Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/53997946a362ee5a14b61ce9cd942772e05269af.roa
File:                     53997946a362ee5a14b61ce9cd942772e05269af.roa (raw, json)
Hash identifier:          b50/6LBF4LXBiq+qtXvdfOFiBpwsgKodSg9Gp/Wivok=
Subject key identifier:   CA:CF:31:78:C1:34:7B:E6:AF:05:F3:D4:67:36:ED:55:14:06:5A:9B
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       1934C8
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/53997946a362ee5a14b61ce9cd942772e05269af.roa
Signing time:             Thu 23 Jun 2022 15:56:24 +0000
ROA not before:           Thu 23 Jun 2022 03:00:00 +0000
ROA not after:            Sun 23 Jun 2024 03:00:00 +0000
asID:                     16814
IP address blocks:        186.189.248.0/23 maxlen: 24
                          186.189.250.0/23 maxlen: 24
                          186.189.248.0/24 maxlen: 24
                          186.189.249.0/24 maxlen: 24
                          186.189.250.0/24 maxlen: 24
                          186.189.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651912 (0x1934c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Jun 23 03:00:00 2022 GMT
            Not After : Jun 23 03:00:00 2024 GMT
        Subject: CN=53997946a362ee5a14b61ce9cd942772e05269af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f4:a6:28:e5:f6:6d:88:57:e8:77:e0:91:83:
                    93:0b:45:eb:0e:84:13:81:3a:47:dc:73:3f:36:a1:
                    75:42:6c:95:9c:16:52:7e:c3:9f:9e:1e:ca:08:43:
                    5c:94:bd:66:9e:d5:75:b5:b8:b9:e6:ec:f3:fd:b0:
                    13:e8:c1:21:c3:f9:cb:59:39:13:c3:32:17:0b:70:
                    3b:e4:2d:f4:8e:53:86:66:f9:da:f9:02:3c:11:63:
                    39:84:6a:e7:6e:fa:93:22:17:4f:45:37:54:00:a4:
                    37:cf:26:42:a9:cc:43:55:7b:f9:1a:f5:80:68:2e:
                    33:35:66:38:cf:06:08:25:23:78:15:26:34:41:50:
                    1c:12:f0:11:31:44:cd:ae:3c:10:79:96:1f:ec:cb:
                    52:dd:e1:fa:05:05:c6:64:5b:ba:67:33:80:28:97:
                    66:9c:6b:4a:69:d4:86:e6:55:a3:14:51:ff:bc:39:
                    ed:1f:0c:4a:a5:fd:52:63:58:92:07:2c:ea:ed:98:
                    9b:27:2b:32:a8:0b:ac:ec:1c:a9:ba:a6:df:66:ca:
                    92:28:8c:13:bf:bb:b5:3e:bc:5f:b4:1d:70:74:06:
                    16:84:3e:97:f8:bd:71:6d:5c:15:e5:bb:6a:33:34:
                    13:77:f0:ed:fd:a0:eb:6a:c2:c8:16:80:d8:bd:92:
                    3c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CF:31:78:C1:34:7B:E6:AF:05:F3:D4:67:36:ED:55:14:06:5A:9B
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/53997946a362ee5a14b61ce9cd942772e05269af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:c8:3e:1a:97:eb:ef:53:19:5d:0c:7f:d0:01:0f:5a:4b:30:
         dc:24:c2:26:6e:7a:a5:73:f9:fe:87:1f:d3:62:27:e8:15:08:
         ef:bd:81:a7:96:08:24:82:a4:a1:de:5a:da:3f:17:34:87:66:
         04:4e:2d:2f:c9:c7:0f:56:70:a6:50:09:7b:9e:49:01:cf:81:
         c7:58:1d:4a:d8:af:69:4c:99:95:15:d2:1d:a8:ff:83:8f:be:
         d9:53:31:ce:04:39:4b:b7:44:ae:67:86:66:d9:4e:28:2c:05:
         dc:6d:8a:91:4a:ef:f0:7e:c6:e5:f1:cf:16:83:e7:88:79:cb:
         4f:4f:61:24:04:c7:04:6d:df:38:03:3c:e8:ea:25:eb:04:aa:
         fc:46:05:72:71:a2:4b:74:3e:84:c7:a9:73:7f:9a:31:e2:7f:
         6a:bd:e4:97:46:39:6c:da:2e:29:a2:ec:5a:1f:0d:a0:37:5e:
         b8:a9:f2:40:1f:6a:b7:fb:9b:f3:9b:5f:14:74:11:43:96:9c:
         12:bc:67:23:d3:21:d3:52:ee:f3:64:eb:29:6d:a9:07:c0:1a:
         b8:7c:1d:f0:15:5e:d1:4c:fd:a0:5b:e1:bf:18:c0:6b:f7:a1:
         d2:3d:71:97:46:83:92:76:68:7d:96:73:86:58:d9:8c:95:01:
         a7:d0:09:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org