Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/a6eed4883b6eb62cb2dfc92676f9007819029ea0.roa
File:                     a6eed4883b6eb62cb2dfc92676f9007819029ea0.roa (raw, json)
Hash identifier:          lOjF9wY13ViDK+/ULIVn5b/jWflfoSxhD3Q+OPjn9uw=
Subject key identifier:   3E:67:7B:43:42:05:67:E4:9D:9B:BE:3B:8D:87:41:C2:4C:91:0A:18
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       1E8083
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/a6eed4883b6eb62cb2dfc92676f9007819029ea0.roa
Signing time:             Fri 27 Jan 2023 13:07:30 +0000
ROA not before:           Thu 26 Jan 2023 13:06:55 +0000
ROA not after:            Thu 27 Jan 2028 13:06:55 +0000
asID:                     27711
IP address blocks:        190.2.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1998979 (0x1e8083)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Jan 26 13:06:55 2023 GMT
            Not After : Jan 27 13:06:55 2028 GMT
        Subject: CN=a6eed4883b6eb62cb2dfc92676f9007819029ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:72:a3:65:d9:3e:7f:b3:0a:5c:fb:dd:26:83:
                    99:0b:b1:a2:08:f2:56:df:d7:de:65:fb:3d:5f:20:
                    4d:23:06:d8:97:fd:05:51:74:a7:05:c7:0c:b0:78:
                    65:23:cb:16:c2:b7:f0:2a:29:b7:89:d1:8e:5e:f9:
                    6c:98:af:f3:90:1d:99:11:86:f3:69:44:9a:45:31:
                    bd:45:79:70:39:9f:a8:09:f6:43:a3:eb:4c:69:1e:
                    83:c4:d3:32:f1:92:75:2f:1a:56:5e:d7:f3:28:14:
                    23:fc:ea:bb:b2:7b:ad:cd:a0:da:b4:f2:dc:1f:86:
                    90:e1:6b:3a:d3:af:e3:4d:ff:27:18:56:d4:bd:62:
                    e8:c3:44:9d:7d:0c:57:72:75:e6:4d:b0:4e:76:8b:
                    6b:b3:af:5a:96:50:ee:1a:54:71:9c:4c:6e:14:23:
                    7e:02:02:7d:38:f3:e9:46:e1:e2:7e:41:b2:0b:8e:
                    37:a4:08:5e:d2:19:6e:ca:6f:16:91:6c:b2:c2:06:
                    31:5a:ad:39:fd:e9:3c:37:be:95:69:d7:03:dd:f0:
                    05:38:0e:db:d9:f3:ad:3f:94:99:cd:c6:50:f1:8d:
                    c1:78:a1:c6:87:50:fc:84:58:22:e9:2f:41:ec:fe:
                    b0:ff:32:7c:e8:37:36:64:0d:97:ab:4f:96:6e:2d:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:67:7B:43:42:05:67:E4:9D:9B:BE:3B:8D:87:41:C2:4C:91:0A:18
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/a6eed4883b6eb62cb2dfc92676f9007819029ea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:73:67:a0:80:f9:f8:93:d7:62:23:fa:84:02:a6:eb:af:78:
         e3:e3:20:88:16:4f:29:17:60:0b:b8:96:af:92:ca:28:33:66:
         a3:86:17:24:31:e8:aa:f2:5f:0f:67:76:61:eb:ab:ee:4b:48:
         fd:ec:8d:4e:90:ea:00:56:81:b2:6b:d5:d8:8e:0b:e1:d5:5f:
         de:8a:ba:97:c8:83:30:aa:fe:2c:e9:e9:82:55:42:6c:fe:41:
         2b:eb:41:f3:4d:e1:f0:76:9d:de:8f:18:18:95:8e:2f:c1:b6:
         46:55:a2:98:df:eb:12:e6:d3:8e:43:0b:d8:3d:f9:97:d9:12:
         41:1e:b2:3e:03:2c:a6:b7:04:e0:1b:d9:3f:63:b8:3d:fe:a2:
         be:4d:0c:c1:8d:5d:a4:10:5d:da:9f:f6:1c:51:37:99:51:87:
         ca:1a:c7:f6:7c:9a:1a:83:9a:c7:70:b5:01:1c:79:67:f1:a0:
         1b:eb:21:9e:1d:70:05:b0:d2:53:06:ae:f2:3b:9e:6a:6d:b4:
         32:0e:e0:ba:8f:d4:19:19:7c:e4:f3:c7:5f:f5:bb:63:c5:55:
         0c:b2:7a:cb:ea:ac:c2:80:9b:c8:c0:21:73:a9:43:ec:70:a7:
         4e:60:3a:a1:af:3e:2c:8a:c0:8a:79:c9:88:e6:0c:df:e1:e8:
         93:33:92:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org