Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/f37b0389bc108ff6a1b0c1bd6f110bacfdc1051f.roa
File:                     f37b0389bc108ff6a1b0c1bd6f110bacfdc1051f.roa (raw, json)
Hash identifier:          WtQGsiCpsqYa0lwwGQ13q5TNoYKMBVz16OVJrE8rc3A=
Subject key identifier:   0D:98:CA:A8:39:79:92:66:E2:DA:F8:22:64:70:A4:11:B6:43:F4:E9
Certificate issuer:       /CN=8cca422c9ff30980ab758c3310c2e40a2e836482
Certificate serial:       0DCCDC
Authority key identifier: 2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/f37b0389bc108ff6a1b0c1bd6f110bacfdc1051f.roa
Signing time:             Wed 24 Mar 2021 14:36:28 +0000
ROA not before:           Wed 24 Mar 2021 14:36:26 +0000
ROA not after:            Tue 24 Mar 2026 14:36:26 +0000
asID:                     52468
IP address blocks:        190.61.54.0/24 maxlen: 24
                          190.61.56.0/24 maxlen: 24
                          190.61.55.0/24 maxlen: 24
                          190.61.57.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904412 (0xdccdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cca422c9ff30980ab758c3310c2e40a2e836482
        Validity
            Not Before: Mar 24 14:36:26 2021 GMT
            Not After : Mar 24 14:36:26 2026 GMT
        Subject: CN=f37b0389bc108ff6a1b0c1bd6f110bacfdc1051f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8a:d1:0d:88:4a:e9:11:27:83:19:3d:e9:fb:
                    4e:9e:48:9a:0b:40:b8:f3:43:e2:ed:ec:2d:25:06:
                    fa:77:3e:72:7e:c3:0b:a7:0b:80:c7:0a:2f:5b:cf:
                    83:ff:3d:6f:88:1f:af:ab:30:2b:13:16:56:8c:6a:
                    b6:35:d3:cf:65:9d:7b:6c:38:7b:a2:48:77:38:03:
                    c8:c9:38:ca:ed:04:c4:2d:45:72:d0:cc:62:ef:3b:
                    85:f4:ba:f5:10:bf:ee:a7:3a:92:dc:0f:54:7b:77:
                    8d:35:9f:2a:7e:d7:b4:ea:f5:4e:7c:31:73:43:a7:
                    53:f3:7a:3e:e2:44:c4:1e:27:40:75:61:b2:08:54:
                    83:db:c2:53:23:f0:ba:2f:a0:ce:a7:74:fd:2e:00:
                    d7:32:fc:6b:a3:18:d5:e9:03:a3:10:4b:88:c1:b7:
                    c5:09:a7:b6:86:f1:92:f1:3b:f9:68:1d:e8:52:6b:
                    e7:2b:8b:39:e1:38:b7:1a:a4:3a:25:90:ab:b9:0c:
                    f4:68:9e:3a:32:d0:c5:cf:51:43:c7:f1:fb:65:ff:
                    6f:ed:f4:e0:b9:66:ef:94:00:98:ed:74:57:11:da:
                    dd:62:91:0c:81:b0:45:9e:e4:43:14:f2:a5:4e:cc:
                    b1:eb:bf:48:14:77:1e:85:2d:e5:01:cb:30:5f:62:
                    5c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:98:CA:A8:39:79:92:66:E2:DA:F8:22:64:70:A4:11:B6:43:F4:E9
            X509v3 Authority Key Identifier:
                keyid:2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/f37b0389bc108ff6a1b0c1bd6f110bacfdc1051f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/8cca422c9ff30980ab758c3310c2e40a2e836482.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.54.0-190.61.57.255

    Signature Algorithm: sha256WithRSAEncryption
         a5:0f:f9:0a:7a:e1:19:8b:ac:03:a5:3b:e5:e9:66:9c:22:64:
         13:e9:6a:cf:e0:eb:ee:27:3f:6a:e6:fb:8e:dd:65:4d:fc:a4:
         58:a3:90:f9:bb:a8:21:c3:c2:f3:51:4b:0e:76:f4:90:d7:c5:
         f3:b2:81:b8:96:bc:a3:19:2c:f4:05:af:16:0e:9f:50:8d:32:
         27:d6:a3:44:84:31:3b:0e:f8:31:3c:16:7c:8b:46:bb:c1:e4:
         7c:02:73:1b:84:a5:92:0b:56:23:79:73:47:79:14:95:09:69:
         3f:03:19:5c:de:f7:f8:64:d8:94:c9:ae:e8:8e:75:23:f4:db:
         24:73:ad:5b:e9:0a:56:d9:51:d3:df:87:a6:d0:bf:93:76:40:
         36:69:0f:f9:c5:0e:f6:9a:a1:81:2d:65:f8:14:ff:00:80:18:
         82:0a:f1:35:d2:f2:8b:9b:a3:ff:64:2c:84:b7:34:47:7e:ba:
         9d:b8:61:37:94:e0:ad:92:ea:d2:f6:13:a3:00:2d:46:7e:8a:
         83:90:c6:5f:af:7d:a1:47:ce:4f:06:ad:1f:95:ff:33:5b:41:
         41:14:81:4a:f7:21:a7:2e:84:11:8e:52:83:57:6d:af:f4:b4:
         e3:d0:20:0f:36:40:f0:d3:45:26:1d:d8:61:7a:69:f7:7a:88:
         15:90:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-fra.rpki-client.org