Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b0838f49f1fdf91235288c0a28645dbd09508bc0.roa
File:                     b0838f49f1fdf91235288c0a28645dbd09508bc0.roa (raw, json)
Hash identifier:          uLzuuy4V5BpfoItarxlfMiEXQ5BwiZ6Z4ic+fYwzIng=
Subject key identifier:   D8:C1:15:8F:0F:87:17:31:80:D5:36:AE:7A:FE:85:A3:F0:8A:A9:6C
Certificate issuer:       /CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Certificate serial:       10E9DB
Authority key identifier: A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b0838f49f1fdf91235288c0a28645dbd09508bc0.roa
Signing time:             Thu 12 Aug 2021 21:35:34 +0000
ROA not before:           Thu 12 Aug 2021 03:00:00 +0000
ROA not after:            Sat 12 Aug 2023 03:00:00 +0000
asID:                     52362
IP address blocks:        181.174.82.0/24 maxlen: 24
                          181.174.104.0/22 maxlen: 24
                          190.106.209.0/24 maxlen: 24
                          190.106.210.0/24 maxlen: 24
                          190.106.218.0/23 maxlen: 24
                          190.106.220.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108443 (0x10e9db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
        Validity
            Not Before: Aug 12 03:00:00 2021 GMT
            Not After : Aug 12 03:00:00 2023 GMT
        Subject: CN=b0838f49f1fdf91235288c0a28645dbd09508bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5a:c6:7c:8a:25:1f:45:38:ec:ec:fd:d6:cc:
                    dd:4e:c5:1a:6d:54:f2:12:56:ef:bd:db:92:47:34:
                    13:30:82:bf:46:bc:67:fb:2a:f7:e0:24:e2:22:60:
                    de:9f:5a:e4:0c:ed:a6:64:b6:98:c1:9d:21:ff:a8:
                    f5:8e:38:62:2a:ac:b3:38:9a:2e:a5:76:5b:b7:02:
                    ae:56:94:24:c0:32:de:92:de:fd:80:78:59:de:6a:
                    7d:f3:95:90:c2:00:f5:01:34:72:e7:72:89:5f:28:
                    ac:f0:f7:c1:00:4b:5e:2f:94:43:fe:e6:a3:69:b5:
                    40:9e:a8:d3:66:86:52:21:ee:ab:e9:75:41:7c:ba:
                    cc:d2:c5:dd:9c:e6:d1:e1:77:3e:38:f1:30:c6:d1:
                    f1:a4:7a:7c:ce:af:2e:31:6a:51:d0:53:92:16:a9:
                    c2:5b:96:aa:ea:fa:d5:6c:51:38:fe:5c:e2:95:28:
                    3c:7e:3f:2c:68:95:4d:8f:bc:8e:56:92:97:ed:7d:
                    c1:e2:2c:55:04:ba:9e:2e:e0:52:3d:82:99:62:57:
                    e2:bc:0b:8c:95:b5:37:60:a0:e3:69:20:37:a3:92:
                    c7:97:4b:f8:56:75:c9:5f:c8:60:62:69:9f:f5:f5:
                    22:1d:56:f8:ff:bb:dc:39:32:53:e5:3f:90:4a:a0:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C1:15:8F:0F:87:17:31:80:D5:36:AE:7A:FE:85:A3:F0:8A:A9:6C
            X509v3 Authority Key Identifier:
                keyid:A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b0838f49f1fdf91235288c0a28645dbd09508bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.82.0/24
                  181.174.104.0/22
                  190.106.209.0-190.106.210.255
                  190.106.218.0-190.106.223.255

    Signature Algorithm: sha256WithRSAEncryption
         84:26:06:16:cd:3f:79:0b:50:d0:ac:66:70:6d:ff:6f:02:89:
         61:bb:a3:65:02:34:50:b0:6b:e2:aa:56:42:4f:aa:d9:b1:b2:
         3e:d5:f8:fe:f8:45:6d:f9:40:8c:26:15:17:a0:b4:69:28:e7:
         f9:f2:2e:7f:51:92:17:ee:30:3d:fa:9c:46:71:94:5e:58:95:
         93:7c:47:69:d5:70:ab:e0:56:71:71:72:0e:ab:4a:14:fe:69:
         36:9e:10:2a:ce:67:a1:a9:b9:28:08:be:45:c0:bb:7b:49:85:
         5a:d2:72:16:eb:ec:0b:f0:7c:4b:56:eb:5a:4b:57:9c:eb:47:
         60:69:07:35:97:e6:4d:5f:8d:55:06:0d:ed:72:5e:56:28:07:
         30:b1:7c:ae:24:10:0d:06:43:c2:ca:33:c0:cf:62:e9:48:ed:
         91:61:36:32:99:49:8b:83:e1:6b:c6:c0:83:12:56:a0:0f:ed:
         f4:ee:d4:e2:e1:69:0b:1a:48:9d:ca:47:ef:0c:c3:70:64:f5:
         2e:3a:91:8e:10:98:dc:31:e5:c7:d5:bd:90:e0:bc:dd:fc:4d:
         0b:98:e8:cf:a4:f0:77:65:63:c9:e7:14:e8:a6:ff:b9:ca:ab:
         85:1f:be:42:b9:57:79:ea:76:be:50:95:14:1f:65:1d:fd:b8:
         a1:2d:5b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-ams.rpki-client.org