Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/115478773ee68a2ce8aefe90f5773dd7322cfca7.roa
File:                     115478773ee68a2ce8aefe90f5773dd7322cfca7.roa (raw, json)
Hash identifier:          +L1PWo8LhY+ExC1IpDldeAvKfcJZTSpy6OF26PB9oEo=
Subject key identifier:   EA:2C:47:60:DF:3B:12:C9:4C:5C:7C:5F:5F:EC:FE:5C:8D:A4:4F:CB
Certificate issuer:       /CN=f04c66e47b3a8a66f313f04f07882f394b836678
Certificate serial:       0D68F6
Authority key identifier: F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/115478773ee68a2ce8aefe90f5773dd7322cfca7.roa
Signing time:             Fri 28 Apr 2023 14:42:05 +0000
ROA not before:           Thu 27 Apr 2023 14:42:04 +0000
ROA not after:            Mon 28 Apr 2025 14:42:04 +0000
asID:                     52235
IP address blocks:        190.99.64.0/21 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878838 (0xd68f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04c66e47b3a8a66f313f04f07882f394b836678
        Validity
            Not Before: Apr 27 14:42:04 2023 GMT
            Not After : Apr 28 14:42:04 2025 GMT
        Subject: CN=115478773ee68a2ce8aefe90f5773dd7322cfca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d0:bb:76:e9:f7:99:7d:ea:c7:e1:f0:b9:06:
                    49:01:f8:8b:d7:99:86:19:4a:56:b5:98:38:22:72:
                    ae:ce:9e:72:3b:75:2c:2f:c8:ce:d7:19:1a:f9:d2:
                    a5:32:1a:19:96:0a:33:e8:37:7e:66:2f:bf:48:b9:
                    0f:dd:3a:d2:ad:79:c4:10:80:4c:6b:31:f1:2b:2d:
                    e2:5d:a0:5f:8a:dc:98:21:c1:40:cf:ef:20:e5:56:
                    e1:37:5d:51:10:fd:4c:e8:ae:d4:97:c1:c9:55:42:
                    27:56:66:50:e9:9e:a7:c8:d7:6c:e6:e9:c6:d7:0e:
                    a7:3d:27:a6:a8:ca:cb:7c:bc:a4:57:66:f9:b1:60:
                    ca:44:3e:2a:bd:a9:42:09:82:e6:16:9e:dc:7c:b8:
                    92:70:d6:c2:43:d1:f7:50:61:d6:71:9e:80:63:8d:
                    5f:78:4c:aa:c7:b5:00:d5:b6:d0:9a:8e:9c:9c:30:
                    94:e3:b1:87:70:8b:cb:aa:b9:a8:fe:23:e3:06:93:
                    c7:c9:45:dc:20:08:6b:53:f9:33:3a:1d:a3:46:08:
                    63:6a:d3:b3:8e:43:52:d6:f1:b0:f9:2a:66:dc:1f:
                    b1:e5:aa:d9:47:e8:ed:87:03:bb:88:39:2f:42:f0:
                    7d:6f:12:64:f7:a2:7d:a1:16:ed:78:b2:ed:99:d1:
                    9b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2C:47:60:DF:3B:12:C9:4C:5C:7C:5F:5F:EC:FE:5C:8D:A4:4F:CB
            X509v3 Authority Key Identifier:
                keyid:F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/115478773ee68a2ce8aefe90f5773dd7322cfca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/f04c66e47b3a8a66f313f04f07882f394b836678.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:fe:a7:31:59:29:04:f2:84:3b:3a:63:d7:2f:95:20:85:51:
