Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/cf434af1066e44ee3f22ae99f02a9dc00a4c1a54.roa
File:                     cf434af1066e44ee3f22ae99f02a9dc00a4c1a54.roa (raw, json)
Hash identifier:          lyy1lILv8Ru44yNb9pZfsfXKQDGETA0Uz4BuNdiUiLI=
Subject key identifier:   2A:C9:A1:0D:E0:0F:C8:56:F1:6C:07:24:EF:6A:04:53:B4:95:A7:4C
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       18F556
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/cf434af1066e44ee3f22ae99f02a9dc00a4c1a54.roa
Signing time:             Wed 27 Jul 2022 04:45:22 +0000
ROA not before:           Wed 27 Jul 2022 03:00:00 +0000
ROA not after:            Sat 27 Jul 2024 03:00:00 +0000
asID:                     6429
IP address blocks:        190.54.136.0/22 maxlen: 22
                          190.54.136.0/24 maxlen: 24
                          190.54.138.0/24 maxlen: 24
                          190.54.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1635670 (0x18f556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Jul 27 03:00:00 2022 GMT
            Not After : Jul 27 03:00:00 2024 GMT
        Subject: CN=cf434af1066e44ee3f22ae99f02a9dc00a4c1a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:e7:a2:5d:31:92:6c:eb:5e:22:ba:3e:e9:
                    14:e3:b4:1f:f5:ef:29:41:a5:c1:6c:02:f2:3c:36:
                    a3:14:43:83:67:3c:0b:56:da:c5:e1:f5:bb:63:28:
                    b2:1d:97:1f:eb:e5:df:16:07:5a:20:f1:ea:5e:de:
                    be:74:a0:ab:f9:af:c6:89:5c:cb:63:ef:cf:0e:86:
                    ff:28:48:87:a3:75:ce:22:f8:26:20:27:bb:ec:d3:
                    e8:19:f3:0e:43:11:70:a2:35:75:a2:35:6e:28:ad:
                    dd:40:46:d6:82:ab:8c:86:75:18:9c:73:03:f2:6c:
                    1c:14:d1:05:73:5d:3b:73:34:e5:55:5a:a6:31:4b:
                    59:e1:61:18:58:d7:0b:1a:11:e0:16:f4:53:6b:40:
                    2f:e4:6f:59:a7:4e:fd:94:f7:5f:e0:a5:c2:a3:09:
                    09:a3:ec:6b:60:56:0b:0d:33:e4:b2:e1:d2:fe:a0:
                    7d:4c:91:00:66:78:dc:3d:9a:a5:20:e1:fe:4c:e9:
                    f2:dd:4a:5d:03:40:02:5e:cf:06:17:a7:2b:82:f8:
                    a3:6f:04:3c:1b:bd:ca:eb:e2:74:fd:e6:15:02:78:
                    2d:47:38:88:ca:23:18:51:1c:7a:3e:a9:e8:e5:e4:
                    6a:20:89:ff:ee:b3:7f:23:df:0a:13:6c:ed:55:1a:
                    9f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C9:A1:0D:E0:0F:C8:56:F1:6C:07:24:EF:6A:04:53:B4:95:A7:4C
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/cf434af1066e44ee3f22ae99f02a9dc00a4c1a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:ac:6b:09:1e:30:4d:bc:09:35:f7:cd:23:13:be:78:91:44:
         2f:80:26:fb:86:28:a0:00:82:da:64:58:af:53:19:1c:00:b1:
         01:88:17:0f:5e:25:67:97:bf:b8:45:8a:06:23:7a:be:41:ae:
         a2:7d:95:ad:42:09:02:eb:6f:17:55:5e:9c:07:aa:5b:e7:9b:
         d8:2b:aa:72:ea:e9:45:d5:0a:22:a0:db:70:53:95:7e:3e:71:
         7c:bb:b8:b6:94:31:db:65:37:6e:ea:5d:32:f8:bd:5e:7c:13:
         d0:66:6c:26:93:33:83:dc:1e:90:c5:28:50:b3:95:a0:0c:4b:
         30:8d:b3:bc:66:ba:48:f6:62:ca:62:4a:2c:bd:5b:94:3f:d8:
         be:d4:5c:1e:5a:eb:2a:77:16:fe:29:55:90:63:eb:18:e5:10:
         38:23:3d:04:57:09:73:9d:dc:d0:ef:0b:85:9a:ff:b3:c8:01:
         46:21:47:d0:a3:80:44:13:a0:a1:89:af:5a:a7:4f:33:eb:c0:
         a8:15:f7:a0:a2:3f:1a:86:f8:7a:6e:47:ba:a6:0f:ba:a8:c0:
         9a:cc:31:62:01:17:c3:71:3c:75:73:b6:f9:0e:c6:2e:79:69:
         75:b4:37:b3:be:32:d1:f2:0b:58:ee:e8:f1:ce:be:e1:2c:5d:
         fe:a1:aa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 19:11:38 2023 by rpki-client on console-ams.rpki-client.org