Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/6a7d4f040f791a6ed409d66738bd98a82e9b3a08.roa
File:                     6a7d4f040f791a6ed409d66738bd98a82e9b3a08.roa (raw, json)
Hash identifier:          EolX8hZ+wLl6O3kteiq2vNy0WjU5DJ3Lrneec0aISJ4=
Subject key identifier:   93:25:3F:BC:4C:66:E4:C1:16:BA:96:77:49:8A:54:BD:0E:C1:87:7C
Certificate issuer:       /CN=8cca422c9ff30980ab758c3310c2e40a2e836482
Certificate serial:       0DBFBE
Authority key identifier: 2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/6a7d4f040f791a6ed409d66738bd98a82e9b3a08.roa
Signing time:             Wed 24 Mar 2021 14:36:27 +0000
ROA not before:           Wed 24 Mar 2021 14:36:26 +0000
ROA not after:            Tue 24 Mar 2026 14:36:26 +0000
asID:                     52468
IP address blocks:        190.61.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901054 (0xdbfbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cca422c9ff30980ab758c3310c2e40a2e836482
        Validity
            Not Before: Mar 24 14:36:26 2021 GMT
            Not After : Mar 24 14:36:26 2026 GMT
        Subject: CN=6a7d4f040f791a6ed409d66738bd98a82e9b3a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:1e:89:3d:75:38:3b:26:e2:4b:11:70:76:
                    24:c3:96:c1:be:ce:d4:42:b7:a3:5a:13:10:1c:9e:
                    99:74:38:e8:4a:ad:b9:43:12:36:10:30:0e:91:8d:
                    09:93:77:cf:08:29:c6:74:be:09:b0:ff:52:a6:92:
                    74:41:3f:27:9a:3c:e4:1a:db:be:6c:94:a7:84:2b:
                    8e:62:06:9a:b9:05:a4:59:58:cf:f3:49:dd:f2:5d:
                    0b:aa:ba:57:e9:be:65:2a:08:4b:5c:52:07:d3:20:
                    f4:10:41:81:c9:e7:47:b4:bb:2b:1f:73:97:b5:3f:
                    bf:d6:f4:8f:d9:9c:3e:83:94:4e:d1:1b:ab:83:fd:
                    18:a7:5c:ce:7b:9d:2a:41:b3:fb:62:01:ef:f6:4c:
                    41:b2:72:8b:7b:3e:d9:f4:06:6c:1b:5f:99:b1:f9:
                    ef:0e:c2:7c:f8:af:6b:85:5f:55:be:4a:df:65:20:
                    ab:a0:07:34:ab:a5:55:82:59:6b:44:b5:1f:0a:89:
                    b0:e7:8d:2d:32:2c:9d:4a:9e:1d:08:1d:cf:4c:a7:
                    19:00:76:c8:77:b1:bd:89:ea:36:4f:67:2a:88:0b:
                    b5:86:70:3a:81:52:e2:65:14:4d:16:4b:2d:b5:61:
                    71:9e:9b:d8:4e:08:29:c1:50:b4:76:e9:26:73:c6:
                    52:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:25:3F:BC:4C:66:E4:C1:16:BA:96:77:49:8A:54:BD:0E:C1:87:7C
            X509v3 Authority Key Identifier:
                keyid:2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/6a7d4f040f791a6ed409d66738bd98a82e9b3a08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/8cca422c9ff30980ab758c3310c2e40a2e836482.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b3:fd:a6:8a:f3:97:e7:3a:b8:63:da:ed:be:d4:de:81:55:
