Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/0d7bf6cfe980c2c1470bc8a54c7dd232eb3e7f1e.roa
File:                     0d7bf6cfe980c2c1470bc8a54c7dd232eb3e7f1e.roa (raw, json)
Hash identifier:          WSMmLfNr/fomWCYqiYHogNQAyrCKsiXCg5VB6tZdiH8=
Subject key identifier:   09:A4:59:38:45:69:D9:CE:F0:92:C0:B5:21:E0:90:AA:72:63:AC:07
Certificate issuer:       /CN=425b31fb70180b4aa636c240ebd5276c722716f7
Certificate serial:       0E3671
Authority key identifier: D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/0d7bf6cfe980c2c1470bc8a54c7dd232eb3e7f1e.roa
Signing time:             Fri 09 Apr 2021 07:00:30 +0000
ROA not before:           Fri 09 Apr 2021 03:00:00 +0000
ROA not after:            Sun 09 Apr 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        190.94.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931441 (0xe3671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425b31fb70180b4aa636c240ebd5276c722716f7
        Validity
            Not Before: Apr  9 03:00:00 2021 GMT
            Not After : Apr  9 03:00:00 2023 GMT
        Subject: CN=0d7bf6cfe980c2c1470bc8a54c7dd232eb3e7f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b3:ca:c8:8a:17:7a:c6:4d:ab:39:5b:9e:09:
                    e3:d0:58:0f:a8:a8:23:8e:57:99:d6:aa:cd:8a:cd:
                    90:c6:c9:67:df:b7:5a:8a:44:c8:a8:10:bd:ac:c8:
                    0b:d5:62:32:9a:4e:42:a1:23:bd:d2:db:a4:5e:1e:
                    6a:42:3d:6b:f5:4f:12:c9:9f:7f:d9:c2:45:34:49:
                    84:90:60:21:ae:96:26:54:67:bc:b8:fe:7b:b4:d1:
                    32:10:6f:b9:a2:77:56:52:07:5e:04:22:e6:61:6d:
                    58:40:97:a4:b3:f8:3d:f6:93:b5:e9:63:53:5e:55:
                    20:1f:11:bf:1b:d5:ad:d5:94:66:bd:31:76:77:5d:
                    49:23:8e:d6:a8:04:28:f5:65:7e:21:49:5d:d8:fe:
                    dd:75:84:03:a9:6e:44:a1:1c:77:9d:b6:74:e7:b6:
                    b2:a3:a4:47:f9:ed:83:9a:6a:2c:e0:bd:ba:99:79:
                    e3:5d:45:6a:3a:a1:f3:61:b2:40:e0:d4:a4:49:e9:
                    2b:d5:70:17:d1:9e:dd:88:56:78:8e:c1:22:b2:13:
                    a8:d3:ff:30:d3:f0:39:d9:f1:cb:6c:b2:e9:fd:6b:
                    e9:bf:52:7d:ea:e9:6c:a9:3a:03:22:f6:97:88:4d:
                    cb:3a:5d:ee:4d:e7:24:07:4f:d6:b9:92:1d:91:8c:
                    38:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A4:59:38:45:69:D9:CE:F0:92:C0:B5:21:E0:90:AA:72:63:AC:07
            X509v3 Authority Key Identifier:
                keyid:D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/0d7bf6cfe980c2c1470bc8a54c7dd232eb3e7f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/425b31fb70180b4aa636c240ebd5276c722716f7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:aa:3d:2b:7e:20:7e:0b:24:00:15:f9:1c:b3:be:7c:e1:2f:
         4a:73:f5:00:44:c1:66:d1:62:36:3b:54:60:dd:30:2a:d9:e9:
         67:e1:e6:41:21:27:6e:54:b0:d3:d9:02:8a:34:8d:23:83:14:
         a9:39:3d:39:9b:b2:09:f9:ab:5c:85:bd:ba:9d:e8:c3:38:d9:
         ea:04:0d:da:a6:f3:d7:bd:72:3a:33:20:5d:92:77:7c:7f:68:
         46:17:55:9c:d8:87:ed:04:5f:8e:79:76:e2:72:00:51:80:4b:
         da:fc:99:b4:36:36:5b:4c:e6:82:9d:49:1d:35:8e:5c:d7:73:
         a8:b2:61:f3:2d:86:86:75:aa:ce:79:31:5b:d6:5a:6f:a1:06:
         c6:80:8e:73:3d:21:c9:e9:a2:b2:35:30:e5:c7:50:93:eb:6a:
         59:a2:cd:0c:e4:f3:51:0e:54:9e:ab:a3:69:9c:ee:1f:2e:77:
         42:4b:a9:d6:72:90:e3:8e:01:d2:d5:30:0d:18:d4:2f:06:df:
         e9:2d:82:1a:e8:a0:ec:1f:97:30:8a:48:a6:a0:e4:5c:4a:f1:
         2d:c0:67:be:a7:f6:cc:c0:cf:0e:f7:73:6f:e7:f0:52:d9:9c:
         83:0f:0e:bd:36:cf:53:73:6b:ca:58:50:2a:e3:76:39:0f:b0:
         ae:f8:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org