Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/504a73b83abfce930b33f1c2f38d6a9cd70d15c2.roa
File:                     504a73b83abfce930b33f1c2f38d6a9cd70d15c2.roa (raw, json)
Hash identifier:          20029irHx2hjZ8Mxn/PpBFJqYJLhafqNquuISkbcPR8=
Subject key identifier:   1E:27:9A:0C:32:3C:1E:75:5A:13:F8:A8:F2:11:F1:29:E8:8A:51:B4
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       26B3A8
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/504a73b83abfce930b33f1c2f38d6a9cd70d15c2.roa
Signing time:             Fri 26 May 2023 19:17:44 +0000
ROA not before:           Thu 25 May 2023 19:17:44 +0000
ROA not after:            Mon 26 May 2025 19:17:44 +0000
asID:                     278
IP address blocks:        132.248.172.0/23 maxlen: 24
                          132.248.180.0/23 maxlen: 24
                          132.248.184.0/23 maxlen: 25
                          132.248.120.0/23 maxlen: 24
                          132.248.140.0/22 maxlen: 24
                          132.248.220.0/23 maxlen: 24
                          132.248.226.0/23 maxlen: 24
                          132.248.238.0/23 maxlen: 24
                          132.248.248.0/23 maxlen: 24
                          132.247.214.0/23 maxlen: 24
                          132.247.228.0/23 maxlen: 24
                          132.247.154.0/23 maxlen: 24
                          132.247.170.0/23 maxlen: 24
                          132.247.178.0/23 maxlen: 24
                          132.247.180.0/23 maxlen: 24
                          132.247.184.0/23 maxlen: 24
                          132.247.190.0/23 maxlen: 24
                          132.247.196.0/23 maxlen: 24
                          132.248.80.0/23 maxlen: 24
                          132.248.86.0/23 maxlen: 24
                          132.248.88.0/21 maxlen: 24
                          132.248.96.0/21 maxlen: 24
                          132.248.4.0/23 maxlen: 24
                          132.248.0.0/16 maxlen: 27
                          132.248.28.0/23 maxlen: 24
                          132.248.32.0/22 maxlen: 24
                          132.248.40.0/23 maxlen: 24
                          132.247.0.0/17 maxlen: 24
                          132.247.4.0/22 maxlen: 24
                          132.247.10.0/23 maxlen: 24
                          132.247.12.0/22 maxlen: 24
                          132.247.0.0/16 maxlen: 27
                          132.248.0.0/16 maxlen: 27
                          132.247.18.0/23 maxlen: 24
                          132.247.22.0/23 maxlen: 24
                          132.247.102.0/23 maxlen: 24
                          132.247.128.0/23 maxlen: 24
                          132.247.50.0/23 maxlen: 24
                          132.247.52.0/22 maxlen: 24
                          132.247.56.0/21 maxlen: 24
                          132.247.64.0/21 maxlen: 24
                          132.247.76.0/23 maxlen: 24
                          132.247.84.0/23 maxlen: 24
                          132.247.88.0/23 maxlen: 24
                          132.247.92.0/22 maxlen: 24
                          132.247.96.0/22 maxlen: 24
                          132.248.184.0/25 maxlen: 25
                          2001:1218:60b2::/47 maxlen: 48
                          2001:1218:60b4::/46 maxlen: 48
                          2001:1218:60b8::/45 maxlen: 48
