Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/6cba110786930f987012ec6cc667ff1702694c4a.roa
File:                     6cba110786930f987012ec6cc667ff1702694c4a.roa (raw, json)
Hash identifier:          usR7cKblQ4IKDv2pcvDJQvz6nq+clHmhBRmBsb1pfkU=
Subject key identifier:   0A:D1:9D:28:58:D6:E8:F9:E8:EF:1F:3C:71:C3:02:28:A9:02:07:19
Certificate issuer:       /CN=d9df42accb42ae0dc974df4ee3b46e48d9105526
Certificate serial:       05B27D
Authority key identifier: B7:F5:EE:95:AE:93:AA:01:4C:E3:44:72:B9:C3:58:49:4E:71:CD:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9df42accb42ae0dc974df4ee3b46e48d9105526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/6cba110786930f987012ec6cc667ff1702694c4a.roa
Signing time:             Wed 24 Mar 2021 14:32:09 +0000
ROA not before:           Wed 24 Mar 2021 14:32:09 +0000
ROA not after:            Tue 24 Mar 2026 14:32:09 +0000
asID:                     262259
IP address blocks:        190.99.112.0/22 maxlen: 24
                          191.102.16.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373373 (0x5b27d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9df42accb42ae0dc974df4ee3b46e48d9105526
        Validity
            Not Before: Mar 24 14:32:09 2021 GMT
            Not After : Mar 24 14:32:09 2026 GMT
        Subject: CN=6cba110786930f987012ec6cc667ff1702694c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e1:62:53:85:b4:18:e9:0a:b1:1f:41:bd:30:
                    e9:ac:b4:81:92:59:ad:1d:2b:ca:73:3f:2e:11:27:
                    bc:d7:ab:1f:e1:f1:e3:43:53:50:c4:d7:11:db:10:
                    ab:26:0b:16:de:e6:a6:a2:e7:89:a5:65:5b:8b:bb:
                    fe:79:de:2e:cf:38:34:1f:ba:f0:b4:1e:f3:87:c1:
                    4e:38:23:f2:56:45:95:a2:c4:44:6a:e6:e4:73:e0:
                    8e:f5:77:eb:ad:fa:76:66:ba:9f:98:6b:5d:06:f0:
                    97:64:ac:1d:cd:62:ce:b8:f0:06:a5:73:9f:ac:c1:
                    b6:ce:c6:4a:2a:49:d0:8c:7f:76:ca:b9:0b:45:fa:
                    df:c8:46:43:41:1a:9f:eb:4d:1a:1d:29:8f:a0:e0:
                    3a:c0:f4:ab:d3:79:b5:67:45:34:c6:f3:02:29:38:
                    bc:dc:7e:eb:58:39:0b:2d:99:eb:d4:c4:2b:ff:73:
                    8c:cb:ab:ee:aa:ff:11:78:ba:f2:10:46:e2:18:db:
                    75:10:a7:28:83:07:4f:ad:e6:b5:b8:36:5b:f6:38:
                    34:2f:c2:e6:ed:a7:92:ec:f8:c9:e6:62:78:44:75:
                    32:44:97:60:36:cf:35:07:5e:2e:96:0c:8c:71:4b:
                    69:d8:4e:36:e3:5b:ff:7c:b4:f2:e3:c5:0d:bd:0e:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D1:9D:28:58:D6:E8:F9:E8:EF:1F:3C:71:C3:02:28:A9:02:07:19
            X509v3 Authority Key Identifier:
                keyid:B7:F5:EE:95:AE:93:AA:01:4C:E3:44:72:B9:C3:58:49:4E:71:CD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9df42accb42ae0dc974df4ee3b46e48d9105526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/6cba110786930f987012ec6cc667ff1702694c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/d9df42accb42ae0dc974df4ee3b46e48d9105526.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.112.0/22
