Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/86ed6cc174411f184e8152a242f8a00ea78ceb7a.roa
File:                     86ed6cc174411f184e8152a242f8a00ea78ceb7a.roa (raw, json)
Hash identifier:          5Yn8CZPlivec3wqhnNOY4kwq0CfB40G92+zKnNRLrRs=
Subject key identifier:   AB:18:FC:04:A6:46:1D:49:63:0E:89:6E:6A:2E:6B:E6:01:99:2A:AC
Certificate issuer:       /CN=8e346b9efa64e019c55730d116dd29aa97da1530
Certificate serial:       13D3
Authority key identifier: 2D:F0:31:7C:07:29:A7:78:A0:87:9F:B9:41:2F:08:01:2A:B0:FE:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e346b9efa64e019c55730d116dd29aa97da1530.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/86ed6cc174411f184e8152a242f8a00ea78ceb7a.roa
Signing time:             Sat 08 Oct 2022 01:50:43 +0000
ROA not before:           Thu 06 Oct 2022 13:27:56 +0000
ROA not after:            Sun 06 Oct 2024 13:27:56 +0000
asID:                     263196
IP address blocks:        143.202.136.0/22 maxlen: 24
                          186.148.80.0/21 maxlen: 24
                          2803:4b00::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5075 (0x13d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e346b9efa64e019c55730d116dd29aa97da1530
        Validity
            Not Before: Oct  6 13:27:56 2022 GMT
            Not After : Oct  6 13:27:56 2024 GMT
        Subject: CN=86ed6cc174411f184e8152a242f8a00ea78ceb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:53:99:ef:e3:70:a6:3c:94:9a:62:2f:9b:
                    3c:48:6d:03:83:14:fc:3b:7e:05:f8:40:4b:47:54:
                    e1:4a:4f:a4:b1:4c:89:69:b5:82:ab:a5:d4:15:b3:
                    93:07:f3:29:64:3b:57:eb:d5:0e:e6:cd:03:f4:6e:
                    20:18:f5:1a:d8:a5:3b:eb:05:02:1f:3a:d3:39:cb:
                    20:b2:03:6f:be:74:c8:f6:22:74:ee:15:72:78:8e:
                    a0:18:a4:39:ed:dd:4e:0f:02:c1:44:4b:4f:12:d3:
                    4c:f6:f0:22:47:15:1b:42:c4:cf:85:cf:f5:a4:65:
                    2b:6a:50:e6:d5:b9:57:5c:d9:76:f5:74:2a:7d:da:
                    c4:72:8f:eb:2b:48:70:9c:97:cb:9b:83:c0:7a:cb:
                    09:77:ab:fc:b1:7c:a8:5b:d3:76:db:a0:aa:a0:35:
                    c3:c3:af:4c:80:0a:72:16:dd:46:e2:e9:e0:79:74:
                    93:10:6e:f6:d5:28:35:d7:e7:d9:c6:80:84:22:5d:
                    d0:5a:b7:10:ab:30:29:79:01:e2:87:08:af:2b:17:
                    fd:ad:aa:7d:0d:d4:65:a3:02:2a:b2:ca:aa:e9:f9:
                    74:55:b7:92:96:ba:20:b4:bf:05:c6:09:b4:88:88:
                    60:f3:c2:d8:42:1e:90:3d:bc:62:da:6e:fd:37:db:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:18:FC:04:A6:46:1D:49:63:0E:89:6E:6A:2E:6B:E6:01:99:2A:AC
            X509v3 Authority Key Identifier:
                keyid:2D:F0:31:7C:07:29:A7:78:A0:87:9F:B9:41:2F:08:01:2A:B0:FE:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e346b9efa64e019c55730d116dd29aa97da1530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/86ed6cc174411f184e8152a242f8a00ea78ceb7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/8e346b9efa64e019c55730d116dd29aa97da1530.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.136.0/22
                  186.148.80.0/21
                IPv6:
                  2803:4b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:ca:4f:15:0e:9c:53:77:92:52:f0:6a:03:f5:dd:53:45:db:
         d3:9e:cd:e4:89:66:9e:cd:e5:29:1d:10:94:49:9d:17:13:3c:
         f0:bc:64:c4:77:03:47:1c:ce:93:eb:5c:ec:1f:e9:b7:10:3f:
         75:19:c0:67:62:12:e8:c6:29:21:bb:e4:0f:ba:ed:5b:39:50:
         19:97:87:73:2a:67:a6:71:fa:d0:6d:15:b1:e3:fa:1c:27:35:
         60:8e:7e:83:e3:d4:f5:5d:43:89:c0:cc:14:3e:90:92:18:56:
         c4:5c:98:ae:c2:f2:a7:f7:36:d5:03:a0:39:4d:8a:a1:57:79:
         c3:69:8e:f7:9f:04:0b:96:2f:96:5e:da:49:98:61:75:49:57:
         06:3f:ec:ea:92:79:43:76:24:98:da:71:b4:48:81:4e:37:1c:
         78:0f:0f:ab:c7:82:02:35:3e:f2:40:44:b0:b1:d8:60:e8:42:
         98:82:44:6a:fd:fd:aa:44:b6:bd:c2:c9:93:7f:46:90:d6:88:
         09:3b:0c:f4:8f:fb:a3:3b:c1:ba:df:7b:c4:b0:93:9c:32:f2:
         fd:48:32:72:86:56:9a:e4:de:69:c8:34:09:f8:cb:10:69:ac:
         7e:26:f2:80:3e:24:8f:cf:b8:17:99:aa:d9:70:b7:8e:3c:9a:
         76:7a:e4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:45 2023 by rpki-client on console-ams.rpki-client.org