Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/3474d6f68a48bd38c26043f7ea1adf83d2502d29.roa
File:                     3474d6f68a48bd38c26043f7ea1adf83d2502d29.roa (raw, json)
Hash identifier:          0Y4R8/b2CR9k1zJoMZhJfTGbtpH42QIJkiJMs3zP6KI=
Subject key identifier:   76:68:38:10:B8:FD:14:0A:CD:82:1F:09:FC:99:A2:31:D4:D2:F2:54
Certificate issuer:       /CN=425b31fb70180b4aa636c240ebd5276c722716f7
Certificate serial:       0E30E7
Authority key identifier: D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/3474d6f68a48bd38c26043f7ea1adf83d2502d29.roa
Signing time:             Fri 09 Apr 2021 06:58:37 +0000
ROA not before:           Fri 09 Apr 2021 03:00:00 +0000
ROA not after:            Sun 09 Apr 2023 03:00:00 +0000
asID:                     263699
IP address blocks:        190.94.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930023 (0xe30e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425b31fb70180b4aa636c240ebd5276c722716f7
        Validity
            Not Before: Apr  9 03:00:00 2021 GMT
            Not After : Apr  9 03:00:00 2023 GMT
        Subject: CN=3474d6f68a48bd38c26043f7ea1adf83d2502d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:19:60:3b:0a:f0:62:90:14:74:a8:73:0c:
                    e6:1f:75:bb:4c:29:71:81:45:33:5c:78:f3:af:7b:
                    08:f9:d7:e1:7f:c6:3c:b9:79:d3:21:9e:c1:e9:48:
                    88:2e:b9:03:9a:e4:0c:e2:b9:bb:36:38:a7:24:c8:
                    1c:df:54:ea:2d:ff:56:4e:54:1f:bf:10:56:8e:04:
                    2b:ef:05:a1:c0:0f:99:7b:02:e0:74:f9:d1:d8:68:
                    3f:9e:67:3b:09:80:14:c0:fd:f9:a0:ae:a8:bc:91:
                    1a:74:ee:80:89:f0:d8:58:f3:52:77:c6:5c:5c:e7:
                    bd:66:d1:df:e2:ff:9e:8a:e9:5a:2e:ed:2b:ee:5b:
                    bb:af:f8:0c:60:c7:76:bf:c2:1e:20:d3:eb:46:f5:
                    06:90:5a:0c:2a:30:fc:20:fa:f7:e3:48:53:49:ca:
                    83:31:0c:64:d8:f2:8c:0e:4e:8a:9a:c1:e4:56:cf:
                    ee:76:66:62:a7:50:38:f7:9c:b6:49:5b:8f:b8:0a:
                    e5:7d:b0:04:f2:d1:d7:e8:a4:d9:66:54:70:4a:d5:
                    59:03:58:d9:39:03:9c:a7:c8:4a:04:c1:a2:e4:62:
                    82:0d:c4:20:42:57:11:42:25:58:39:da:3c:a8:f9:
                    83:17:df:6f:02:40:51:46:97:70:fa:98:80:7a:cd:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:68:38:10:B8:FD:14:0A:CD:82:1F:09:FC:99:A2:31:D4:D2:F2:54
            X509v3 Authority Key Identifier:
                keyid:D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/3474d6f68a48bd38c26043f7ea1adf83d2502d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/425b31fb70180b4aa636c240ebd5276c722716f7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:8c:4b:81:e9:d9:c6:86:84:98:ad:ba:bf:ec:57:af:c4:a0:
         52:f1:91:b9:25:04:c9:71:47:c6:97:33:83:d5:03:45:52:0c:
         d5:3e:3a:ea:9b:45:a3:1e:1b:81:0c:96:22:fd:33:b4:57:bc:
         3a:29:04:3d:0f:06:64:f0:55:63:2e:50:5e:b0:df:2a:78:5a:
         eb:7b:19:12:7c:f8:44:23:4a:a0:7a:11:13:2d:e9:40:f0:58:
         de:b8:25:3a:85:b7:c7:ac:2d:2f:ea:42:2c:c7:33:07:c8:8a:
         57:f8:9b:d4:b5:a5:49:23:9a:a4:ce:c9:3f:36:4d:ab:ba:05:
         e0:1f:99:d0:a1:f0:8b:a2:69:8f:2d:61:b7:01:3d:7b:2b:66:
         9f:df:5c:99:e3:3c:0e:01:3b:88:fd:3c:b6:0c:5e:53:73:98:
         75:d0:ae:c1:3b:2c:4e:b4:58:1f:80:40:09:4c:2a:55:58:4f:
         4f:4a:51:72:0b:55:fb:67:69:dc:ed:25:c6:51:16:61:55:86:
         e7:3a:88:8e:72:39:f3:5b:19:2f:92:ba:bf:0e:90:df:61:1d:
         e5:6b:66:bc:bf:bf:d9:39:fc:f1:5e:e5:e0:58:cc:1e:0b:ed:
         db:38:46:e2:c7:bd:a2:af:cd:17:55:ed:81:4d:3e:e7:8d:de:
         e5:fa:2c:8a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDjDnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQy
NWIzMWZiNzAxODBiNGFhNjM2YzI0MGViZDUyNzZjNzIyNzE2ZjcwHhcNMjEwNDA5
MDMwMDAwWhcNMjMwNDA5MDMwMDAwWjAzMTEwLwYDVQQDEygzNDc0ZDZmNjhhNDhi
ZDM4YzI2MDQzZjdlYTFhZGY4M2QyNTAyZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkdcZYDsK8GKQFHSocwzmH3W7TClxgUUzXHjzr3sI+dfhf8Y8
uXnTIZ7B6UiILrkDmuQM4rm7NjinJMgc31TqLf9WTlQfvxBWjgQr7wWhwA+ZewLg
dPnR2Gg/nmc7CYAUwP35oK6ovJEadO6AifDYWPNSd8ZcXOe9ZtHf4v+eiulaLu0r
7lu7r/gMYMd2v8IeINPrRvUGkFoMKjD8IPr340hTScqDMQxk2PKMDk6KmsHkVs/u
dmZip1A495y2SVuPuArlfbAE8tHX6KTZZlRwStVZA1jZOQOcp8hKBMGi5GKCDcQg
QlcRQiVYOdo8qPmDF99vAkBRRpdw+piAes2JeQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHZoOBC4/RQKzYIfCfyZojHU0vJUMB8GA1UdIwQYMBaAFNWMLOYny/Z/V8UJ
Bug+HlLjYYJKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDI1YjMx
ZmI3MDE4MGI0YWE2MzZjMjQwZWJkNTI3NmM3MjI3MTZmNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjE1N2UzZDAtOTAxMC00NzY2LWE0ZWUtODNhYjg2
N2MyNzNkLzM0NzRkNmY2OGE0OGJkMzhjMjYwNDNmN2VhMWFkZjgzZDI1MDJkMjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MTU3ZTNkMC05MDEwLTQ3NjYtYTRlZS04M2Fi
ODY3YzI3M2QvNDI1YjMxZmI3MDE4MGI0YWE2MzZjMjQwZWJkNTI3NmM3MjI3MTZm
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5evTANBgkqhkiG9w0BAQsFAAOCAQEAkYxLgenZxoaEmK26
v+xXr8SgUvGRuSUEyXFHxpczg9UDRVIM1T466ptFox4bgQyWIv0ztFe8OikEPQ8G
ZPBVYy5QXrDfKnha63sZEnz4RCNKoHoREy3pQPBY3rglOoW3x6wtL+pCLMczB8iK
V/ib1LWlSSOapM7JPzZNq7oF4B+Z0KHwi6Jpjy1htwE9eytmn99cmeM8DgE7iP08
tgxeU3OYddCuwTssTrRYH4BACUwqVVhPT0pRcgtV+2dp3O0lxlEWYVWG5zqIjnI5
81sZL5K6vw6Q32Ed5WtmvL+/2Tn88V7l4FjMHgvt2zhG4se9oq/NF1XtgU0+543e
5fosig==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org