                          2001:1218:5002::/47 maxlen: 48
                          2001:1218:5004::/47 maxlen: 48
                          2001:1218:6000::/43 maxlen: 48
                          2001:1218:6020::/46 maxlen: 48
                          2001:1218:6024::/47 maxlen: 48
                          2001:1218:602a::/47 maxlen: 48
                          2001:1218:602c::/46 maxlen: 48
                          2001:1218:6030::/44 maxlen: 48
                          2001:1218:6040::/43 maxlen: 48
                          2001:1218:6060::/47 maxlen: 48
                          2001:1218::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2536360 (0x26b3a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: May 25 19:17:44 2023 GMT
            Not After : May 26 19:17:44 2025 GMT
        Subject: CN=504a73b83abfce930b33f1c2f38d6a9cd70d15c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:39:58:a8:55:de:6e:91:43:12:85:68:ba:14:
                    a2:28:b5:49:2e:19:b4:e6:5c:f3:46:95:06:d4:f3:
                    74:5f:db:f3:d4:ad:fa:6c:b9:6a:c5:5d:6d:dc:1d:
                    89:95:fc:12:4a:8f:04:10:28:d3:21:52:1a:cc:af:
                    1d:77:86:f1:e4:63:db:8c:08:62:c3:4f:d0:f8:3d:
                    b3:46:2a:8e:22:99:5a:ce:e3:7b:85:86:24:6c:3f:
                    ac:e6:b7:fa:21:f0:88:0f:2e:10:ff:cf:fb:ef:e2:
                    b6:72:66:91:c1:fe:cf:88:5e:9d:f0:73:8d:1d:ff:
                    76:d7:cd:07:11:10:b7:0b:c2:a2:b1:4a:90:05:08:
                    00:bc:52:12:62:aa:7e:44:0f:e1:35:a9:d0:7d:0f:
                    dd:97:1f:06:32:f6:c1:b0:f0:c3:f5:cb:a0:8b:ad:
                    48:e3:8d:0b:7d:95:af:91:bf:38:7e:40:a6:27:13:
                    5e:ad:3b:21:cc:8a:43:7c:bf:01:48:35:ba:72:ce:
                    3a:ad:c3:8e:11:68:39:2d:eb:9f:dc:aa:17:df:9c:
                    28:50:95:83:41:92:3e:47:27:d4:6b:7a:2c:f0:b6:
                    5d:08:7f:66:fb:ca:9a:5d:4d:53:cb:2e:1b:71:1b:
                    e6:84:0e:1a:1e:c8:8c:ea:c8:8a:91:6f:58:5a:63:
                    16:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:27:9A:0C:32:3C:1E:75:5A:13:F8:A8:F2:11:F1:29:E8:8A:51:B4
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/504a73b83abfce930b33f1c2f38d6a9cd70d15c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.0.0-132.248.255.255
                IPv6:
                  2001:1218::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:78:68:5d:2a:3a:a9:a3:c6:4b:c8:f4:be:6d:7f:22:15:16:
         d2:91:f1:e8:50:8e:ea:42:6c:d0:e1:67:16:a8:35:59:8a:53:
         e0:8d:ab:65:52:c5:d8:f3:7c:de:c5:3c:23:3e:f9:45:87:cf:
         dc:01:4c:b6:b7:cb:4a:fb:c7:fa:be:21:b8:7c:ce:ed:99:95:
         70:3d:1a:6f:c9:86:e8:b7:04:f2:4d:52:1d:c1:a0:0d:47:82:
         02:81:60:98:f9:ca:26:1c:5d:88:86:8e:c8:9f:69:e5:f7:d8:
         3b:db:5d:58:59:67:db:74:c6:66:f3:65:7f:fe:0f:0e:c8:5b:
         7e:8a:7c:17:bc:ae:a4:21:64:25:67:16:44:34:9a:24:31:31:
         38:3d:56:8c:97:d6:47:50:92:57:f9:10:4f:87:56:68:02:65:
         e7:ef:ed:2d:f0:c2:fc:88:b3:ae:62:e2:79:c1:f3:39:e6:6c:
         35:54:08:19:fb:f0:ec:0a:5e:16:d1:77:43:3c:29:63:32:e8:
         03:ad:19:23:a7:54:d8:bb:97:83:17:3f:7e:2c:3f:55:29:8c:
         05:85:31:7c:b9:7a:6f:be:9e:d4:28:fb:21:c4:ca:37:fd:32:
         4f:8c:f3:4e:50:63:76:07:95:67:08:b0:be:7f:e0:74:9f:6d:
         17:ef:54:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org