Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/c5e1aa25e4cc9137e200474f467e6cde63dc444b.roa
File:                     c5e1aa25e4cc9137e200474f467e6cde63dc444b.roa (raw, json)
Hash identifier:          0rJnlQhNyse8+LU2nsOBOndrbNWiIZvmfT9f/r7dkjs=
Subject key identifier:   48:2F:9F:02:9C:8F:47:09:25:91:AA:EF:52:DD:CF:0E:74:AD:AC:86
Certificate issuer:       /CN=e7910aba265e3d6933bffbf4bb39ed43b03a2ffb
Certificate serial:       2169A3
Authority key identifier: 95:A7:49:5D:DB:4D:A4:77:AD:D6:61:D7:05:CB:ED:C0:4B:54:26:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/c5e1aa25e4cc9137e200474f467e6cde63dc444b.roa
Signing time:             Thu 31 Aug 2023 12:16:39 +0000
ROA not before:           Wed 30 Aug 2023 12:16:39 +0000
ROA not after:            Sun 31 Aug 2025 12:16:39 +0000
asID:                     52295
IP address blocks:        190.211.244.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2189731 (0x2169a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7910aba265e3d6933bffbf4bb39ed43b03a2ffb
        Validity
            Not Before: Aug 30 12:16:39 2023 GMT
            Not After : Aug 31 12:16:39 2025 GMT
        Subject: CN=c5e1aa25e4cc9137e200474f467e6cde63dc444b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:4f:70:ca:36:ef:e4:29:20:48:b0:ef:87:
                    32:2f:5b:72:dd:2b:59:3d:5d:11:61:df:dc:3c:23:
                    c3:0f:17:ae:7c:77:74:90:30:2c:61:c9:54:22:d3:
                    1f:9d:2b:07:c2:ac:6c:39:a1:c7:0a:0a:0c:00:e6:
                    18:ed:ea:4b:ff:04:21:ff:49:33:23:29:d3:31:5b:
                    ff:6b:42:de:9e:c3:ef:6f:e3:c0:8d:0c:81:9f:d4:
                    7a:cf:51:f9:8b:af:12:65:d4:46:91:81:5e:94:b8:
                    08:0d:9c:26:f8:b7:eb:85:a4:8a:c2:0f:62:b4:c7:
                    0e:08:db:b7:a8:5c:32:38:f0:3d:ec:4c:46:56:8f:
                    e9:37:4a:85:4c:49:e9:e4:b5:19:d7:70:43:db:82:
                    75:c4:36:97:80:56:97:56:cd:8f:fc:b9:8d:1b:ed:
                    08:18:97:97:87:ca:2a:28:a9:d1:ff:a0:1b:3a:16:
                    ee:76:3b:2e:98:9b:51:82:79:15:8f:b2:b7:f9:3f:
                    6f:1f:89:cd:63:18:82:dd:31:a5:5e:9c:3b:3a:96:
                    2a:fd:fa:85:76:bc:2f:13:69:11:b7:fb:39:70:ad:
                    aa:cc:f2:1e:00:b4:18:2f:68:36:52:de:24:3d:1a:
                    11:80:d4:ef:b1:3d:6e:6f:b4:79:51:09:fb:b5:55:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2F:9F:02:9C:8F:47:09:25:91:AA:EF:52:DD:CF:0E:74:AD:AC:86
            X509v3 Authority Key Identifier:
                keyid:95:A7:49:5D:DB:4D:A4:77:AD:D6:61:D7:05:CB:ED:C0:4B:54:26:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/c5e1aa25e4cc9137e200474f467e6cde63dc444b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:a9:dc:6d:6b:a2:95:ec:67:37:66:f0:7b:71:13:17:da:cb:
         7c:12:31:44:ed:47:a1:0d:6b:85:19:34:c4:37:2c:5d:b5:ae:
         c7:88:0a:64:ee:c7:f0:19:65:8b:5d:e3:86:1c:ef:ea:6d:8f:
         c4:fe:c4:7e:6c:1a:73:2f:e3:d9:15:00:f0:89:5e:a4:74:bf:
         7e:e9:7d:33:fa:5d:03:46:57:ab:1e:7a:bc:65:70:30:af:0f:
         40:11:04:0f:31:34:50:43:8a:0e:71:4d:8d:c1:a9:09:80:46:
         3f:70:44:a6:8a:bb:5f:b3:06:61:3d:d1:56:94:a1:db:9c:5c:
         fe:20:f5:13:bf:bc:79:1a:08:7f:f9:88:1f:2d:28:ea:ee:7c:
         3b:3d:35:45:b0:80:ab:5d:1e:8a:3b:a5:d5:84:bd:85:41:3b:
         2f:ef:46:4b:ed:88:b2:35:ff:c7:44:a2:90:07:61:d7:9f:ca:
         74:fe:ba:a5:92:cf:f1:cf:49:22:9b:e8:b2:b5:cc:7e:c7:57:
         d8:25:e6:5d:3f:7a:05:2e:d9:71:e4:d0:46:c3:92:cd:0b:bb:
         93:3e:c0:bc:84:a7:29:75:56:c6:6d:0b:27:34:8f:71:2d:ff:
         59:46:68:28:23:d8:6e:ef:df:2d:00:ff:01:d0:a5:d6:f5:01:
         17:78:0d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 14:13:03 2023 by rpki-client on console-ams.rpki-client.org