Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/b4f322337fb0a1714129dde1d5269fa005bde3a9.roa
File:                     b4f322337fb0a1714129dde1d5269fa005bde3a9.roa (raw, json)
Hash identifier:          wm94rRbFy3JesgP60yX0eYfckA4kpArla7JyDjL/vd8=
Subject key identifier:   26:AF:0A:88:5D:97:B7:40:91:07:96:3E:61:51:E3:7B:6B:5D:9E:75
Certificate issuer:       /CN=f04c66e47b3a8a66f313f04f07882f394b836678
Certificate serial:       054A
Authority key identifier: F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/b4f322337fb0a1714129dde1d5269fa005bde3a9.roa
Signing time:             Thu 25 Nov 2021 17:38:37 +0000
ROA not before:           Thu 25 Nov 2021 03:00:00 +0000
ROA not after:            Sat 25 Nov 2023 03:00:00 +0000
asID:                     52235
IP address blocks:        190.99.64.0/21 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1354 (0x54a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04c66e47b3a8a66f313f04f07882f394b836678
        Validity
            Not Before: Nov 25 03:00:00 2021 GMT
            Not After : Nov 25 03:00:00 2023 GMT
        Subject: CN=b4f322337fb0a1714129dde1d5269fa005bde3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:34:b8:3c:9b:aa:e4:c8:c7:d9:0b:87:31:
                    3e:ee:44:d8:bc:73:8c:ca:c7:b2:21:e3:f3:d4:02:
                    bb:6d:87:41:30:f1:8d:47:15:02:e2:ab:de:e9:62:
                    85:f9:66:43:51:06:30:85:d9:18:5c:de:2f:12:15:
                    3d:cb:bf:ec:4c:0b:b5:1e:20:5d:6f:a0:25:27:6f:
                    c4:1d:67:87:28:1b:57:aa:35:38:4d:68:5e:8f:6e:
                    44:d7:29:b8:8f:62:43:81:c6:ac:b6:0e:f7:dd:9b:
                    db:43:b5:2e:d8:ae:d9:01:43:09:5a:49:96:36:94:
                    3c:69:ed:a1:52:05:28:be:9a:2a:b3:df:f2:fd:2d:
                    5f:6f:d9:25:9f:17:0a:eb:63:3c:96:4d:65:76:0a:
                    2b:71:3e:f7:88:92:c7:9b:15:64:76:21:21:6f:ce:
                    5f:99:32:10:dc:13:b6:89:a1:e7:c6:d3:64:ae:1a:
                    b4:69:8a:e7:88:81:74:57:22:ab:cf:af:e5:5b:f0:
                    8c:80:3d:7c:f3:f7:61:bc:a6:f6:59:6a:a3:06:a3:
                    7e:8b:01:e0:c9:2a:a2:99:39:a6:69:aa:49:ad:21:
                    ed:61:5e:27:b8:78:98:fa:31:da:29:e1:27:0e:63:
                    fd:03:6c:96:76:c3:7f:bc:8e:d8:58:f2:06:76:0a:
                    e1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AF:0A:88:5D:97:B7:40:91:07:96:3E:61:51:E3:7B:6B:5D:9E:75
            X509v3 Authority Key Identifier:
                keyid:F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/b4f322337fb0a1714129dde1d5269fa005bde3a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/f04c66e47b3a8a66f313f04f07882f394b836678.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:ed:8f:bf:53:c3:c2:ad:d2:16:33:2d:a8:70:26:f6:65:c0:
         b8:42:29:5e:8e:9b:56:70:4f:69:78:52:55:b7:ba:f8:b3:4c:
         bf:47:a8:97:85:75:87:0d:49:0b:3d:2a:b3:a0:14:7d:4c:bd:
         99:8c:9d:61:af:3e:28:3e:e0:b8:69:c9:cd:48:0b:14:17:c9:
         2d:c8:7e:a3:b0:13:70:19:fa:9b:63:f6:79:ac:e6:9e:6e:99:
         85:5e:4c:9f:6d:f1:1d:6b:0c:b5:2f:d1:d9:dd:d7:33:85:dd:
         7c:9b:98:ed:20:d1:09:b0:65:f9:66:4b:0b:4a:1a:3a:03:05:
         5f:19:7d:09:06:26:aa:d0:67:07:d9:28:98:4b:79:4a:a4:46:
         b4:51:17:78:34:00:60:12:78:af:91:53:b6:29:d6:c3:cb:a9:
         50:10:05:4b:6c:08:8f:a0:7b:88:df:65:69:65:16:10:2b:43:
         93:97:20:63:fc:6e:5a:64:11:09:94:b6:ec:47:ea:1b:2a:f3:
         6d:5d:fe:10:80:6c:d3:0a:fc:0d:47:e3:ef:32:ca:98:c2:bf:
         23:37:66:99:2c:cb:d4:da:89:22:f1:72:0b:2f:78:68:e0:ca:
         f6:f9:bf:44:95:9c:24:d2:d5:04:97:93:7d:1e:64:9c:76:87:
         4a:c0:1e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org