         a4:c3:4f:89:24:c1:44:b6:99:06:b9:f0:eb:a2:5e:b7:cf:57:
         8e:36:db:02:60:19:ae:71:0c:f9:f1:ea:83:49:57:53:a4:69:
         6b:6b:3c:1b:06:3f:aa:44:55:f7:2d:94:12:4c:b0:09:42:0e:
         f4:8a:f8:ab:4a:e4:50:16:bb:6a:ee:9e:f4:8a:4c:ad:fb:ab:
         a8:ac:26:a9:04:6f:6b:91:4c:28:9c:25:f8:79:48:48:eb:ea:
         35:0c:9b:94:5a:92:f2:7b:6d:06:b8:cf:7b:aa:3c:23:e9:68:
         41:87:c0:06:11:16:e8:00:db:e3:cb:d3:6d:cd:08:f1:a5:47:
         e6:69:f8:19:36:70:f3:1b:0d:22:d6:d3:ce:18:34:b5:07:8e:
         a2:44:2f:42:4b:3b:eb:77:1b:57:e6:a7:1e:df:8a:11:d2:d6:
         7b:4c:13:56:06:2f:29:c9:83:f0:03:57:e8:06:14:bf:b5:f8:
         af:53:ce:a2:d4:f5:68:48:9f:17:76:84:67:16:7d:b9:65:00:
         3f:26:67:f6:3b:ff:bd:24:3d:40:71:5c:ca:e0:72:9c:78:ea:
         c0:26:11:c7:87:07:32:7f:dc:71:ab:ef:c9:c2:de:9d:8b:bd:
         7e:9a:01:c7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDb++MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhj
Y2E0MjJjOWZmMzA5ODBhYjc1OGMzMzEwYzJlNDBhMmU4MzY0ODIwHhcNMjEwMzI0
MTQzNjI2WhcNMjYwMzI0MTQzNjI2WjAzMTEwLwYDVQQDEyg2YTdkNGYwNDBmNzkx
YTZlZDQwOWQ2NjczOGJkOThhODJlOWIzYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtyIeiT11ODsm4ksRcHYkw5bBvs7UQrejWhMQHJ6ZdDjoSq25
QxI2EDAOkY0Jk3fPCCnGdL4JsP9SppJ0QT8nmjzkGtu+bJSnhCuOYgaauQWkWVjP
80nd8l0LqrpX6b5lKghLXFIH0yD0EEGByedHtLsrH3OXtT+/1vSP2Zw+g5RO0Rur
g/0Yp1zOe50qQbP7YgHv9kxBsnKLez7Z9AZsG1+ZsfnvDsJ8+K9rhV9VvkrfZSCr
oAc0q6VVgllrRLUfComw540tMiydSp4dCB3PTKcZAHbId7G9ieo2T2cqiAu1hnA6
gVLiZRRNFksttWFxnpvYTggpwVC0dukmc8ZS/QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJMlP7xMZuTBFrqWd0mKVL0OwYd8MB8GA1UdIwQYMBaAFCoL8hHe20YvHHoD
+uQMkTT4KAChMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGNjYTQy
MmM5ZmYzMDk4MGFiNzU4YzMzMTBjMmU0MGEyZTgzNjQ4Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGFiNmZmOTItNTY1YS00YmVkLWE3MmMtNjRjZWIz
YjYwNWFhLzZhN2Q0ZjA0MGY3OTFhNmVkNDA5ZDY2NzM4YmQ5OGE4MmU5YjNhMDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84YWI2ZmY5Mi01NjVhLTRiZWQtYTcyYy02NGNl
YjNiNjA1YWEvOGNjYTQyMmM5ZmYzMDk4MGFiNzU4YzMzMTBjMmU0MGEyZTgzNjQ4
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL49MDANBgkqhkiG9w0BAQsFAAOCAQEARbP9porzl+c6uGPa
7b7U3oFVpMNPiSTBRLaZBrnw66Jet89XjjbbAmAZrnEM+fHqg0lXU6Rpa2s8GwY/
qkRV9y2UEkywCUIO9Ir4q0rkUBa7au6e9IpMrfurqKwmqQRva5FMKJwl+HlISOvq
NQyblFqS8nttBrjPe6o8I+loQYfABhEW6ADb48vTbc0I8aVH5mn4GTZw8xsNItbT
zhg0tQeOokQvQks763cbV+anHt+KEdLWe0wTVgYvKcmD8ANX6AYUv7X4r1POotT1
aEifF3aEZxZ9uWUAPyZn9jv/vSQ9QHFcyuBynHjqwCYRx4cHMn/ccavvycLenYu9
fpoBxw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org