Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/0d4ef047a7650cd90783fa6dd74f3edb5ce86245.roa
File:                     0d4ef047a7650cd90783fa6dd74f3edb5ce86245.roa (raw, json)
Hash identifier:          w5hCbKQtfMU0YKkNT1k0YFLCMkcENYMSrTp9ayE3q90=
Subject key identifier:   35:D0:AB:76:F8:1A:2B:BB:B9:39:56:E4:2B:97:CB:0E:4C:20:17:5B
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0DF9DE
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/0d4ef047a7650cd90783fa6dd74f3edb5ce86245.roa
Signing time:             Wed 24 Mar 2021 14:31:35 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     262264
IP address blocks:        190.210.206.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915934 (0xdf9de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=0d4ef047a7650cd90783fa6dd74f3edb5ce86245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f3:6b:d8:fc:d9:e4:69:a4:2d:f1:f7:10:b3:
                    ce:d2:fe:91:37:c4:11:80:62:4e:bb:8d:8f:7c:13:
                    b4:05:07:c7:cd:da:09:2b:af:5f:2c:1f:ba:49:8e:
                    d9:e4:0d:1d:72:fd:bc:d3:dd:c9:51:7d:2f:0a:ad:
                    da:d2:8a:a1:61:e7:33:3f:c0:a2:66:bc:0a:36:66:
                    7a:f1:57:57:db:14:8e:b4:1f:c7:c9:22:ca:0b:a5:
                    7d:62:8d:98:d5:6f:ca:12:a7:44:2d:30:41:17:e2:
                    70:f8:c8:72:e4:42:f0:fd:23:15:eb:25:5d:d4:4b:
                    ff:27:87:7c:4d:59:3d:c1:c0:fd:93:ad:5f:da:5d:
                    ec:60:9f:eb:55:54:25:32:1d:89:a2:98:ee:9b:de:
                    e5:6e:65:49:ba:3d:e9:59:7f:0d:0e:23:fb:28:ba:
                    83:7f:f4:1c:ed:50:32:2d:3e:99:2f:09:43:5f:f5:
                    78:c6:45:e5:87:57:b9:01:3c:4a:04:46:d3:28:a1:
                    0d:26:07:a7:17:dc:da:72:d1:de:2b:b9:33:f7:31:
                    ff:d7:8b:c6:d3:b7:70:54:b2:6d:1f:6c:95:24:0b:
                    8c:e8:f1:b0:00:e2:df:9e:6e:13:b9:3b:46:ee:c5:
                    28:1b:23:cb:b1:85:cf:f5:0b:ca:65:3e:dd:c8:12:
                    83:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D0:AB:76:F8:1A:2B:BB:B9:39:56:E4:2B:97:CB:0E:4C:20:17:5B
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/0d4ef047a7650cd90783fa6dd74f3edb5ce86245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:31:4c:02:60:0e:07:3c:78:e8:b5:71:07:3c:97:1a:93:c0:
         41:df:19:54:25:f5:32:98:58:ce:e7:a1:9f:0a:0e:e2:58:aa:
         fe:83:df:f8:96:21:f7:c0:5a:53:23:12:c6:1e:22:99:a7:d1:
         ad:34:2d:8b:5b:c9:e3:fa:4b:e7:ab:3c:1b:8f:2f:74:3a:67:
         57:84:73:ad:2f:cd:1d:a3:91:ff:e8:69:3d:7e:8d:e0:87:df:
         b7:76:4d:e3:24:6c:f0:71:cf:3c:5b:87:d3:32:d3:f4:bb:38:
         9c:57:2d:ea:c6:8f:5a:06:bc:eb:cd:3e:05:ca:51:d1:51:90:
         75:f8:6b:06:ad:9b:e2:e0:9f:b2:ab:d8:33:57:c3:4c:ae:d1:
         0a:3f:1e:d2:e4:cd:55:75:f0:ab:b2:be:da:35:2a:0b:17:40:
         35:75:37:8a:06:0f:48:25:78:6a:7f:1d:a4:c8:ef:4b:82:cc:
         a2:04:ab:b5:37:1d:61:81:3a:fb:d5:be:61:d8:b1:43:5b:86:
         1d:42:50:6c:a0:f2:56:5a:b1:4b:11:a0:0d:38:90:2a:4c:0b:
         4c:0f:a8:57:2e:4b:8d:bc:17:23:b4:94:68:89:dc:29:9c:2a:
         bd:34:5c:ae:b4:a0:b7:f0:ae:a2:eb:a5:d2:6e:97:48:36:d0:
         d3:6a:06:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org