Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/1dfa316ac3650c9e56413323182c4a6731507290.roa
File:                     1dfa316ac3650c9e56413323182c4a6731507290.roa (raw, json)
Hash identifier:          GTZQM+l6tSSTjREVgDGwBBCkygXpfiaUdlJlr6NC0DY=
Subject key identifier:   E0:19:A0:20:89:6F:74:BC:FC:6E:5F:AA:B2:13:93:01:FA:E2:10:68
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       19EED4
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/1dfa316ac3650c9e56413323182c4a6731507290.roa
Signing time:             Tue 19 Jul 2022 13:51:58 +0000
ROA not before:           Tue 19 Jul 2022 13:51:58 +0000
ROA not after:            Mon 19 Jul 2027 13:51:58 +0000
asID:                     28035
IP address blocks:        190.210.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1699540 (0x19eed4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Jul 19 13:51:58 2022 GMT
            Not After : Jul 19 13:51:58 2027 GMT
        Subject: CN=1dfa316ac3650c9e56413323182c4a6731507290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:ac:8e:9c:a7:8f:f4:f5:39:8f:36:a1:ed:
                    d1:a1:3e:55:07:18:cd:b8:a4:10:c8:0e:68:21:25:
                    b4:2e:bc:8b:34:4f:94:27:69:f5:57:59:2c:38:72:
                    85:62:8b:78:ac:5f:14:7b:12:bf:c4:88:0d:12:2f:
                    ea:85:e2:0a:72:36:df:ae:7f:af:26:c4:83:b7:6f:
                    df:b5:71:3c:33:6d:ba:0b:f3:ed:ba:a9:cf:74:df:
                    22:83:60:2e:8e:34:e4:cb:6e:78:82:97:3f:29:27:
                    24:28:3e:36:f1:45:52:9c:0e:49:5a:ed:e1:3c:83:
                    43:f6:01:c7:79:93:2c:88:4e:19:c6:f1:a3:82:76:
                    4e:0b:4f:d1:e6:18:ad:d3:ac:66:48:c0:c7:32:d9:
                    82:9c:0d:c6:f3:91:7f:ba:0e:2b:f2:8e:1b:6a:04:
                    9e:fa:27:c0:32:ae:4f:f3:7b:f6:19:f5:37:d7:2e:
                    50:34:d3:44:f4:c1:ba:36:af:12:d6:a2:8a:41:ff:
                    02:13:bf:f1:dc:fe:cc:fd:2d:62:2c:26:d5:bf:83:
                    6b:3a:ba:37:cd:65:33:78:a1:0a:2a:46:6f:bb:11:
                    59:6c:b2:6a:c3:66:35:c8:d5:cc:15:7e:d1:a7:e2:
                    36:a0:15:40:6a:06:a1:ce:8f:59:2f:17:a1:37:ef:
                    3b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:19:A0:20:89:6F:74:BC:FC:6E:5F:AA:B2:13:93:01:FA:E2:10:68
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/1dfa316ac3650c9e56413323182c4a6731507290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:35:8a:db:c6:47:d7:80:3f:c9:07:4d:8e:f0:92:4f:68:27:
         cb:e4:4f:89:5b:10:8a:91:fc:da:92:df:72:0e:7c:27:85:19:
         c9:ba:95:f5:4d:62:e2:d5:08:44:f2:67:1e:c4:8d:1f:fc:62:
         f1:5e:3e:23:a5:b8:c1:21:5b:52:fe:71:e8:9b:d3:26:38:c9:
         1b:1e:c3:05:4e:0e:64:08:5e:64:66:80:44:16:00:45:ac:8a:
         6a:fb:c9:35:9b:02:71:18:6c:47:d9:2c:f4:25:e8:5a:6b:1c:
         da:98:1d:75:51:4d:57:66:59:c0:96:2d:f4:d1:87:2e:7c:74:
         30:8e:b1:42:76:24:f2:e3:d5:28:ba:51:56:75:60:72:c6:23:
         10:52:7c:2c:fd:44:cd:6b:f2:04:0e:56:b6:8b:ed:e4:b2:35:
         f2:31:07:9a:35:c4:91:99:91:0f:1e:d4:6f:64:c2:57:d0:6a:
         49:44:bb:5c:0d:60:ef:02:92:2a:bc:85:ab:8d:6d:2a:52:0f:
         94:9d:4f:75:0d:84:e4:de:b5:32:b4:5b:d5:2a:f4:38:30:92:
         a7:23:5b:3f:55:2f:bb:1b:d7:0f:36:ef:23:a0:92:5c:09:4e:
         7d:6f:ec:58:fc:fc:c0:0f:d8:6f:cd:fb:fd:11:20:34:dd:b4:
         8c:0e:17:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org