                  191.102.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:c9:7b:06:42:e5:f9:95:f1:35:eb:98:f3:c1:68:65:07:5d:
         5b:7c:47:87:bd:a0:07:71:71:35:5a:6f:f1:de:2f:01:8d:b5:
         a6:c1:4c:06:cf:e2:ee:95:08:7e:de:f9:d7:7c:b9:35:58:39:
         5e:c7:c5:20:4e:fa:f2:f8:56:9f:cf:88:e5:1e:3e:0e:6c:45:
         fe:9b:09:ad:e2:c5:93:b4:60:c2:bc:66:1b:91:df:e2:b5:c3:
         8b:3c:36:46:b5:56:b5:e7:dd:f4:36:da:ea:27:0f:ff:be:31:
         39:77:a4:31:9e:9c:f5:0d:d1:b4:48:9d:ec:f3:fa:9a:27:f1:
         f7:fc:c9:90:2e:7d:9e:85:60:a6:9b:99:c2:59:42:92:95:b2:
         ff:87:32:23:d3:40:28:36:41:d2:fb:0c:4e:d1:f3:9a:04:e5:
         5f:09:0a:45:18:6c:65:59:c3:84:c3:8d:cf:4f:86:88:4b:44:
         99:e0:68:c6:3a:25:84:d0:55:bd:61:94:7e:7f:2c:35:f8:8f:
         a8:55:d8:f1:f9:7c:e1:cc:fa:e0:8e:62:7b:90:ed:4b:de:bd:
         0d:2e:8d:51:7b:a4:fd:76:32:75:da:69:7e:68:19:c8:4e:18:
         41:7e:5a:9b:c1:c2:10:e4:a8:3b:2f:47:10:65:85:7a:71:74:
         32:19:91:5f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDBbJ9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
ZGY0MmFjY2I0MmFlMGRjOTc0ZGY0ZWUzYjQ2ZTQ4ZDkxMDU1MjYwHhcNMjEwMzI0
MTQzMjA5WhcNMjYwMzI0MTQzMjA5WjAzMTEwLwYDVQQDEyg2Y2JhMTEwNzg2OTMw
Zjk4NzAxMmVjNmNjNjY3ZmYxNzAyNjk0YzRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg+FiU4W0GOkKsR9BvTDprLSBklmtHSvKcz8uESe816sf4fHj
Q1NQxNcR2xCrJgsW3uamoueJpWVbi7v+ed4uzzg0H7rwtB7zh8FOOCPyVkWVosRE
aubkc+CO9Xfrrfp2ZrqfmGtdBvCXZKwdzWLOuPAGpXOfrMG2zsZKKknQjH92yrkL
RfrfyEZDQRqf600aHSmPoOA6wPSr03m1Z0U0xvMCKTi83H7rWDkLLZnr1MQr/3OM
y6vuqv8ReLryEEbiGNt1EKcogwdPrea1uDZb9jg0L8Lm7aeS7PjJ5mJ4RHUyRJdg
Ns81B14ulgyMcUtp2E4241v/fLTy48UNvQ58swIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFArRnShY1uj56O8fPHHDAiipAgcZMB8GA1UdIwQYMBaAFLf17pWuk6oBTONE
crnDWElOcc2nMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDlkZjQy
YWNjYjQyYWUwZGM5NzRkZjRlZTNiNDZlNDhkOTEwNTUyNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODg3MDE0OGMtZDRjZi00ZGUxLTg4ZDMtMjdhNjBl
MDkzNmUxLzZjYmExMTA3ODY5MzBmOTg3MDEyZWM2Y2M2NjdmZjE3MDI2OTRjNGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ODcwMTQ4Yy1kNGNmLTRkZTEtODhkMy0yN2E2
MGUwOTM2ZTEvZDlkZjQyYWNjYjQyYWUwZGM5NzRkZjRlZTNiNDZlNDhkOTEwNTUy
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAr5jcAMEBL9mEDANBgkqhkiG9w0BAQsFAAOCAQEAWMl7BkLl
+ZXxNeuY88FoZQddW3xHh72gB3FxNVpv8d4vAY21psFMBs/i7pUIft7513y5NVg5
XsfFIE768vhWn8+I5R4+DmxF/psJreLFk7RgwrxmG5Hf4rXDizw2RrVWtefd9Dba
6icP/74xOXekMZ6c9Q3RtEid7PP6mifx9/zJkC59noVgppuZwllCkpWy/4cyI9NA
KDZB0vsMTtHzmgTlXwkKRRhsZVnDhMONz0+GiEtEmeBoxjolhNBVvWGUfn8sNfiP
qFXY8fl84cz64I5ie5DtS969DS6NUXuk/XYyddppfmgZyE4YQX5am8HCEOSoOy9H
EGWFenF0MhmRXw==
-----END CERTIFICATE-----
Generated at Thu Aug 3 03:44:27 2023 by rpki-client on console-ams.rpki-client.org