Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/7ec546e7c780680b92f4e06473872a9d828abdfd.roa
File:                     7ec546e7c780680b92f4e06473872a9d828abdfd.roa (raw, json)
Hash identifier:          QwDDdvHJArO307r4vvob0/PhS3W0ne98LQJBslFq0Wk=
Subject key identifier:   FE:F0:CA:93:0F:CB:A2:D4:95:0F:57:B1:04:CE:37:B4:1D:6C:2B:2F
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       0F773A
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/7ec546e7c780680b92f4e06473872a9d828abdfd.roa
Signing time:             Mon 05 Jul 2021 17:53:25 +0000
ROA not before:           Mon 05 Jul 2021 03:00:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     263173
IP address blocks:        190.54.112.0/23 maxlen: 24
                          190.54.179.0/24 maxlen: 24
                          190.208.8.0/24 maxlen: 24
                          200.29.173.0/24 maxlen: 24
                          200.29.191.0/24 maxlen: 24
                          2800:3b0:2000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013562 (0xf773a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Jul  5 03:00:00 2021 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject: CN=7ec546e7c780680b92f4e06473872a9d828abdfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:7b:20:0b:c5:2d:a9:bf:46:61:68:66:c2:
                    5c:f6:2a:94:4d:e3:82:9b:1d:9f:d9:f9:29:61:7e:
                    85:78:e4:1c:5f:e9:44:86:ee:e9:1e:c8:fe:27:fa:
                    95:04:60:46:32:9b:4c:32:4d:57:92:3a:48:d0:b7:
                    df:46:c5:82:bd:f0:92:5e:f0:95:45:52:7a:72:40:
                    9e:26:b9:3e:aa:92:d8:fe:1d:e2:ff:a0:96:96:09:
                    b7:20:99:b3:e3:53:dd:30:aa:c5:69:aa:6e:e0:44:
                    a7:01:ff:48:5f:a9:9a:7c:a7:24:2d:1c:75:24:4c:
                    29:1e:b0:af:55:8f:c6:65:25:97:11:d7:23:90:f0:
                    79:f5:d3:33:cb:58:13:9d:d7:ba:2a:18:11:27:93:
                    06:04:62:f3:da:c4:a5:ea:9b:3e:d3:38:54:a7:ea:
                    25:d5:6a:9e:10:54:88:81:e9:2d:8b:f7:46:ed:1a:
                    ec:5c:4c:e0:1d:39:f4:88:68:e4:fa:28:c5:77:ca:
                    6a:30:d3:50:d3:80:2d:7c:99:6a:55:03:de:cc:c4:
                    da:d2:28:12:76:6e:c7:d4:bc:44:44:23:19:0d:6d:
                    18:2b:b0:79:14:d2:b1:1b:51:04:17:2c:35:06:8a:
                    1f:9a:10:21:16:78:f3:4a:4c:6d:3e:02:12:a3:b8:
                    e4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F0:CA:93:0F:CB:A2:D4:95:0F:57:B1:04:CE:37:B4:1D:6C:2B:2F
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/7ec546e7c780680b92f4e06473872a9d828abdfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.112.0/23
                  190.54.179.0/24
                  190.208.8.0/24
                  200.29.173.0/24
                  200.29.191.0/24
                IPv6:
                  2800:3b0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8f:3a:9f:a4:7e:6b:04:f4:b9:14:07:b5:55:c3:51:1b:53:3b:
         26:24:95:a4:60:f0:5b:6f:87:6a:a2:b1:cc:45:ff:ce:5f:72:
         40:56:8f:82:7a:22:64:f0:3a:06:2c:8d:38:5d:2b:bb:39:e2:
         99:c2:fc:63:ba:73:e0:44:d3:36:c3:c9:d1:f7:b1:82:fb:fc:
         bf:5a:3a:16:d5:a9:54:ec:92:e2:bf:cb:b1:0c:6f:39:bb:f1:
         5d:ab:29:95:97:8e:83:9c:8d:bf:1d:d7:ce:06:f5:da:78:58:
         fb:33:0a:30:51:94:d8:f0:70:35:12:1d:42:00:6d:ce:8b:65:
         71:77:ee:94:ba:39:cb:b3:d9:f5:f5:00:ba:d8:c8:3f:fc:a9:
         e4:bd:4e:7b:46:c7:e4:e2:fc:69:a3:76:d3:dd:73:1e:7a:88:
         49:90:07:7e:f4:6a:77:4c:43:3c:62:03:4e:30:59:84:a9:a9:
         80:f7:f0:0d:cf:ad:24:d8:0b:85:ad:f8:1d:05:3d:d9:1f:54:
         f3:51:65:a4:25:da:db:14:64:a9:d2:8c:2b:41:3f:dd:2b:dd:
         ec:11:7d:a8:ea:e1:6b:c3:70:5a:d6:10:07:29:38:c4:72:eb:
         a1:0b:5d:22:02:e8:44:d1:e4:82:46:8b:ae:2d:67:45:12:17:
         85:56:9b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:45 2023 by rpki-client on console-ams.rpki-client.org