Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/e4d3a260a36c0133ee95b5b7b86281ad63066804.roa
File:                     e4d3a260a36c0133ee95b5b7b86281ad63066804.roa (raw, json)
Hash identifier:          OhD/1Ll5SI/SXyhBLqY2SKjpb21EKU15XeJJFeefnmM=
Subject key identifier:   A1:67:E3:37:CA:DA:D1:DE:DA:EA:8F:0B:B5:8B:A5:56:61:A7:CA:8C
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0DFEFC
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/e4d3a260a36c0133ee95b5b7b86281ad63066804.roa
Signing time:             Wed 24 Mar 2021 14:31:35 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     264638
IP address blocks:        190.2.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917244 (0xdfefc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=e4d3a260a36c0133ee95b5b7b86281ad63066804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:26:8b:4d:d0:34:90:e0:b7:3e:79:7a:a0:c5:
                    5c:a5:53:ea:e8:42:3a:65:fa:31:63:c3:60:c9:78:
                    77:f5:6c:49:68:dc:dd:2d:1a:e4:b7:90:ca:86:93:
                    4f:bf:d6:3e:84:6d:84:e1:d0:79:39:7d:00:ea:d8:
                    61:b3:c1:96:1d:63:ba:f9:09:00:81:ed:5f:63:66:
                    f4:de:59:6a:f7:2d:51:6e:f3:5b:1d:4e:9f:ee:25:
                    23:10:81:39:0f:49:10:24:77:b6:80:5d:5b:99:0d:
                    35:59:89:21:3d:de:ab:0e:79:34:ac:81:db:83:35:
                    93:98:29:fd:9f:cf:66:6c:57:1b:1e:2d:45:83:c7:
                    6d:d0:d2:93:7f:f6:d6:22:f3:af:c4:b8:fe:12:13:
                    f8:37:50:d7:56:4e:17:5a:4e:85:c5:fd:bf:85:2c:
                    f8:1c:78:2d:78:b5:42:2c:85:7e:58:80:3d:34:44:
                    6f:50:cb:bf:e6:fd:cb:7a:35:2e:a6:50:aa:84:28:
                    cd:1b:37:f9:60:ab:a1:22:d9:31:9a:cb:27:ba:a3:
                    c7:8b:a1:5a:3c:a6:dd:59:14:a8:4e:18:88:89:15:
                    df:17:f9:34:de:70:3f:46:cb:f2:b5:30:11:7f:e5:
                    4b:52:03:6b:f9:8e:ad:43:3b:9a:7d:64:2a:98:b9:
                    ac:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:67:E3:37:CA:DA:D1:DE:DA:EA:8F:0B:B5:8B:A5:56:61:A7:CA:8C
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/e4d3a260a36c0133ee95b5b7b86281ad63066804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:00:cf:9a:ef:43:5d:bd:b7:3c:78:75:89:c3:6a:89:10:66:
         74:a3:de:20:ef:e7:c1:e4:db:ee:98:57:2f:e8:3a:f0:b7:23:
         4e:b9:a7:48:8a:d2:0f:b3:8b:0e:eb:9a:e3:01:73:74:27:ca:
         88:03:86:75:1e:d3:5d:b7:c9:0e:76:30:3e:19:52:e2:41:17:
         9a:aa:a8:47:66:aa:fe:2c:ad:b9:3c:6b:a8:38:4f:59:d4:53:
         c0:67:d6:c4:2a:42:c2:9b:94:41:ad:3c:84:3c:01:74:dc:2c:
         2d:fa:91:2d:bf:f2:73:a0:6d:be:2d:4a:91:56:77:4d:46:13:
         85:64:c3:25:c5:95:3b:0b:23:d0:d4:bf:1e:b1:a1:f7:46:a3:
         83:f9:61:13:80:7b:b5:52:43:a4:e6:b1:8c:cb:e5:54:ac:71:
         ec:c8:47:32:6a:5f:47:87:8b:8f:0e:cf:d9:0c:c1:36:56:8e:
         cc:1a:68:84:76:f9:cb:15:5e:62:ca:2f:e8:c8:68:e3:53:87:
         03:b3:72:ea:4d:d4:e0:9a:fb:06:25:7f:5d:d2:13:1e:5a:c0:
         b7:50:8a:8b:35:56:34:0d:46:6d:c1:58:5d:8f:b9:4a:64:df:
         1d:ae:e9:17:76:88:86:ca:a9:42:2a:fb:33:9c:0c:8a:67:8a:
         f1:55:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org