Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/a43d80f3d10728015e08a60935896d8c1fa30e9c.roa
File:                     a43d80f3d10728015e08a60935896d8c1fa30e9c.roa (raw, json)
Hash identifier:          BV0V/NhGyWrkFWwmP1YczuYrDnnQ2HdfdqHdaW+jx4Y=
Subject key identifier:   30:AA:D4:C9:7F:20:2B:FD:D3:66:5A:CF:CB:A2:06:9C:57:84:6E:FD
Certificate issuer:       /CN=be13c6d545795fa349d0c42f37ac051a6f4f88b6
Certificate serial:       05797C
Authority key identifier: D4:00:D2:DD:6B:DF:60:7E:29:18:A5:25:E8:0B:77:29:88:E0:72:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be13c6d545795fa349d0c42f37ac051a6f4f88b6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/a43d80f3d10728015e08a60935896d8c1fa30e9c.roa
Signing time:             Wed 24 Mar 2021 14:42:18 +0000
ROA not before:           Wed 24 Mar 2021 14:42:18 +0000
ROA not after:            Tue 24 Mar 2026 14:42:18 +0000
asID:                     269940
IP address blocks:        190.83.116.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358780 (0x5797c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be13c6d545795fa349d0c42f37ac051a6f4f88b6
        Validity
            Not Before: Mar 24 14:42:18 2021 GMT
            Not After : Mar 24 14:42:18 2026 GMT
        Subject: CN=a43d80f3d10728015e08a60935896d8c1fa30e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:07:b1:6a:f9:b7:fd:4c:da:d1:e8:46:c4:81:
                    ce:7d:93:3a:06:9e:0c:28:4d:c1:5e:5e:f3:78:87:
                    b6:6c:6f:44:3f:7e:cf:ae:1e:0a:1a:fd:57:04:05:
                    6a:6a:07:08:75:50:b0:bf:81:01:79:7b:be:d3:d6:
                    31:35:5a:d6:a8:6e:2d:af:95:9a:1e:6a:c8:1f:42:
                    5a:d5:80:a3:42:c6:3b:87:4d:b9:d5:74:9c:70:fa:
                    25:1c:2b:1e:fd:fa:0f:e6:01:14:da:64:fb:ea:e2:
                    a2:17:9f:12:95:a6:20:8f:0d:15:59:d1:dc:d8:ae:
                    24:eb:64:3e:8c:14:cb:44:b6:35:87:87:4f:a3:a8:
                    96:f2:5a:38:0d:04:c2:2f:3c:1a:e6:65:15:8d:54:
                    59:b1:11:f0:eb:22:3f:5a:55:79:3f:51:60:62:ad:
                    26:70:ba:ae:f6:ec:18:66:08:09:8f:a4:ee:8e:03:
                    92:06:7a:fa:bb:3d:64:d2:76:47:88:c4:f3:a4:59:
                    b6:d4:2c:b7:e4:8c:0b:88:a5:d9:96:22:9e:e3:4a:
                    32:60:ae:58:f8:6a:24:d1:39:8b:b6:4d:dc:1d:c2:
                    db:bc:b8:ac:95:6b:f9:bb:6f:3c:6a:eb:46:82:52:
                    88:76:32:f2:75:be:e6:29:72:89:b4:26:8d:76:31:
                    25:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AA:D4:C9:7F:20:2B:FD:D3:66:5A:CF:CB:A2:06:9C:57:84:6E:FD
            X509v3 Authority Key Identifier:
