Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/82d4539a12752095c0d02051033b7662b777e6b3.roa
File:                     82d4539a12752095c0d02051033b7662b777e6b3.roa (raw, json)
Hash identifier:          iCnyAt33IlMMAAO/4yFha4ZxjwxoOsVYTs0J0EMqBJY=
Subject key identifier:   F3:77:4B:2C:5B:A6:A5:65:E6:B1:35:66:9B:F6:13:6C:7C:8C:08:3B
Certificate issuer:       /CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
Certificate serial:       06D592
Authority key identifier: 9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/82d4539a12752095c0d02051033b7662b777e6b3.roa
Signing time:             Wed 24 Mar 2021 14:41:38 +0000
ROA not before:           Wed 24 Mar 2021 14:41:38 +0000
ROA not after:            Tue 24 Mar 2026 14:41:38 +0000
asID:                     264637
IP address blocks:        190.113.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447890 (0x6d592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
        Validity
            Not Before: Mar 24 14:41:38 2021 GMT
            Not After : Mar 24 14:41:38 2026 GMT
        Subject: CN=82d4539a12752095c0d02051033b7662b777e6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:54:f2:19:79:0e:64:88:6a:ab:4f:91:8a:13:
                    8c:5c:d0:bd:98:39:86:7a:bd:a5:f1:05:89:c0:b1:
                    78:3e:fe:13:a0:32:71:33:86:fa:95:1e:69:a3:d5:
                    f7:6d:db:32:d7:f1:4b:90:46:7c:be:63:b0:02:c6:
                    ed:cb:43:41:bc:36:53:08:c2:2f:a5:82:2e:06:88:
                    6c:93:42:af:0e:c2:8e:35:90:c6:a0:cc:f2:97:5f:
                    99:e9:c3:11:f1:99:3f:7d:61:aa:eb:e8:61:a6:a6:
                    01:e6:70:ee:b1:6e:66:2d:57:9d:1d:cf:c6:03:dc:
                    dc:20:9d:0f:f6:a5:78:52:a5:a3:97:e7:39:b0:67:
                    86:69:35:7c:58:ba:9e:c0:ae:13:c5:ba:30:36:0d:
                    e6:42:02:9d:0e:a3:7f:24:56:2a:f7:c4:53:6e:c5:
                    da:9e:a1:3f:b3:1c:97:2c:0a:80:ed:8d:19:d6:22:
                    4d:4a:08:94:82:7c:9b:e6:59:c7:3b:87:93:b4:13:
                    10:ef:32:93:34:b5:1c:10:20:13:c0:2e:ed:69:26:
                    64:35:31:e0:16:75:67:61:12:67:2a:74:ba:2a:a0:
                    42:66:1f:23:72:92:bf:6e:31:f9:3e:82:09:47:05:
                    a7:4b:b5:31:2b:41:78:8a:1a:97:ae:9d:3d:08:00:
                    ac:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:77:4B:2C:5B:A6:A5:65:E6:B1:35:66:9B:F6:13:6C:7C:8C:08:3B
            X509v3 Authority Key Identifier:
                keyid:9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/82d4539a12752095c0d02051033b7662b777e6b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/b4cd293c91ec205157dbfa9b56d9881f8f695255.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:10:fa:0c:78:40:09:d1:df:fb:75:2f:e8:9e:76:35:17:a5:
         34:cd:62:ae:85:10:35:90:b0:b5:15:49:11:68:c8:da:6b:95:
         16:44:22:21:69:72:cf:ea:78:cf:d7:9e:d9:d6:a1:5f:d5:ec:
         3f:fe:bd:6b:f7:dd:4d:8c:90:03:00:96:d5:c6:49:5b:02:f2:
         0f:42:e8:6e:b2:df:1d:79:82:f1:91:42:85:2a:14:ec:26:c6:
         31:23:56:75:3b:5f:e4:b4:1c:57:41:1b:39:2f:36:c5:2a:6d:
         a4:21:c9:c3:ed:bf:7e:30:ce:9b:11:25:c0:f2:26:a1:f6:8d:
         4e:46:3a:53:f8:7e:41:b9:68:42:fb:b7:50:71:39:04:f1:99:
         6a:98:10:9b:ca:a2:61:b8:38:6b:30:a6:6f:28:64:d6:af:7b:
         b3:42:d6:1f:bf:39:e0:cc:76:d5:82:c6:b4:89:cc:f7:f2:c9:
         57:2a:d9:c4:f1:5b:ef:3c:7a:38:06:9a:4d:32:22:2e:7e:80:
         7d:91:2b:db:83:24:62:f6:00:65:b7:38:b7:9c:2d:68:2a:c6:
         5f:c5:62:05:30:bf:c8:f2:c1:3b:64:b6:60:03:74:91:80:86:
         f7:86:ac:b9:0d:2c:c9:b2:5c:1d:47:51:30:f7:cd:de:00:5d:
         42:30:4a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 01:22:25 2023 by rpki-client on console-fra.rpki-client.org