Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/b3bbeddc18d9a78f3c32b17946a800df608b14f5.roa
File:                     b3bbeddc18d9a78f3c32b17946a800df608b14f5.roa (raw, json)
Hash identifier:          bYLTzsdQ6Pn3CNReKhwDG6DNTR6dCGd5ldZqXfguymw=
Subject key identifier:   A3:68:EE:F2:89:DB:86:0D:EB:70:C5:3A:78:3C:6E:67:F2:3A:D4:CA
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       1A0034
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/b3bbeddc18d9a78f3c32b17946a800df608b14f5.roa
Signing time:             Wed 06 Jul 2022 19:35:16 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28000
IP address blocks:        190.112.52.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703988 (0x1a0034)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=b3bbeddc18d9a78f3c32b17946a800df608b14f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:46:fe:72:68:51:1e:47:7f:84:6a:48:56:
                    f6:75:6b:12:28:a5:8e:42:a2:61:80:5c:65:ea:0d:
                    30:7d:6d:3d:15:6d:af:9d:40:d4:33:d1:96:8e:97:
                    ef:e9:65:e1:a6:f2:8e:a2:7d:37:19:b2:a6:83:de:
                    3c:da:95:7a:f9:43:e0:30:dd:7b:59:cf:e1:8e:61:
                    bb:cc:54:85:87:31:d2:45:28:9c:80:87:52:99:52:
                    f7:79:3e:a0:4e:54:0a:d1:2e:1e:98:0e:8b:5e:df:
                    5e:60:0c:60:2c:42:1e:f2:09:05:67:ea:0e:dc:93:
                    59:58:c8:05:48:2d:da:3c:6c:28:91:44:0e:18:be:
                    ad:4a:f3:3e:5f:eb:50:78:87:ca:b5:66:2e:74:36:
                    57:4b:f9:84:3b:65:f3:a7:cc:b7:ba:14:58:4a:f3:
                    36:2a:70:3b:01:f1:8b:ec:d0:3d:74:f9:ac:2a:61:
                    78:79:68:34:f9:d9:ca:c5:b9:e2:fb:6a:f1:68:11:
                    c0:49:4d:82:e2:b1:c2:41:c0:89:22:dd:d2:fc:ea:
                    3c:46:0b:bf:2b:1b:f2:49:c9:63:c6:af:04:e7:2a:
                    91:cd:c9:9d:48:bb:de:d1:71:ee:48:a2:2d:f4:3e:
                    59:c4:17:8d:1c:13:34:92:d4:39:05:da:f0:4b:b8:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:68:EE:F2:89:DB:86:0D:EB:70:C5:3A:78:3C:6E:67:F2:3A:D4:CA
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/b3bbeddc18d9a78f3c32b17946a800df608b14f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:a6:3b:28:92:9c:3e:40:36:04:0a:79:8f:a7:2a:46:ad:c3:
         8a:38:a2:5e:40:30:76:f5:55:9a:7a:77:96:0c:b4:e5:3e:89:
         b1:d8:bf:85:aa:50:2f:1d:9a:f8:76:bf:fa:d4:16:d9:46:2d:
         44:10:5e:0b:75:d2:1f:cc:8f:aa:b7:90:3c:91:e7:84:3b:e0:
         05:14:b6:1c:9f:2f:71:cb:b5:4d:79:9e:1d:af:bb:50:da:19:
         65:97:b4:69:dc:5c:cf:26:32:7c:f5:9e:6f:39:5f:6f:74:1c:
         dd:e9:84:d6:58:09:21:10:75:9c:12:01:6c:8e:98:bc:8f:77:
         ac:0d:d2:9a:b6:0a:69:ff:b1:be:92:10:41:bb:d4:19:cf:29:
         b9:c1:7a:02:e4:82:fd:e3:8f:94:9f:82:21:99:b5:58:7b:5c:
         53:c5:14:7b:4e:98:76:4e:41:f2:3f:cc:d7:1c:20:b7:1b:33:
         19:34:e8:e1:33:ff:98:8c:6b:fe:57:6a:c9:4e:38:4a:44:dc:
         0e:2f:bb:d3:fb:b6:30:47:19:81:d9:af:4e:52:d6:d6:fa:40:
         b9:58:ce:df:a8:11:b9:16:fb:ab:7c:c7:6f:b5:30:aa:ea:d1:
         8e:03:7d:fb:f6:16:77:c0:3f:e4:2e:cc:00:83:72:7f:e0:f9:
         87:14:5d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org