Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c5f1494-cd25-40b5-8a12-b692479bd29b/2f6c07522eb25f573c18933a9d64a0374633b1a0.roa
File:                     2f6c07522eb25f573c18933a9d64a0374633b1a0.roa (raw, json)
Hash identifier:          0Uf1oNSrs2gU7SD6jw3eStQhEI0rfGFKFTYaq4tR1VA=
Subject key identifier:   20:55:81:51:9C:12:AE:E6:F8:85:49:C1:97:0B:06:4E:76:38:F0:9D
Certificate issuer:       /CN=54bbe116a94d8fd0318149142af3343cc2de95c2
Certificate serial:       0BF7
Authority key identifier: A0:C8:ED:68:AE:F7:38:A1:16:DC:6C:88:60:96:73:43:92:34:3D:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54bbe116a94d8fd0318149142af3343cc2de95c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c5f1494-cd25-40b5-8a12-b692479bd29b/2f6c07522eb25f573c18933a9d64a0374633b1a0.roa
Signing time:             Fri 14 May 2021 01:44:36 +0000
ROA not before:           Thu 13 May 2021 03:00:00 +0000
ROA not after:            Sat 13 May 2023 03:00:00 +0000
asID:                     269926
IP address blocks:        190.83.8.0/22 maxlen: 32
                          190.83.8.0/24 maxlen: 32
                          190.83.9.0/24 maxlen: 32
                          190.83.10.0/24 maxlen: 32
                          190.83.11.0/24 maxlen: 32
                          2803:52e0::/32 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3063 (0xbf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54bbe116a94d8fd0318149142af3343cc2de95c2
        Validity
            Not Before: May 13 03:00:00 2021 GMT
            Not After : May 13 03:00:00 2023 GMT
        Subject: CN=2f6c07522eb25f573c18933a9d64a0374633b1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:8e:bd:97:dc:22:a9:97:5e:30:c1:3d:e6:
                    a0:2e:93:d2:69:a7:4e:ae:b9:e6:83:84:49:cf:84:
                    69:6a:e1:a9:5c:cf:91:4d:a8:3b:e3:be:10:a2:c3:
                    21:a5:10:de:6e:f6:44:34:52:db:2f:50:77:59:d9:
                    70:93:6e:8b:9a:c4:af:7f:43:08:ce:b5:eb:41:13:
                    9c:30:7d:de:74:ae:9d:0c:ed:45:e3:16:99:19:59:
                    b3:c6:69:ee:81:16:9c:ba:90:b8:aa:e7:43:14:10:
                    98:af:d5:79:bb:86:2c:b4:db:c4:4b:4a:be:b8:14:
                    c6:07:f9:fb:f1:e7:e0:af:12:ea:bb:74:00:6c:95:
                    b0:e1:fa:cb:e1:54:5d:fb:e3:78:6d:0a:76:0f:ab:
                    ea:71:5f:7e:4e:52:d4:ac:97:42:c0:ff:02:53:8e:
                    02:67:a4:70:91:0e:ee:e6:de:d9:e6:59:f3:55:c7:
                    8e:32:24:e2:c9:c5:57:fe:48:b7:65:9e:25:a2:e9:
                    2a:8d:07:29:e4:f4:fd:fe:4b:18:fb:6f:0b:b6:18:
                    4e:87:d7:17:93:f6:d5:2d:c5:74:82:d3:5f:37:86:
                    17:42:9f:28:6b:2e:e1:93:13:24:5f:99:79:a7:c0:
                    29:08:51:74:2b:c6:9a:30:bf:de:bb:36:1a:09:5e:
                    67:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:55:81:51:9C:12:AE:E6:F8:85:49:C1:97:0B:06:4E:76:38:F0:9D
            X509v3 Authority Key Identifier:
