Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/91efcc75366b158b3a675ba6dd7bbedc2d38ea97.roa
File:                     91efcc75366b158b3a675ba6dd7bbedc2d38ea97.roa (raw, json)
Hash identifier:          /LXR0oD9vWLt0FS3e0fTLURMRTHai1XoMFGwOSwRTHM=
Subject key identifier:   94:C2:9B:BE:FA:A5:22:F0:B4:5A:B7:2A:81:91:0F:A5:3F:89:B3:E1
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       0D76EA
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/91efcc75366b158b3a675ba6dd7bbedc2d38ea97.roa
Signing time:             Wed 24 Mar 2021 14:34:52 +0000
ROA not before:           Wed 24 Mar 2021 14:34:51 +0000
ROA not after:            Tue 24 Mar 2026 14:34:51 +0000
asID:                     52262
IP address blocks:        190.242.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882410 (0xd76ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: Mar 24 14:34:51 2021 GMT
            Not After : Mar 24 14:34:51 2026 GMT
        Subject: CN=91efcc75366b158b3a675ba6dd7bbedc2d38ea97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ad:25:fc:e6:d7:6d:b9:7b:14:71:34:8c:b7:
                    4b:8d:7c:2b:e4:d1:9b:36:bd:1d:87:5f:f6:1f:bc:
                    14:a1:51:7b:c3:8b:6d:a9:fd:5b:c0:60:dc:7a:12:
                    92:59:7a:4b:38:ab:cc:a0:a7:e2:30:18:ae:78:e7:
                    84:9b:0d:1d:2c:07:ed:e8:aa:10:65:67:5e:c9:c6:
                    84:28:10:93:69:28:e8:c5:f2:ef:c1:bc:85:95:81:
                    85:ff:1c:af:46:e1:0d:f5:e2:bd:4f:cd:c9:6b:c3:
                    cc:78:f3:65:7b:f8:1e:c7:91:51:63:f0:4b:d4:16:
                    a4:c4:5d:10:b0:36:e3:1c:f8:34:b5:4e:3b:ec:3f:
                    79:55:3f:11:cc:90:3a:63:5a:bf:12:af:d8:a2:a1:
                    3b:3e:ef:11:09:04:8a:64:1f:5d:c4:c7:34:53:93:
                    2f:90:8c:6a:7f:4b:9f:45:c5:be:cf:60:23:0e:f5:
                    75:e5:ee:7e:5b:df:a7:fc:9d:cc:59:fa:1d:6e:82:
                    0c:cc:7b:95:02:39:3c:d8:f7:d2:a7:dc:f9:34:52:
                    69:73:a0:52:e1:f9:a9:7f:18:b5:e5:fc:d7:e0:ed:
                    3f:06:f7:6e:fb:a7:0b:bc:5f:40:87:73:57:63:ec:
                    25:b4:0f:1b:93:c4:d6:13:18:bb:bf:be:17:0e:3f:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C2:9B:BE:FA:A5:22:F0:B4:5A:B7:2A:81:91:0F:A5:3F:89:B3:E1
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/91efcc75366b158b3a675ba6dd7bbedc2d38ea97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:76:19:ac:a6:0d:b5:33:9a:a6:02:36:a8:8c:bf:5b:6b:39:
         7a:3a:f5:d5:de:a1:da:15:7b:07:08:d8:25:c2:0a:9c:9c:71:
         08:1a:db:aa:74:dc:9d:2c:74:e2:75:bb:fc:fa:9f:d0:7a:1a:
         09:2d:c6:1c:d5:1b:e4:bf:74:6d:d9:07:c7:24:41:e9:5a:ba:
         26:ee:e3:36:05:93:c8:a4:4e:c5:bc:08:db:c4:57:23:80:bf:
         62:de:d4:f9:3e:48:82:76:34:04:6c:ab:87:34:63:f7:e0:da:
         c1:45:91:d4:38:0f:1a:ea:69:dc:80:4d:33:e6:a6:c2:bc:1a:
         a5:46:e8:80:f0:9c:4d:e5:7c:08:63:e7:7a:12:29:6a:df:57:
         71:a1:d9:d1:21:41:37:1e:74:a8:e6:6d:80:ec:01:25:2e:53:
         5c:96:2b:1e:a9:cd:ce:34:71:2b:bc:c1:bd:7f:18:4b:fe:54:
         ad:3d:3c:13:7f:25:00:38:03:25:bc:f4:89:16:13:be:0a:6b:
         4f:16:7f:1f:72:7a:d6:7b:94:1b:09:07:d1:24:8a:38:28:e7:
         d4:2e:10:2b:30:11:89:f1:1b:82:01:a9:d8:78:4f:87:f6:ab:
         24:4f:13:4c:1b:52:41:ba:f8:5f:8f:81:c8:ff:04:ce:5d:33:
         d3:7c:2c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org