Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/a73ef98a67104f440f7fcc9f2f0c6e1af68819c9.roa
File:                     a73ef98a67104f440f7fcc9f2f0c6e1af68819c9.roa (raw, json)
Hash identifier:          dclKTlmqcNCQO5tPy6LNQDkgARCq+eZoMUNEJ/O2qdM=
Subject key identifier:   83:E8:C1:99:61:EE:F4:57:8D:3F:BA:83:60:A0:26:3F:60:DE:0B:25
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       1C034C
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/a73ef98a67104f440f7fcc9f2f0c6e1af68819c9.roa
Signing time:             Wed 16 Nov 2022 04:28:53 +0000
ROA not before:           Tue 15 Nov 2022 04:22:54 +0000
ROA not after:            Sat 16 Nov 2024 04:22:54 +0000
asID:                     6429
IP address blocks:        190.54.1.0/24 maxlen: 24
                          190.54.3.0/24 maxlen: 24
                          190.54.4.0/22 maxlen: 22
                          190.54.8.0/21 maxlen: 21
                          190.54.16.0/20 maxlen: 20
                          190.54.96.0/19 maxlen: 19
                          190.54.178.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835852 (0x1c034c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Nov 15 04:22:54 2022 GMT
            Not After : Nov 16 04:22:54 2024 GMT
        Subject: CN=a73ef98a67104f440f7fcc9f2f0c6e1af68819c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:82:d8:b0:34:fe:51:dd:a5:27:91:3e:1a:f0:
                    bf:df:c7:e1:5d:ca:0d:38:8c:40:ab:c3:cc:f1:7a:
                    26:c0:ca:2a:8d:29:9a:8e:86:6c:1c:d0:b1:3f:8a:
                    33:2e:ea:df:e9:6b:34:9e:6a:c7:08:fb:84:fa:a7:
                    87:4c:23:c3:a5:13:91:3f:a1:58:5d:95:48:28:90:
                    ca:0a:c2:8e:19:91:cf:31:98:db:86:74:5b:ff:c8:
                    00:6a:c4:f1:7f:d1:a7:01:f4:17:70:1f:91:83:2a:
                    45:18:10:32:41:18:a5:a9:4c:15:1c:4f:eb:47:3a:
                    c5:33:03:64:eb:48:2d:bd:a9:e5:d6:78:10:3e:b2:
                    b9:7d:6a:b2:00:69:1e:2e:73:bb:63:59:f8:85:d7:
                    c8:53:89:b4:f2:9a:32:b8:fe:8c:5a:c8:ba:95:cb:
                    7a:04:f1:ab:6e:73:9b:8f:55:0d:02:dc:9f:b0:1b:
                    5e:11:9e:51:b5:5a:26:89:8b:62:cb:1a:9d:6d:1d:
                    99:e6:8d:d2:fe:40:93:99:29:ca:ff:65:7e:ca:41:
                    aa:ce:a7:9f:a5:f2:81:c3:30:69:67:67:69:c7:8c:
                    0b:fc:4f:70:01:f0:1a:9e:02:ad:ba:06:95:99:a3:
                    93:f6:05:a5:36:f9:62:a7:32:d0:c5:fc:f8:3f:94:
                    27:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E8:C1:99:61:EE:F4:57:8D:3F:BA:83:60:A0:26:3F:60:DE:0B:25
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/a73ef98a67104f440f7fcc9f2f0c6e1af68819c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.1.0/24
                  190.54.3.0-190.54.31.255
                  190.54.96.0/19
                  190.54.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:47:bf:28:c1:69:b3:e6:3e:3c:25:fb:75:41:06:a6:08:e0:
         1b:28:fa:52:51:42:0e:b1:91:6e:42:21:1f:6d:19:9e:34:82:
         df:03:ab:9d:d0:02:28:2a:72:5c:eb:ce:cf:67:bc:c2:a9:ed:
         81:66:62:d8:2d:91:f2:e4:28:15:e3:fd:ab:18:13:d6:62:8f:
         24:f8:e2:e4:37:a0:4a:9a:47:15:31:63:62:59:20:54:63:ec:
         46:c4:9a:2c:48:2c:91:57:59:f2:6e:47:89:e6:84:10:e2:78:
         c4:95:65:fb:a6:8a:65:33:e5:f4:ca:cc:04:0e:66:df:fb:cf:
         8d:2d:42:8a:c2:29:b6:a7:a1:56:cb:32:ab:21:6f:eb:96:10:
         24:d7:de:b8:a6:9f:25:ec:0e:3e:99:43:c3:05:70:3c:14:e5:
         2f:98:71:be:82:06:02:6a:69:4a:7e:1f:a5:04:f6:6e:28:5e:
         60:cf:c9:7c:ea:0e:fc:df:2f:06:cd:33:96:15:e0:47:01:1b:
         6f:22:7e:69:a5:49:21:91:8a:2a:59:69:99:52:41:44:9c:91:
         c6:b4:37:6f:6f:7b:37:9f:80:97:a1:05:6d:95:2b:a2:20:23:
         8b:f0:0b:8e:92:e4:12:49:54:04:80:e0:92:06:9d:7e:f3:0c:
         ea:ec:73:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 19:06:21 2023 by rpki-client on console-fra.rpki-client.org