Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/751a28cb200e8738caf4e6a906984708dd3763c5.roa
File:                     751a28cb200e8738caf4e6a906984708dd3763c5.roa (raw, json)
Hash identifier:          0LtaqEeluSc+WsPJ7txJhbceTRac0sDM6nFrI74Qwcs=
Subject key identifier:   CF:09:F0:76:82:F5:8F:22:E0:07:28:3D:C5:3F:C5:7A:21:62:14:5C
Certificate issuer:       /CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Certificate serial:       10EC41
Authority key identifier: A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/751a28cb200e8738caf4e6a906984708dd3763c5.roa
Signing time:             Thu 12 Aug 2021 21:36:35 +0000
ROA not before:           Thu 12 Aug 2021 03:00:00 +0000
ROA not after:            Sat 12 Aug 2023 03:00:00 +0000
asID:                     262206
IP address blocks:        186.189.217.0/24 maxlen: 24
                          190.106.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109057 (0x10ec41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
        Validity
            Not Before: Aug 12 03:00:00 2021 GMT
            Not After : Aug 12 03:00:00 2023 GMT
        Subject: CN=751a28cb200e8738caf4e6a906984708dd3763c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6a:14:bb:7d:05:09:b9:41:08:b1:8b:e3:30:
                    63:9b:2a:20:66:d8:96:09:f2:21:3c:df:95:4f:0d:
                    27:bd:6c:38:03:d3:a8:2d:a1:15:de:5a:01:f3:3d:
                    ea:85:ec:2f:d1:bc:4e:ce:37:a3:17:b3:02:b7:0a:
                    be:60:ce:a2:e6:ea:7b:76:ad:2f:cc:e4:3c:19:e4:
                    6d:fc:94:ca:d6:e5:1c:43:47:86:2f:a9:ad:90:e5:
                    53:e5:67:d4:4f:a5:76:01:ed:f1:e7:9f:64:55:cc:
                    f2:2a:26:c0:ab:7e:89:92:c0:20:a0:6a:dd:00:be:
                    aa:94:4e:af:5e:b0:b9:ee:17:fb:3b:73:d9:43:71:
                    9e:28:c2:b7:85:9f:00:aa:bc:b7:bc:de:69:25:25:
                    52:5b:ef:d5:c7:db:0d:ad:cb:80:3d:14:03:cd:cc:
                    04:72:f0:9d:76:fb:03:b1:37:f5:50:2f:2d:48:90:
                    91:85:13:8b:97:8b:3f:9f:63:93:03:55:f2:e8:95:
                    35:80:f8:f5:99:49:7a:8a:35:69:06:59:d3:ab:8a:
                    7e:9a:c0:59:64:22:3f:ba:16:4b:1c:f8:db:51:17:
                    2e:bb:8c:f6:d7:6d:4d:74:d8:89:a3:93:25:b8:58:
                    4c:af:cb:bf:23:9f:9a:82:d1:0a:96:d5:df:29:3b:
                    1c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:09:F0:76:82:F5:8F:22:E0:07:28:3D:C5:3F:C5:7A:21:62:14:5C
            X509v3 Authority Key Identifier:
                keyid:A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/751a28cb200e8738caf4e6a906984708dd3763c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.217.0/24
                  190.106.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:2f:50:fd:72:c4:86:d8:24:e1:78:a0:c5:c2:5b:c4:9f:21:
         77:47:c5:18:d0:e2:1a:f3:aa:c9:4d:c1:dd:00:29:c6:8b:26:
         4f:0a:af:2f:43:f6:1f:8f:53:29:98:80:cc:59:49:62:b6:fc:
         e1:e2:cc:1b:d4:38:e9:b0:f4:78:39:70:a6:e3:41:4e:f5:ac:
         5b:e2:db:59:08:af:15:96:bd:43:0c:00:06:d4:d9:a8:56:b8:
         d8:b6:0d:ca:bd:63:01:b9:05:bc:28:7e:a6:55:8c:0f:45:f5:
         93:ec:29:c7:9c:2f:d2:95:e8:7a:25:b6:ca:b7:cb:9f:07:0c:
         b2:61:08:46:93:59:32:1b:84:33:b8:4b:cc:e9:ae:ce:5e:16:
         60:af:3e:61:94:d2:23:6a:36:11:ea:c0:28:57:b8:e6:82:8e:
         19:c9:f6:3e:23:50:cb:da:e0:55:3c:68:08:b2:40:56:6d:56:
         13:6d:4a:4b:f1:36:dd:43:4b:37:95:35:cb:40:80:c5:7c:d7:
         c4:a1:d0:40:93:06:66:eb:13:72:44:73:ac:b4:5b:3d:e2:bc:
         3e:bf:a3:cf:9a:d3:86:78:18:4c:ed:1e:d1:f6:c2:ec:40:d3:
         b4:40:17:1c:bd:22:91:95:26:9f:46:01:8e:25:8e:34:30:29:
         7e:51:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-ams.rpki-client.org