                keyid:A0:C8:ED:68:AE:F7:38:A1:16:DC:6C:88:60:96:73:43:92:34:3D:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54bbe116a94d8fd0318149142af3343cc2de95c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c5f1494-cd25-40b5-8a12-b692479bd29b/2f6c07522eb25f573c18933a9d64a0374633b1a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c5f1494-cd25-40b5-8a12-b692479bd29b/54bbe116a94d8fd0318149142af3343cc2de95c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.8.0/22
                IPv6:
                  2803:52e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:d2:c2:93:f0:5b:f0:62:d3:8b:f0:86:21:d9:a8:92:5b:d1:
         f5:7b:cb:5b:1b:33:9d:cd:3f:5b:d1:63:da:7b:3c:77:a4:ef:
         59:40:2b:5d:8d:ad:41:6d:14:20:a5:84:14:b7:48:83:cb:cd:
         24:db:3b:23:fb:5b:7c:ef:b7:e4:3b:88:bb:e1:b8:17:fa:b1:
         78:64:77:43:82:bd:42:95:4b:b1:14:a6:a9:cc:a1:56:db:51:
         28:4c:bd:62:a8:9c:f6:bb:8d:88:12:eb:b8:8d:60:a3:2a:fd:
         2b:19:f5:e1:d2:00:74:10:ef:7d:51:73:6e:dc:37:bb:e3:ae:
         24:ac:1f:c2:42:62:8a:b8:ef:d2:89:a8:6b:b1:f9:23:88:fa:
         37:15:f1:87:21:5b:fd:c2:c8:ea:90:70:06:17:be:8c:24:c7:
         c8:a8:50:df:bf:59:a5:86:f6:49:f2:d0:76:9a:62:eb:29:f5:
         1a:27:d8:15:56:8d:a5:db:31:81:26:0e:27:58:cd:0e:c7:0b:
         77:f0:2c:66:5b:e6:63:d1:7b:2c:19:dc:ba:77:77:fe:1e:e7:
         7b:36:92:f2:e9:f9:a7:bb:e0:57:79:ec:1d:62:81:86:32:84:
         8e:7e:25:01:64:e1:33:45:9f:b5:d5:71:b2:e4:b0:d4:d1:da:
         92:fb:9e:2c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTRi
YmUxMTZhOTRkOGZkMDMxODE0OTE0MmFmMzM0M2NjMmRlOTVjMjAeFw0yMTA1MTMw
MzAwMDBaFw0yMzA1MTMwMzAwMDBaMDMxMTAvBgNVBAMTKDJmNmMwNzUyMmViMjVm
NTczYzE4OTMzYTlkNjRhMDM3NDYzM2IxYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCx1469l9wiqZdeMME95qAuk9Jpp06uueaDhEnPhGlq4alcz5FN
qDvjvhCiwyGlEN5u9kQ0UtsvUHdZ2XCTbouaxK9/QwjOtetBE5wwfd50rp0M7UXj
FpkZWbPGae6BFpy6kLiq50MUEJiv1Xm7hiy028RLSr64FMYH+fvx5+CvEuq7dABs
lbDh+svhVF3743htCnYPq+pxX35OUtSsl0LA/wJTjgJnpHCRDu7m3tnmWfNVx44y
JOLJxVf+SLdlniWi6SqNBynk9P3+Sxj7bwu2GE6H1xeT9tUtxXSC0183hhdCnyhr
LuGTEyRfmXmnwCkIUXQrxpowv967NhoJXmcdAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUIFWBUZwSrub4hUnBlwsGTnY48J0wHwYDVR0jBBgwFoAUoMjtaK73OKEW3GyI
YJZzQ5I0PTMwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS81NGJiZTEx
NmE5NGQ4ZmQwMzE4MTQ5MTQyYWYzMzQzY2MyZGU5NWMyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy82YzVmMTQ5NC1jZDI1LTQwYjUtOGExMi1iNjkyNDc5
YmQyOWIvMmY2YzA3NTIyZWIyNWY1NzNjMTg5MzNhOWQ2NGEwMzc0NjMzYjFhMC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzZjNWYxNDk0LWNkMjUtNDBiNS04YTEyLWI2OTI0
NzliZDI5Yi81NGJiZTExNmE5NGQ4ZmQwMzE4MTQ5MTQyYWYzMzQzY2MyZGU5NWMy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCvlMIMA0EAgACMAcDBQAoA1LgMA0GCSqGSIb3DQEBCwUAA4IB
AQBG0sKT8FvwYtOL8IYh2aiSW9H1e8tbGzOdzT9b0WPaezx3pO9ZQCtdja1BbRQg
pYQUt0iDy80k2zsj+1t877fkO4i74bgX+rF4ZHdDgr1ClUuxFKapzKFW21EoTL1i
qJz2u42IEuu4jWCjKv0rGfXh0gB0EO99UXNu3De7464krB/CQmKKuO/Siahrsfkj
iPo3FfGHIVv9wsjqkHAGF76MJMfIqFDfv1mlhvZJ8tB2mmLrKfUaJ9gVVo2l2zGB
Jg4nWM0Oxwt38CxmW+Zj0XssGdy6d3f+Hud7NpLy6fmnu+BXeewdYoGGMoSOfiUB
ZOEzRZ+11XGy5LDU0dqS+54s
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-ams.rpki-client.org