Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/19be2257f5ee857467c1e4ae13b824726465e402.roa
File:                     19be2257f5ee857467c1e4ae13b824726465e402.roa (raw, json)
Hash identifier:          3Yi2YKIYf7dxn3RubJPNdQ6wlLWluj9oIT5HEq7dcTw=
Subject key identifier:   6B:18:B5:36:FA:DD:C9:1A:C4:F1:ED:E7:A1:4C:42:90:8E:C4:B9:5A
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E4D83
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/19be2257f5ee857467c1e4ae13b824726465e402.roa
Signing time:             Wed 24 Mar 2021 14:39:09 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     61468
IP address blocks:        190.15.128.0/20 maxlen: 20
                          201.159.220.0/22 maxlen: 22
                          2800:68::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937347 (0xe4d83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=19be2257f5ee857467c1e4ae13b824726465e402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a5:44:71:3e:dd:af:be:4f:74:b2:2a:21:2d:
                    90:fe:e7:d4:d5:9e:48:35:06:69:c9:c5:7a:1f:64:
                    cb:f0:3e:91:73:12:46:f8:88:86:a6:6b:e8:db:91:
                    78:00:41:26:36:04:f0:23:47:f1:3d:e8:ed:b8:02:
                    35:60:22:e3:6d:92:72:96:27:bb:5c:d5:98:5c:58:
                    64:83:23:90:17:cf:76:27:a6:7e:fd:88:9c:18:2b:
                    79:9e:38:25:44:5f:bc:1c:81:42:f7:d7:bb:2b:5d:
                    19:1e:d1:b8:32:2b:5b:6a:c8:3e:f6:53:9d:4b:a8:
                    6a:79:9e:b7:20:db:e3:06:30:45:13:16:bb:ed:8c:
                    c2:fb:43:6f:46:c1:d8:e6:1e:10:1d:a8:45:5a:bd:
                    83:02:61:6f:55:c8:54:25:51:11:c9:56:70:49:4d:
                    b3:b8:da:3f:40:65:d4:b2:ac:ea:5f:a1:0d:59:3c:
                    90:3f:88:71:54:3d:68:b9:72:6f:b5:a4:06:e5:b5:
                    c0:ba:ae:86:25:84:dc:05:5e:18:e7:cb:13:a5:ad:
                    12:54:f1:de:9e:f9:7e:04:7d:81:79:23:e3:f9:a0:
                    14:b8:ad:7c:e0:cb:d3:f7:0b:a8:27:63:c5:b8:96:
                    c8:11:d2:ad:4f:5f:b7:35:78:42:21:bc:76:0f:5a:
                    3e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:18:B5:36:FA:DD:C9:1A:C4:F1:ED:E7:A1:4C:42:90:8E:C4:B9:5A
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/19be2257f5ee857467c1e4ae13b824726465e402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.128.0/20
                  201.159.220.0/22
                IPv6:
                  2800:68::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:21:9b:94:b7:5f:03:55:0c:31:7f:b9:d3:73:68:6a:82:69:
         d4:fa:3e:c2:06:36:4f:b9:e2:6a:7b:bf:20:03:80:e0:b6:e9:
         92:13:fe:f6:d0:4c:27:2f:9f:2d:02:29:cd:85:40:6c:71:38:
         fc:d2:7e:39:a1:f9:91:22:7d:0d:45:52:d2:53:79:1a:a3:11:
         b7:0c:7f:2a:77:95:3a:5e:9c:cf:67:6e:2c:22:45:a0:1b:62:
         6d:25:40:f7:cc:2a:27:a8:07:c6:a4:fc:07:45:34:59:ab:ce:
         80:7e:2f:f4:c1:e2:2b:ab:f2:bd:bd:05:99:83:e5:92:7d:26:
         4d:80:16:93:60:fe:12:f7:01:51:85:34:50:3a:1f:cd:d3:88:
         a9:3d:0c:23:02:30:b2:bd:9c:ec:d7:b4:f5:da:32:61:4f:b3:
         5e:7e:16:dc:3c:c0:80:ad:84:80:d8:44:22:df:f8:1e:13:10:
         ab:a5:fd:63:33:34:15:cb:00:c3:88:84:05:2a:e9:79:fc:fd:
         32:84:a5:8a:bf:03:84:9c:b5:be:d8:d8:cf:7c:e9:8d:1c:13:
         d3:c5:81:36:77:4f:01:e3:64:b2:c0:27:ab:c3:1a:e4:9c:d7:
         76:c4:ea:a8:07:71:7a:67:c0:9d:b4:97:20:42:f7:51:0a:e2:
         61:3e:a5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-fra.rpki-client.org