48:8c:64:99:80:80:d3:8c:1f:96:7e:17:72:
                    70:46:0b:f2:02:cd:4e:e2:b7:14:38:b9:7e:e8:7b:
                    bc:da:98:f3:57:f6:bc:48:5a:67:d0:56:40:df:52:
                    b0:2a:7d:17:6b:be:01:0e:24:bb:86:42:d5:20:fb:
                    13:30:19:f7:26:7b:c0:a0:20:3b:99:8c:b7:17:3d:
                    a4:db:00:2f:9a:5d:f4:d5:f8:60:13:87:6f:39:5c:
                    33:ba:bd:4a:4d:a6:d3:5c:0d:c5:59:1f:4e:e8:ae:
                    d1:b8:ea:98:41:db:a5:46:1d:75:1d:40:1a:c0:1c:
                    81:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EE:A5:CF:A1:5D:78:48:53:EE:74:3B:C0:BA:FE:DD:C5:09:37:33
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/e795e9529f32faeb90ea49b6872aa42d1d141b56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.226.241.0/24
                  200.43.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:c4:ef:6f:8a:3e:ec:3f:c6:cf:bb:f3:cc:4e:30:d6:bf:38:
         31:3b:51:4e:2e:97:6a:7f:ef:f2:bd:9c:7f:bf:77:c6:34:26:
         e9:b7:c6:98:30:37:38:fd:85:f7:51:06:ff:cd:66:37:96:d6:
         91:23:2f:0c:43:2d:86:6c:47:9d:6a:d1:ee:41:f2:45:ae:46:
         df:ac:da:c1:fd:e5:6d:61:e9:39:e1:1b:d2:87:9f:9f:76:73:
         ea:77:30:0b:61:65:e1:f1:08:8f:37:80:db:e7:03:77:ce:de:
         5e:5c:64:14:13:81:b7:0b:7a:82:85:df:b2:a6:a9:83:0b:2a:
         c1:78:12:b9:79:7a:37:91:d2:4e:0f:cb:f3:0b:33:68:17:5c:
         d7:89:f8:b6:17:b4:6d:b9:ca:64:f2:85:ca:db:ac:db:bd:0c:
         a6:51:97:79:17:fd:cd:04:3d:6b:20:1e:9f:c9:ce:3d:56:3d:
         3e:82:74:ab:7a:e9:6c:be:e1:72:b8:7f:ee:73:16:21:2d:c1:
         db:e0:18:35:dd:07:73:7a:19:4d:da:a7:36:16:57:51:14:35:
         d6:03:50:d0:8d:6d:6a:11:33:f6:99:17:40:f7:2b:a0:bf:83:
         70:cd:bf:c3:d8:37:82:f8:fd:2e:e4:f1:a2:00:2b:cf:f8:5a:
         eb:47:af:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org