                keyid:D4:00:D2:DD:6B:DF:60:7E:29:18:A5:25:E8:0B:77:29:88:E0:72:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be13c6d545795fa349d0c42f37ac051a6f4f88b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/a43d80f3d10728015e08a60935896d8c1fa30e9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/be13c6d545795fa349d0c42f37ac051a6f4f88b6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:57:1d:b5:34:98:4d:56:92:7f:cf:5a:3b:86:13:c6:7d:fb:
         4e:d2:9a:34:8f:03:cc:cc:30:ee:43:00:2d:18:90:29:2c:8b:
         21:fe:28:2d:d1:e5:8b:f6:32:14:4d:a9:40:57:68:2c:5e:fc:
         0b:76:03:72:71:ba:98:4a:21:a6:61:f9:b1:45:73:be:eb:95:
         20:48:bd:43:70:1b:57:b7:27:c2:f7:36:20:6c:ea:35:58:77:
         22:6f:08:31:24:75:c8:1a:05:38:dc:de:d9:6d:ea:00:55:7f:
         27:ca:29:70:3a:66:75:c4:c4:87:53:87:16:38:a5:13:e1:7e:
         b5:77:bd:29:dc:11:db:4a:f9:ad:25:e0:11:b1:a0:85:f8:a7:
         4c:75:f5:c3:55:75:f1:3c:6f:af:f1:19:d8:51:ec:13:9c:b6:
         84:78:af:0f:38:12:bb:64:65:28:42:8f:b3:c0:15:e0:19:5c:
         1a:f9:6e:d5:c6:40:fa:4e:c5:94:2e:c3:6b:67:94:87:5b:af:
         94:be:7d:3f:01:8f:9f:51:e5:0c:c6:55:63:fc:bb:00:8c:e0:
         5b:8c:03:44:ee:97:a3:a4:b0:b1:2f:2a:22:b1:af:06:87:ad:
         31:39:a7:68:f3:f8:e6:ae:ed:8e:76:91:e1:5d:e1:45:e6:95:
         13:13:3a:91
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBXl8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJl
MTNjNmQ1NDU3OTVmYTM0OWQwYzQyZjM3YWMwNTFhNmY0Zjg4YjYwHhcNMjEwMzI0
MTQ0MjE4WhcNMjYwMzI0MTQ0MjE4WjAzMTEwLwYDVQQDEyhhNDNkODBmM2QxMDcy
ODAxNWUwOGE2MDkzNTg5NmQ4YzFmYTMwZTljMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5wexavm3/Uza0ehGxIHOfZM6Bp4MKE3BXl7zeIe2bG9EP37P
rh4KGv1XBAVqagcIdVCwv4EBeXu+09YxNVrWqG4tr5WaHmrIH0Ja1YCjQsY7h025
1XSccPolHCse/foP5gEU2mT76uKiF58SlaYgjw0VWdHc2K4k62Q+jBTLRLY1h4dP
o6iW8lo4DQTCLzwa5mUVjVRZsRHw6yI/WlV5P1FgYq0mcLqu9uwYZggJj6TujgOS
Bnr6uz1k0nZHiMTzpFm21Cy35IwLiKXZliKe40oyYK5Y+Gok0TmLtk3cHcLbvLis
lWv5u288autGglKIdjLydb7mKXKJtCaNdjElpwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDCq1Ml/ICv902Zaz8uiBpxXhG79MB8GA1UdIwQYMBaAFNQA0t1r32B+KRil
JegLdymI4HLrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmUxM2M2
ZDU0NTc5NWZhMzQ5ZDBjNDJmMzdhYzA1MWE2ZjRmODhiNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWIxOTcwZjUtMzM3MS00YmM3LTg4NTUtMWQ1M2Iy
ZTRlM2RjL2E0M2Q4MGYzZDEwNzI4MDE1ZTA4YTYwOTM1ODk2ZDhjMWZhMzBlOWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YjE5NzBmNS0zMzcxLTRiYzctODg1NS0xZDUz
YjJlNGUzZGMvYmUxM2M2ZDU0NTc5NWZhMzQ5ZDBjNDJmMzdhYzA1MWE2ZjRmODhi
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr5TdDANBgkqhkiG9w0BAQsFAAOCAQEAqlcdtTSYTVaSf89a
O4YTxn37TtKaNI8DzMww7kMALRiQKSyLIf4oLdHli/YyFE2pQFdoLF78C3YDcnG6
mEohpmH5sUVzvuuVIEi9Q3AbV7cnwvc2IGzqNVh3Im8IMSR1yBoFONze2W3qAFV/
J8opcDpmdcTEh1OHFjilE+F+tXe9KdwR20r5rSXgEbGghfinTHX1w1V18Txvr/EZ
2FHsE5y2hHivDzgSu2RlKEKPs8AV4BlcGvlu1cZA+k7FlC7Da2eUh1uvlL59PwGP
n1HlDMZVY/y7AIzgW4wDRO6Xo6SwsS8qIrGvBoetMTmnaPP45q7tjnaR4V3hReaV
ExM6kQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:20 2023 by rpki-client on console-fra.rpki-client.org