Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/b365b498e8e08e2e7a0e6059e77b68211ca2454a.roa
File:                     b365b498e8e08e2e7a0e6059e77b68211ca2454a.roa (raw, json)
Hash identifier:          bD5sfgNDxPQUf9s3MUTqhrHINVWwBkRKB/ZhxUWY2Qo=
Subject key identifier:   DC:87:90:1E:8B:39:BC:6B:6F:34:84:40:DC:C8:8C:47:27:70:B9:D1
Certificate issuer:       /CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
Certificate serial:       19613B
Authority key identifier: 08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/b365b498e8e08e2e7a0e6059e77b68211ca2454a.roa
Signing time:             Wed 20 Jul 2022 18:43:25 +0000
ROA not before:           Wed 20 Jul 2022 03:00:00 +0000
ROA not after:            Sat 20 Jul 2024 03:00:00 +0000
asID:                     27717
IP address blocks:        186.167.11.0/24 maxlen: 24
                          186.167.12.0/23 maxlen: 24
                          186.167.70.0/23 maxlen: 24
                          186.167.72.0/22 maxlen: 24
                          186.167.76.0/23 maxlen: 24
                          186.167.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1663291 (0x19613b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
        Validity
            Not Before: Jul 20 03:00:00 2022 GMT
            Not After : Jul 20 03:00:00 2024 GMT
        Subject: CN=b365b498e8e08e2e7a0e6059e77b68211ca2454a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:e6:f8:90:2e:c7:6b:b0:02:a7:02:ef:e4:
                    8e:32:2f:08:68:02:70:92:f6:56:ba:ad:8d:fa:76:
                    cf:e4:7b:03:91:80:9d:a8:7f:61:b4:65:0b:06:3f:
                    1b:86:36:c9:3c:4f:f6:0e:54:2c:96:9f:c6:9e:68:
                    68:68:26:91:90:b5:d4:bd:7e:75:be:16:19:37:63:
                    a4:43:b6:11:a3:c4:32:4b:a0:79:18:6f:04:ef:a8:
                    13:2a:64:58:0a:d9:f2:71:b7:2c:ef:4e:d0:a4:07:
                    36:24:41:4b:b1:1e:3c:c7:cd:c3:65:78:ba:3a:ed:
                    7a:a6:5c:56:da:31:3e:32:3a:47:a9:18:b0:ac:f8:
                    68:40:be:7a:ab:de:29:7d:77:46:ca:e7:95:ee:9f:
                    53:40:1e:9a:86:c0:96:61:72:4f:97:1e:61:a0:f3:
                    90:68:82:85:53:36:48:59:27:ff:83:33:6c:33:b8:
                    7f:ca:8e:36:3b:c3:88:59:6f:49:07:73:cc:09:85:
                    6b:aa:ff:90:a8:aa:11:9a:c7:71:de:d7:0a:34:48:
                    ca:d1:33:1a:d9:a1:94:20:b7:9b:8f:54:94:41:9d:
                    a0:92:83:73:6d:6a:34:aa:00:2b:b3:a7:43:a8:97:
                    05:75:84:e5:81:eb:e1:d2:18:62:ba:97:eb:63:33:
                    e6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:87:90:1E:8B:39:BC:6B:6F:34:84:40:DC:C8:8C:47:27:70:B9:D1
            X509v3 Authority Key Identifier:
                keyid:08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/b365b498e8e08e2e7a0e6059e77b68211ca2454a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/96fbc1b8c542f9384f9a2004e66a61080248cdc6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.11.0-186.167.13.255
                  186.167.70.0-186.167.78.255

    Signature Algorithm: sha256WithRSAEncryption
         66:46:d3:33:e5:12:74:00:53:e4:4c:bc:5f:de:b4:8b:60:6a:
         a3:4c:e8:e3:1c:87:91:64:a3:a3:ca:ed:b1:7a:62:bb:c3:ab:
         8d:86:ab:13:49:4d:0e:e4:1f:2c:ff:ee:50:98:ec:2d:44:a2:
         5e:51:82:44:f8:3e:dc:ab:ca:b9:9a:67:b6:e5:d0:cb:90:fa:
         76:ac:59:61:e5:e5:0f:9d:3b:ff:9f:e2:af:63:56:8e:27:80:
         25:12:c8:d2:1c:cd:dc:7b:05:fa:72:7a:a6:dd:8d:22:3b:40:
         da:3d:39:c7:27:d9:4b:00:47:35:78:1a:a9:08:a2:4f:ca:b1:
         bd:b0:28:cc:01:2f:6c:14:5c:2b:aa:cb:25:5c:a3:ed:30:53:
         58:dc:b6:d5:7a:b9:d6:2e:77:8b:10:81:a8:3c:f8:80:25:82:
         bc:4d:e3:94:7b:82:e5:ea:2b:35:fe:14:d6:44:4b:e3:b0:7d:
         6c:79:1f:4a:21:d6:9b:26:1e:63:3e:fb:4e:dc:1d:69:4c:bb:
         cc:46:b3:57:8c:81:cd:bc:5b:cf:6f:c0:1f:c6:b7:09:ac:37:
         cd:35:ef:1e:fa:2d:10:69:91:15:b3:bf:0c:b2:a7:55:78:38:
         da:92:4f:25:23:7b:eb:20:61:5e:bf:ec:16:a1:28:af:b1:fc:
         35:27:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org