Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/38254e9fe1a1825dd4b34102357e6dff1ae2632c.roa
File:                     38254e9fe1a1825dd4b34102357e6dff1ae2632c.roa (raw, json)
Hash identifier:          yHVJTDviZgPvD5IbsrRKQixYM3mAVpUfaSSf1EMfEPM=
Subject key identifier:   64:25:A9:81:CD:E6:02:6B:7C:80:6F:C2:81:1E:21:00:E3:80:2B:76
Certificate issuer:       /CN=0bba00c9e212b68aac90a0d26d072a417cd9bbab
Certificate serial:       0FE9B0
Authority key identifier: BD:89:59:86:22:5C:5F:7F:D7:F1:AB:31:56:D0:93:42:4D:9B:52:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0bba00c9e212b68aac90a0d26d072a417cd9bbab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/38254e9fe1a1825dd4b34102357e6dff1ae2632c.roa
Signing time:             Wed 21 Jul 2021 18:22:44 +0000
ROA not before:           Wed 21 Jul 2021 03:00:00 +0000
ROA not after:            Fri 21 Jul 2023 03:00:00 +0000
asID:                     52468
IP address blocks:        190.5.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042864 (0xfe9b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bba00c9e212b68aac90a0d26d072a417cd9bbab
        Validity
            Not Before: Jul 21 03:00:00 2021 GMT
            Not After : Jul 21 03:00:00 2023 GMT
        Subject: CN=38254e9fe1a1825dd4b34102357e6dff1ae2632c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9d:46:ec:9a:bd:88:bb:f1:82:cf:41:fe:17:
                    a2:a8:a9:8a:6c:57:93:1d:e2:d9:3c:ac:11:f5:a7:
                    0c:53:8a:87:cf:4d:ff:78:c4:46:a8:ef:fe:01:e0:
                    89:94:2d:45:6a:9d:dc:2c:1a:ef:02:f3:ef:5a:f8:
                    53:be:1a:96:7b:fb:73:4e:9a:50:76:7d:94:a7:8b:
                    8e:f4:52:a5:38:e4:eb:55:cf:d0:b8:42:59:f2:00:
                    8b:77:39:39:f2:2a:80:ba:4f:3a:10:48:3e:fb:95:
                    a9:60:fa:7d:c4:26:bd:99:5a:2f:a5:ae:32:9a:b2:
                    36:8a:62:76:c5:41:2f:a5:8b:f8:22:71:c8:94:96:
                    92:b0:17:04:9a:98:ac:f7:ad:ea:01:3c:e3:13:bd:
                    c5:16:96:48:f2:98:aa:96:dc:86:a2:55:21:a7:62:
                    d4:8b:4e:02:4d:ed:39:a0:dc:9d:64:2a:04:bc:af:
                    d1:e0:f9:14:92:11:03:e7:31:05:48:53:39:a7:fa:
                    68:d9:24:a3:fa:49:48:60:4a:2c:e6:d7:fa:6d:ac:
                    99:57:0c:a7:bb:2c:98:f3:d2:2b:c6:18:b5:f9:75:
                    79:42:68:af:84:02:e9:2d:9d:62:fc:37:7b:2e:0d:
                    1c:d8:05:ef:97:a0:38:4c:2d:db:aa:3e:e2:61:66:
                    3b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:25:A9:81:CD:E6:02:6B:7C:80:6F:C2:81:1E:21:00:E3:80:2B:76
            X509v3 Authority Key Identifier:
                keyid:BD:89:59:86:22:5C:5F:7F:D7:F1:AB:31:56:D0:93:42:4D:9B:52:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0bba00c9e212b68aac90a0d26d072a417cd9bbab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/38254e9fe1a1825dd4b34102357e6dff1ae2632c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/0bba00c9e212b68aac90a0d26d072a417cd9bbab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:e3:4d:38:db:c7:5b:89:b2:db:50:3e:9d:7a:ca:4e:92:73:
         52:68:1c:ef:de:90:d2:81:f7:80:9b:a1:ba:4d:c4:a0:95:2f:
         22:fc:39:cc:a8:58:44:79:62:2c:cf:16:74:45:12:3e:02:ca:
         9d:84:07:b6:ea:45:2f:19:df:e7:c6:9c:cc:f5:29:d8:73:3b:
         ad:c8:86:56:e8:fe:3f:f2:a0:8a:14:e8:ff:0d:43:9d:1b:dc:
         fb:4c:3b:f5:4c:02:29:02:3d:c5:fd:a4:6c:ed:24:ec:02:f1:
         da:49:ff:d1:d7:d1:cc:67:cc:87:e1:80:75:c3:48:d7:d5:1a:
         31:af:c6:0d:18:f0:a6:90:22:76:34:24:31:a2:a3:e9:a6:81:
         a4:64:33:14:0b:34:17:69:8f:87:fa:bf:22:12:2a:83:6e:40:
         e2:43:31:59:50:78:1a:34:88:71:6f:7b:8f:c0:52:89:0e:36:
         13:0c:05:e5:87:c1:38:e0:a7:65:e4:15:ee:6a:5f:24:22:03:
         05:53:5e:a7:e0:07:d6:c6:22:8d:80:f5:ed:71:e8:96:7d:78:
         be:50:22:00:a6:71:57:72:b9:1f:44:c3:25:af:55:1d:8f:b8:
         cf:d4:e0:7e:91:c4:13:a4:4b:07:84:60:db:51:0b:30:96:d2:
         48:c6:b9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org