Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/13faf312766b4b0c86fe37b194c04e2e9e4f3733.roa
File:                     13faf312766b4b0c86fe37b194c04e2e9e4f3733.roa (raw, json)
Hash identifier:          knGC9JwUlIbA/KynpUWP7hxqeMX7KHjkaWcff1Cn2AU=
Subject key identifier:   31:94:A8:C8:62:A1:8F:0D:5C:3D:52:D2:D6:1A:12:D0:93:D1:5F:28
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       21B3F0
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/13faf312766b4b0c86fe37b194c04e2e9e4f3733.roa
Signing time:             Tue 04 Jul 2023 08:30:04 +0000
ROA not before:           Mon 03 Jul 2023 08:30:04 +0000
ROA not after:            Wed 02 Jul 2025 08:30:04 +0000
asID:                     16990
IP address blocks:        190.54.6.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2208752 (0x21b3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Jul  3 08:30:04 2023 GMT
            Not After : Jul  2 08:30:04 2025 GMT
        Subject: CN=13faf312766b4b0c86fe37b194c04e2e9e4f3733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:51:18:98:01:6b:1f:f0:63:48:b3:cb:d0:
                    b0:91:26:50:a6:ed:f0:42:f7:9f:90:9d:c3:32:e1:
                    27:e5:38:76:c3:db:c9:1d:83:f4:53:62:0d:28:2e:
                    f9:bd:2d:0e:2f:3c:85:df:d0:77:db:a1:4c:0f:99:
                    a2:1f:b6:52:32:90:e0:d9:14:ac:35:34:32:2e:68:
                    ca:8e:d6:33:a8:f7:ec:03:d1:fa:80:b6:27:af:d0:
                    33:a3:78:77:99:ac:2c:c0:9d:07:01:8b:38:4a:cc:
                    81:ca:3c:32:bb:49:49:eb:de:4f:67:c6:59:44:89:
                    cd:a3:b5:38:10:ba:aa:ff:cd:87:35:d1:0a:60:d4:
                    16:a5:9c:05:73:45:fe:46:d3:45:7b:2b:ec:c7:b8:
                    b2:b9:95:de:53:eb:86:93:21:07:72:54:7b:bb:3b:
                    47:89:cd:59:d6:ab:39:7d:2c:8b:3c:78:82:ff:e7:
                    45:ae:af:8d:3d:99:12:82:7a:0a:cf:83:9e:e3:92:
                    40:52:6b:63:38:97:ff:24:81:76:47:f1:a5:c2:ca:
                    e1:5a:34:e2:cf:94:33:ad:dd:0c:7e:75:6d:f0:f1:
                    8d:b3:b4:b4:5f:ca:b0:c5:a4:2f:35:21:00:a5:74:
                    52:fa:2f:e9:89:59:bf:d9:05:87:b0:17:46:60:72:
                    9c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:94:A8:C8:62:A1:8F:0D:5C:3D:52:D2:D6:1A:12:D0:93:D1:5F:28
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/13faf312766b4b0c86fe37b194c04e2e9e4f3733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:c3:37:5f:03:75:be:34:26:9d:2a:7e:d3:6a:65:ef:07:30:
         dd:e1:eb:32:4b:ce:f0:0f:5b:e5:02:5a:24:79:85:98:34:b0:
         58:c0:70:e7:68:4d:b2:10:44:fb:f0:33:e0:02:d3:de:bd:c9:
         12:4d:13:ae:c2:9c:ac:a3:85:60:8c:1a:25:75:37:60:59:1b:
         a3:e7:0e:67:45:70:27:06:24:a9:52:23:70:82:a0:af:13:8a:
         5f:ce:9f:f8:86:ec:81:a9:15:9e:1c:22:c2:1a:cf:cd:0c:77:
         47:50:e9:cd:bd:76:ef:ce:64:95:61:49:ef:19:31:cd:27:f4:
         c3:e0:e9:ac:0a:dd:27:14:52:63:2c:65:06:ff:89:47:74:76:
         98:af:9d:f6:55:5e:95:c6:6f:a4:03:a9:d5:e0:9c:9a:50:dc:
         b4:21:9c:57:a1:fb:4d:e8:64:0d:cd:34:5a:01:a7:4c:ca:fd:
         68:07:19:9e:51:6d:57:d5:9b:44:61:f5:01:8d:08:9d:b9:81:
         22:f2:ff:96:ba:2d:12:48:b6:4e:76:68:c3:ea:a8:ae:a1:a3:
         be:ac:a0:e0:9b:72:6b:bf:40:d2:14:81:b3:57:31:07:64:ea:
         94:c2:df:06:65:d9:5c:fe:8b:69:6d:e2:32:7f:33:7d:18:81:
         50:2d:23:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 19:55:08 2023 by rpki-client on console-fra.rpki-client.org