         a6:a6:f8:5c:e4:a6:25:79:37:f8:19:a4:63:c9:c5:99:17:58:
         0a:6a:58:1a:72:c1:e6:40:96:ea:6f:ef:f2:9e:5b:54:5e:98:
         2c:18:8d:5f:01:06:9c:0a:b0:6b:0a:d4:7f:a2:83:81:ad:52:
         fa:22:e3:75:ae:83:24:79:28:6b:21:5f:0c:b9:ea:4e:63:42:
         77:32:e2:0a:1d:a1:20:3b:d2:10:30:30:ff:07:bb:a7:9e:1f:
         dd:13:fd:0d:b6:f6:7b:3b:ad:6f:c2:4e:0e:b6:d5:53:61:83:
         2b:4c:df:8b:36:32:29:49:ac:35:e7:a4:f7:e0:7a:f1:59:95:
         36:1e:cf:cc:df:eb:e5:2f:15:ee:a5:00:9c:44:8f:e6:d2:3d:
         0e:92:04:3d:fa:1e:ae:97:a6:71:70:cf:94:a0:f3:29:74:d3:
         5e:c8:87:56:5e:d4:62:e1:b1:57:e2:d9:b1:27:26:82:67:c7:
         fa:80:5a:40:73:ac:ca:37:77:09:45:1f:d9:b9:bf:94:78:cc:
         87:c4:fb:2b:f7:eb:a9:6e:42:92:66:51:e1:e1:f4:29:e6:9e:
         40:6b:8d:75:8a:53:4b:a0:ec:ec:52:c3:bd:b3:02:8e:29:d3:
         94:62:74:db
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDWj2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYw
NGM2NmU0N2IzYThhNjZmMzEzZjA0ZjA3ODgyZjM5NGI4MzY2NzgwHhcNMjMwNDI3
MTQ0MjA0WhcNMjUwNDI4MTQ0MjA0WjAzMTEwLwYDVQQDEygxMTU0Nzg3NzNlZTY4
YTJjZThhZWZlOTBmNTc3M2RkNzMyMmNmY2E3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo9C7dun3mX3qx+HwuQZJAfiL15mGGUpWtZg4InKuzp5yO3Us
L8jO1xka+dKlMhoZlgoz6Dd+Zi+/SLkP3TrSrXnEEIBMazHxKy3iXaBfityYIcFA
z+8g5VbhN11REP1M6K7Ul8HJVUInVmZQ6Z6nyNds5unG1w6nPSemqMrLfLykV2b5
sWDKRD4qvalCCYLmFp7cfLiScNbCQ9H3UGHWcZ6AY41feEyqx7UA1bbQmo6cnDCU
47GHcIvLqrmo/iPjBpPHyUXcIAhrU/kzOh2jRghjatOzjkNS1vGw+Spm3B+x5arZ
R+jthwO7iDkvQvB9bxJk96J9oRbteLLtmdGbBQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOosR2DfOxLJTFx8X1/s/lyNpE/LMB8GA1UdIwQYMBaAFPAE74BYkFBLX3jz
CW8qOyjFfPUvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjA0YzY2
ZTQ3YjNhOGE2NmYzMTNmMDRmMDc4ODJmMzk0YjgzNjY3OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODUxZjM4NjAtY2VjMi00MDk2LTk4OGYtMDBlMDE1
NjU3MGFjLzExNTQ3ODc3M2VlNjhhMmNlOGFlZmU5MGY1NzczZGQ3MzIyY2ZjYTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NTFmMzg2MC1jZWMyLTQwOTYtOTg4Zi0wMGUw
MTU2NTcwYWMvZjA0YzY2ZTQ3YjNhOGE2NmYzMTNmMDRmMDc4ODJmMzk0YjgzNjY3
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA75jQDANBgkqhkiG9w0BAQsFAAOCAQEAWv6nMVkpBPKEOzpj
1y+VIIVRpqb4XOSmJXk3+BmkY8nFmRdYCmpYGnLB5kCW6m/v8p5bVF6YLBiNXwEG
nAqwawrUf6KDga1S+iLjda6DJHkoayFfDLnqTmNCdzLiCh2hIDvSEDAw/we7p54f
3RP9Dbb2ezutb8JODrbVU2GDK0zfizYyKUmsNeek9+B68VmVNh7PzN/r5S8V7qUA
nESP5tI9DpIEPfoerpemcXDPlKDzKXTTXsiHVl7UYuGxV+LZsScmgmfH+oBaQHOs
yjd3CUUf2bm/lHjMh8T7K/frqW5CkmZR4eH0KeaeQGuNdYpTS6Ds7FLDvbMCjinT
lGJ02w==
-----END CERTIFICATE-----
Generated at Wed Dec 13 14:39:04 2023 by rpki-client on console-fra.rpki-client.org