Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/255eef59ba0c1c8c823ecdb19d216305879cf1f8.roa
File:                     255eef59ba0c1c8c823ecdb19d216305879cf1f8.roa (raw, json)
Hash identifier:          9DrYH+pLxIynnPsGLew9Q7Xz9Ip29EZr1Wc6KujUalE=
Subject key identifier:   B5:61:3A:50:8E:69:A6:95:67:3B:04:E7:54:E4:4E:ED:AA:D7:37:88
Certificate issuer:       /CN=29194fbdbd11c97181ad21546cc92fc2d0e3857a
Certificate serial:       11FDD0
Authority key identifier: 48:F9:63:04:80:AE:04:85:2E:87:A6:87:F3:2E:19:51:75:61:A2:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29194fbdbd11c97181ad21546cc92fc2d0e3857a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/255eef59ba0c1c8c823ecdb19d216305879cf1f8.roa
Signing time:             Mon 20 Sep 2021 16:33:06 +0000
ROA not before:           Mon 20 Sep 2021 03:00:00 +0000
ROA not after:            Wed 20 Sep 2023 03:00:00 +0000
asID:                     262248
IP address blocks:        190.14.16.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1179088 (0x11fdd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29194fbdbd11c97181ad21546cc92fc2d0e3857a
        Validity
            Not Before: Sep 20 03:00:00 2021 GMT
            Not After : Sep 20 03:00:00 2023 GMT
        Subject: CN=255eef59ba0c1c8c823ecdb19d216305879cf1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:0c:89:43:10:ca:95:e2:ed:ba:09:41:ad:
                    0f:13:a1:5f:20:88:bb:8b:49:6e:34:bf:d5:1c:6f:
                    89:7b:c8:8b:4b:88:64:8b:a3:8f:08:af:48:4d:d8:
                    75:a7:94:72:2a:4e:cd:e2:de:b4:96:8b:c4:6d:3d:
                    08:91:66:00:79:e3:04:c5:62:57:b8:81:a4:6d:f4:
                    0e:d6:c0:a2:bc:c6:bf:11:ac:dd:96:c4:e5:24:af:
                    58:0b:e0:fa:54:7b:7f:d4:c1:7c:79:df:70:a2:4b:
                    8d:b9:be:a5:10:37:00:a5:04:4e:dc:7e:2c:62:d0:
                    fb:68:7e:c0:ce:69:e4:9c:c8:71:61:d4:70:05:46:
                    a5:fd:ba:74:14:89:f5:e1:54:75:44:e7:ef:0a:5d:
                    2f:d0:31:84:2d:0b:7c:17:d8:8d:01:7f:2a:63:55:
                    18:fd:36:ec:be:96:ad:a8:d1:6a:ed:72:b5:c1:6d:
                    86:c9:7e:92:94:0e:67:56:b2:ec:cb:2b:47:93:e9:
                    12:a3:f5:9b:4b:80:ea:3b:02:4a:3c:fb:39:1d:5b:
                    05:e3:7a:9c:94:54:d5:e7:b4:b3:40:91:d1:b8:2b:
                    4c:b7:ac:00:57:b1:57:b6:55:02:5b:29:a4:80:cb:
                    1d:1f:52:6c:8b:d0:4f:88:32:7b:c3:a1:b7:c9:09:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:61:3A:50:8E:69:A6:95:67:3B:04:E7:54:E4:4E:ED:AA:D7:37:88
            X509v3 Authority Key Identifier:
                keyid:48:F9:63:04:80:AE:04:85:2E:87:A6:87:F3:2E:19:51:75:61:A2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29194fbdbd11c97181ad21546cc92fc2d0e3857a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/255eef59ba0c1c8c823ecdb19d216305879cf1f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/29194fbdbd11c97181ad21546cc92fc2d0e3857a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:bc:15:97:1c:0e:87:ee:36:f0:40:55:50:2e:6b:b3:13:7d:
         b4:42:2e:3a:24:92:20:cf:c1:64:1c:9d:c3:76:7c:53:f4:f8:
         7b:06:57:da:aa:6b:50:c6:94:8f:80:8f:f1:89:43:da:31:d4:
         0a:2d:e1:c7:3e:fa:23:9a:63:3a:61:b5:cd:e4:08:2a:14:85:
         f8:9b:f2:17:14:12:39:14:c0:22:04:13:39:cd:c0:be:20:eb:
         77:56:0b:ad:e5:aa:d1:ea:c6:de:03:60:25:88:6b:b6:d5:00:
         62:d8:0d:75:86:23:04:53:e2:9c:b4:be:0c:07:11:e5:a3:8f:
         0b:0b:90:cd:bd:80:8f:4f:4c:63:93:d1:93:b4:11:11:41:19:
         44:ca:09:1a:2c:63:3e:3e:4d:76:5c:8b:2a:cb:b2:97:05:3d:
         13:6e:0d:71:be:25:2c:c0:95:9d:bc:ed:b2:f3:a6:2a:39:80:
         59:82:da:cd:1c:a8:44:7f:0b:30:54:ef:a7:a1:ba:a3:14:0f:
         dd:42:95:ba:e5:07:bd:72:35:46:10:db:c3:3c:e5:bf:d4:91:
         13:bc:10:27:c5:3d:66:d3:26:ef:5e:2f:ca:4a:53:3e:8a:48:
         8d:8a:7a:d3:2c:03:57:d1:dc:6e:c7:8c:d0:51:4d:5a:db:b6:
         2f:29:e2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:21 2023 by rpki-client on console-fra.rpki-client.org