Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/8c0281cf9148085a24b49c5031ef55b93cfc94e6.roa
File:                     8c0281cf9148085a24b49c5031ef55b93cfc94e6.roa (raw, json)
Hash identifier:          nlmFLaVFXN+GJ4bpZKp+YlKREBLPxQsngP8YzXCYATY=
Subject key identifier:   3D:A1:5D:38:93:E0:33:CA:F1:C8:7C:51:28:CE:16:36:D5:00:A7:A9
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       0D7E53
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/8c0281cf9148085a24b49c5031ef55b93cfc94e6.roa
Signing time:             Wed 24 Mar 2021 14:34:52 +0000
ROA not before:           Wed 24 Mar 2021 14:34:51 +0000
ROA not after:            Tue 24 Mar 2026 14:34:51 +0000
asID:                     26426
IP address blocks:        190.242.8.0/24 maxlen: 24
                          190.242.13.0/24 maxlen: 24
                          190.242.21.0/24 maxlen: 24
                          190.242.68.0/23 maxlen: 24
                          190.242.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884307 (0xd7e53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: Mar 24 14:34:51 2021 GMT
            Not After : Mar 24 14:34:51 2026 GMT
        Subject: CN=8c0281cf9148085a24b49c5031ef55b93cfc94e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:ba:27:da:e6:c8:7c:39:f4:5a:fe:9a:53:
                    e6:12:5f:17:74:7d:9d:d3:2d:18:e6:e3:55:da:a1:
                    c7:ca:41:44:ff:1d:70:84:d5:91:60:e3:9a:d7:ea:
                    42:84:a8:8d:34:22:6e:63:8c:26:fa:18:df:de:64:
                    b0:65:f3:b0:31:e2:c1:0f:b7:ed:b7:b4:79:f8:74:
                    6b:d2:ce:72:22:d2:69:07:16:ff:75:5f:2b:77:6b:
                    d4:57:76:51:f2:76:b0:4a:6a:71:b3:4e:f8:50:66:
                    e7:b3:f8:3d:bc:46:f0:1a:5f:b6:39:a8:ee:15:ce:
                    85:e0:c0:70:1f:fe:85:78:77:d8:92:b8:23:f5:86:
                    5d:db:0e:37:3f:65:cc:3d:df:4b:7a:44:fd:8e:0b:
                    0a:c3:f6:8c:5c:02:fb:e0:f0:d6:4c:14:fc:c1:c9:
                    a2:8b:9f:e0:d5:a1:52:87:94:df:0a:f9:47:74:e7:
                    78:c3:85:53:70:10:47:92:66:85:39:6d:c8:a8:0c:
                    f1:82:ae:4c:f9:20:91:c7:8b:bc:1c:9c:00:b7:62:
                    9a:46:3a:19:ab:f9:dc:d1:c5:fa:18:f2:80:c4:68:
                    be:29:ec:c7:38:5b:67:4a:d7:da:8b:f7:3d:18:00:
                    e8:20:66:be:9d:9a:fa:07:8c:53:b3:2d:aa:47:4e:
                    3f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A1:5D:38:93:E0:33:CA:F1:C8:7C:51:28:CE:16:36:D5:00:A7:A9
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/8c0281cf9148085a24b49c5031ef55b93cfc94e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.8.0/24
                  190.242.13.0/24
                  190.242.21.0/24
                  190.242.68.0-190.242.70.255

    Signature Algorithm: sha256WithRSAEncryption
         18:a7:be:0a:bd:06:e5:36:b9:16:bb:b3:10:97:8d:ec:58:ea:
         f0:92:ff:a2:88:e9:5a:d9:6f:74:b4:09:36:b8:ce:d6:5d:c3:
         bd:b8:65:94:c6:1c:a6:2a:1d:7c:1b:47:c9:9e:e2:c3:ba:86:
         14:dd:a1:7f:86:6d:6d:7f:61:76:67:e5:de:f9:15:70:dc:3b:
         9d:7d:48:3d:58:c4:79:5d:d2:32:9c:94:b1:ce:6d:17:e2:94:
         f6:c8:b4:66:ed:83:11:41:78:29:cc:44:8f:52:c7:33:52:08:
         c7:f6:1f:df:ea:04:c6:4c:e3:c6:79:6a:af:8d:eb:94:8d:5b:
         49:9e:e7:17:d5:cb:cc:3c:85:83:5d:9e:4a:ab:8e:65:d2:48:
         4c:f6:69:7a:b7:82:2e:55:8d:90:3e:92:3d:06:cd:22:a1:50:
         cc:85:59:d5:81:cb:e4:3d:8c:7c:26:cc:c7:14:e8:e7:7b:fd:
         4e:bf:32:25:5d:b2:fb:e9:ae:3a:30:50:7e:ef:d8:fb:24:42:
         60:f5:79:18:9a:c1:51:f1:cb:78:05:58:77:6d:01:bf:f2:55:
         5b:73:c7:1a:a4:67:fa:bb:d7:79:7f:99:93:46:86:c9:e5:8b:
         d3:10:4a:7c:38:17:02:b0:1d:0e:8a:8e:ae:fb:cd:fd:48:41:
         20:41:9d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org