Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/110bc881b390933a28fdfcba57f14a31a49e01f5.roa
File:                     110bc881b390933a28fdfcba57f14a31a49e01f5.roa (raw, json)
Hash identifier:          RTfgAS7INAJkX1nchRw/4aEkm7Kmwk0124xqSnvs0OE=
Subject key identifier:   3A:8E:D2:0D:F5:5E:52:13:B6:95:CC:3D:2E:A0:20:89:90:C5:16:B5
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0E3202
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/110bc881b390933a28fdfcba57f14a31a49e01f5.roa
Signing time:             Wed 24 Mar 2021 14:31:36 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     262264
IP address blocks:        190.210.206.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930306 (0xe3202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=110bc881b390933a28fdfcba57f14a31a49e01f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:db:8d:b8:1b:c1:cc:73:5f:e0:cb:f0:d3:5b:
                    bd:bb:fe:fe:69:85:8a:b8:78:fb:e6:0b:95:cd:60:
                    15:20:a3:7b:cc:26:41:14:17:40:b6:28:25:47:84:
                    e4:83:47:44:1c:1a:83:b0:fd:29:a0:f4:e3:9c:da:
                    ed:57:39:21:34:09:cd:15:0a:ba:8d:96:1e:28:ff:
                    be:08:ee:89:9b:d5:d5:6e:11:8f:75:ea:5c:63:86:
                    25:7a:c4:b1:32:a5:4f:70:13:83:88:d8:45:d3:cc:
                    76:ec:52:3c:bb:de:ca:65:0c:ae:11:5a:0e:a2:6c:
                    65:50:23:ec:12:3e:1b:9b:71:4e:0f:1f:69:6d:e5:
                    d2:c1:e6:15:df:85:43:40:9b:56:1c:cc:2b:d0:b3:
                    8f:61:a0:45:b0:80:20:aa:c6:8b:4c:2c:f9:14:4b:
                    51:92:fc:fc:9b:78:7d:42:f0:c6:03:a6:6a:8e:4f:
                    87:52:36:40:80:09:f5:22:f8:83:d1:05:23:d1:dd:
                    bf:07:52:a6:b4:84:b6:13:d7:c8:5a:df:ef:a3:b9:
                    3d:71:a7:20:04:bb:06:05:bc:18:a5:7c:ba:79:e4:
                    9f:1b:d0:9f:41:1c:8b:49:1d:59:c0:92:0c:02:81:
                    44:34:04:31:ef:a4:b9:94:d8:c3:35:88:6e:38:1c:
                    07:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8E:D2:0D:F5:5E:52:13:B6:95:CC:3D:2E:A0:20:89:90:C5:16:B5
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/110bc881b390933a28fdfcba57f14a31a49e01f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:d3:2b:6f:ba:62:ff:d4:af:f4:7c:b5:1d:43:fb:96:79:6e:
         94:df:be:27:9f:3b:1c:17:ad:9e:64:a4:a0:d7:f8:8e:9e:87:
         b3:b7:42:99:63:0b:b6:7d:a0:d1:7f:78:7d:d5:2d:62:68:c7:
         43:c4:f3:4f:44:45:a6:7b:76:e5:fe:62:ec:83:82:34:55:19:
         a1:97:a7:7f:c0:d8:3a:72:73:41:36:9e:51:95:c0:f4:a3:49:
         4a:a2:37:8c:f1:77:73:61:db:c2:cf:2e:27:57:e6:35:1a:51:
         d0:bf:67:f6:eb:67:cf:07:8a:39:0a:2e:a5:3a:6e:76:24:e3:
         76:d7:c4:90:30:c6:8b:10:24:67:77:c3:c0:95:16:da:4e:f9:
         fb:b9:22:97:19:fa:e8:b4:08:2a:da:60:ba:37:98:96:7e:20:
         ef:90:06:f0:cb:50:28:46:fa:00:28:00:fd:16:68:4c:8d:dd:
         01:44:a3:33:d3:bf:bf:ad:32:fb:a8:72:5a:a7:a4:4e:0b:9a:
         aa:ba:ba:42:38:67:b1:06:ee:c7:2f:bd:e7:a3:9f:7f:88:be:
         bc:99:de:3e:21:31:1f:79:d2:bc:0e:f3:90:29:9f:7b:b4:4b:
         58:d0:8a:c7:91:5b:83:cf:83:58:4e:fa:62:06:25:b6:b6:10:
         e5:e6:57:20
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDjICMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
YmZjNjNjNGQyZTIyMmRmM2EwOTllMjIyNTY3ZGViOWU4OGJiMjcwHhcNMjEwMzI0
MTQzMTM0WhcNMjYwMzI0MTQzMTM0WjAzMTEwLwYDVQQDEygxMTBiYzg4MWIzOTA5
MzNhMjhmZGZjYmE1N2YxNGEzMWE0OWUwMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmNuNuBvBzHNf4Mvw01u9u/7+aYWKuHj75guVzWAVIKN7zCZB
FBdAtiglR4Tkg0dEHBqDsP0poPTjnNrtVzkhNAnNFQq6jZYeKP++CO6Jm9XVbhGP
depcY4YlesSxMqVPcBODiNhF08x27FI8u97KZQyuEVoOomxlUCPsEj4bm3FODx9p
beXSweYV34VDQJtWHMwr0LOPYaBFsIAgqsaLTCz5FEtRkvz8m3h9QvDGA6Zqjk+H
UjZAgAn1IviD0QUj0d2/B1KmtIS2E9fIWt/vo7k9cacgBLsGBbwYpXy6eeSfG9Cf
QRyLSR1ZwJIMAoFENAQx76S5lNjDNYhuOBwHvwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDqO0g31XlITtpXMPS6gIImQxRa1MB8GA1UdIwQYMBaAFKbB/2GNliK3iQ+g
mDamXNI878RiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjliZmM2
M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjI2ZjRmMjgtODgwYy00YmI1LTk0NDItOWVlZjkz
MjVkN2ViLzExMGJjODgxYjM5MDkzM2EyOGZkZmNiYTU3ZjE0YTMxYTQ5ZTAxZjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjZmNGYyOC04ODBjLTRiYjUtOTQ0Mi05ZWVm
OTMyNWQ3ZWIvMjliZmM2M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7SzjANBgkqhkiG9w0BAQsFAAOCAQEAiNMrb7pi/9Sv9Hy1
HUP7lnlulN++J587HBetnmSkoNf4jp6Hs7dCmWMLtn2g0X94fdUtYmjHQ8TzT0RF
pnt25f5i7IOCNFUZoZenf8DYOnJzQTaeUZXA9KNJSqI3jPF3c2Hbws8uJ1fmNRpR
0L9n9utnzweKOQoupTpudiTjdtfEkDDGixAkZ3fDwJUW2k75+7kilxn66LQIKtpg
ujeYln4g75AG8MtQKEb6ACgA/RZoTI3dAUSjM9O/v60y+6hyWqekTguaqrq6Qjhn
sQbuxy+956Off4i+vJnePiExH3nSvA7zkCmfe7RLWNCKx5Fbg8+DWE76YgYltrYQ
5eZXIA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org