Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/6b2a765b9d4b893e02c16e70f0937a32399e5e77.roa
File:                     6b2a765b9d4b893e02c16e70f0937a32399e5e77.roa (raw, json)
Hash identifier:          JbRUhhQMopEqC9FpslLMYB4XH0FIkIxqG/SNg9KktBM=
Subject key identifier:   61:2D:9D:2D:03:9A:4B:24:5A:50:3D:C8:FA:70:A9:2D:A7:6E:62:DF
Certificate issuer:       /CN=9bb023dfb8c7391beb7a21f28cbab58003195488
Certificate serial:       0F6D
Authority key identifier: 07:42:66:DF:39:FB:E6:4F:E9:DC:83:5C:28:C3:EB:26:EF:E4:0A:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bb023dfb8c7391beb7a21f28cbab58003195488.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/6b2a765b9d4b893e02c16e70f0937a32399e5e77.roa
Signing time:             Fri 14 May 2021 19:24:36 +0000
ROA not before:           Fri 14 May 2021 03:00:00 +0000
ROA not after:            Sat 14 May 2033 03:00:00 +0000
asID:                     52493
IP address blocks:        168.90.72.0/22 maxlen: 24
                          179.60.228.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3949 (0xf6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb023dfb8c7391beb7a21f28cbab58003195488
        Validity
            Not Before: May 14 03:00:00 2021 GMT
            Not After : May 14 03:00:00 2033 GMT
        Subject: CN=6b2a765b9d4b893e02c16e70f0937a32399e5e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:30:8b:61:5a:4a:a1:1e:f3:43:26:41:f8:
                    22:b4:ed:57:f9:71:11:05:18:88:ec:9c:f1:6f:6f:
                    05:53:f6:04:3b:45:c6:39:27:cb:8e:6b:9a:cf:63:
                    f5:74:5a:14:9f:de:14:cf:17:ce:90:f2:2b:e1:fa:
                    e5:48:d6:46:46:f4:9f:a9:d1:7f:52:be:ca:b1:92:
                    5c:c0:ec:7a:5b:3e:f3:b9:3e:ef:72:e2:fb:f1:65:
                    36:6c:d5:53:95:15:48:9f:81:97:a6:2f:e5:10:a4:
                    17:e3:b5:16:3d:a3:73:53:f1:e1:a1:fb:c6:7e:de:
                    38:20:fa:f4:4f:bf:37:ef:a3:a1:53:e9:e0:e9:cd:
                    21:69:d6:a9:fe:f2:60:ad:7b:24:79:25:30:8e:72:
                    87:90:b0:88:1e:75:71:1b:b6:bc:55:10:9c:cb:da:
                    2e:24:78:97:e3:4e:15:e7:82:6d:51:9f:36:45:48:
                    1b:98:09:50:2c:b4:e3:d2:f6:54:9d:0c:aa:2d:f7:
                    c0:c1:39:d2:ff:f3:45:b7:cc:89:3e:07:dc:ff:0f:
                    08:a7:c5:22:6d:d8:34:f7:57:f5:70:78:1c:2d:77:
                    37:c5:8e:98:ed:e3:28:b9:c0:dd:85:70:cf:db:5f:
                    9f:1d:86:ae:f9:26:8f:f7:21:88:1a:09:5e:a6:b0:
                    1d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2D:9D:2D:03:9A:4B:24:5A:50:3D:C8:FA:70:A9:2D:A7:6E:62:DF
            X509v3 Authority Key Identifier:
                keyid:07:42:66:DF:39:FB:E6:4F:E9:DC:83:5C:28:C3:EB:26:EF:E4:0A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bb023dfb8c7391beb7a21f28cbab58003195488.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/6b2a765b9d4b893e02c16e70f0937a32399e5e77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/9bb023dfb8c7391beb7a21f28cbab58003195488.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.72.0/22
                  179.60.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:d5:aa:a9:17:a9:3e:33:af:28:92:77:49:e2:8d:2f:ec:ae:
         1e:57:23:eb:f0:f6:4b:ec:b1:70:84:e0:69:79:6f:8b:90:dc:
         ed:ad:3b:bf:ab:63:c8:f0:99:b5:89:f2:c7:cb:68:07:a4:ed:
         4d:62:b6:94:4f:82:8e:94:08:84:35:b3:7e:b5:31:42:00:bb:
         ca:16:35:ee:50:a9:9f:81:0f:0d:5e:4f:1a:c5:69:39:6c:18:
         39:43:63:4a:6a:15:a4:4a:f7:a1:76:b9:12:7e:48:38:fa:c7:
         8e:d2:97:c1:3c:1c:f2:6f:c3:39:7b:9a:8a:44:ae:12:31:4a:
         6e:08:f6:02:08:b3:bb:0a:67:2a:94:22:90:66:93:14:9e:f4:
         01:cf:6a:94:1b:9a:c2:20:e6:16:74:2f:ce:13:d0:e7:26:f9:
         e8:cb:7c:e7:93:c6:0d:cf:35:ad:3b:7d:fa:d9:6e:f5:fd:47:
         f5:ae:f6:73:c6:dc:db:b4:e2:cd:0d:48:92:49:d1:e4:b4:7c:
         1d:0d:b6:e0:a1:83:a4:72:d6:b9:23:1a:f3:13:be:c6:d3:cc:
         07:5c:3f:7d:b9:e0:28:21:b4:67:d1:d9:41:00:ab:ed:5f:7a:
         38:5c:bf:7c:cc:3a:36:21:11:f7:60:ba:64:5e:67:28:57:a1:
         f6:2e:a2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 15:49:44 2023 by rpki-client on console-ams.rpki-client.org