Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/d822b8f984cbd448b6aef3950d225a45a6bcdf84.roa
File:                     d822b8f984cbd448b6aef3950d225a45a6bcdf84.roa (raw, json)
Hash identifier:          Ei1PvN4EvImXRMnBXd5Cut95Ao8PaSsXSYoLeLmjkP4=
Subject key identifier:   66:16:8D:E1:C5:89:C0:76:9D:28:A9:16:8A:E6:A7:8E:7F:F1:F9:BD
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       0F849D
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/d822b8f984cbd448b6aef3950d225a45a6bcdf84.roa
Signing time:             Mon 05 Jul 2021 17:54:27 +0000
ROA not before:           Mon 05 Jul 2021 03:00:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     52267
IP address blocks:        190.54.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1016989 (0xf849d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Jul  5 03:00:00 2021 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject: CN=d822b8f984cbd448b6aef3950d225a45a6bcdf84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:f8:9d:ac:86:a2:b1:b6:d9:20:33:5c:f5:
                    a9:ea:a1:b7:b2:59:6f:de:50:9b:2e:dd:d1:43:60:
                    1d:b3:05:f3:c4:d4:a7:a4:33:5e:0a:d6:b7:b4:6a:
                    9b:47:4b:b1:b2:9d:9d:bf:23:8c:60:3d:80:93:78:
                    04:2d:c0:37:90:da:0b:05:64:3e:1f:8c:12:2c:19:
                    10:c4:52:68:4b:56:d9:67:8d:00:e4:83:b5:9d:23:
                    b8:9c:a6:68:54:f8:8d:d6:44:3b:36:cd:03:dd:ad:
                    94:ac:54:a1:e2:da:90:2b:83:2c:c2:e8:65:0f:4c:
                    a0:10:ae:18:c7:02:1f:2e:3e:88:7a:f4:1a:6c:41:
                    66:e6:a0:c8:38:d6:0b:c9:51:a9:e7:33:3e:1c:44:
                    8a:5e:4e:6b:3a:6d:b0:1b:a8:e4:63:b9:0b:ff:84:
                    d5:6b:f3:24:dc:ff:f5:1b:17:23:aa:d6:66:5d:17:
                    7c:48:06:57:97:81:ff:35:34:f5:f7:47:33:e1:19:
                    09:26:1e:66:64:4f:d3:04:9c:59:15:e4:b0:d8:46:
                    b5:32:76:f6:70:42:54:cd:4c:af:11:49:2b:f2:44:
                    20:2d:b4:1c:db:9e:8a:93:20:2f:58:af:e9:f7:cf:
                    5a:04:86:17:38:58:93:3a:06:03:39:15:89:1c:f0:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:16:8D:E1:C5:89:C0:76:9D:28:A9:16:8A:E6:A7:8E:7F:F1:F9:BD
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/d822b8f984cbd448b6aef3950d225a45a6bcdf84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:6d:64:54:9c:4a:1a:ca:b1:9d:0b:22:6f:33:c2:ab:1c:1d:
         b6:f4:ab:fc:b1:d9:91:8b:92:64:19:76:41:43:1f:1b:c2:9b:
         8b:90:00:49:5a:a2:86:07:31:9e:ee:b4:2c:3a:99:c0:00:9e:
         44:43:51:69:70:7c:60:68:f3:39:fc:bb:22:2b:f4:26:0e:c9:
         57:c0:f5:35:8c:88:13:0a:db:8f:0f:fe:7b:06:dd:e1:a0:e4:
         15:66:92:52:bd:cf:02:07:6a:ab:9f:c4:68:e9:65:50:df:dc:
         77:68:45:61:6e:ad:6d:ef:72:64:b2:ba:7a:7a:2f:67:6c:1e:
         d9:e1:21:19:c5:8d:0c:f5:73:68:78:89:3b:e8:73:a5:24:f5:
         3c:3c:c7:88:b0:ad:ee:a9:00:a9:2d:ca:94:f1:eb:9a:15:b8:
         ec:f0:52:fa:1c:cb:ee:20:68:fd:ac:48:5e:ce:71:12:eb:95:
         37:8d:d4:69:26:92:fb:74:32:6e:3c:36:e0:19:85:42:b9:f0:
         33:76:f5:fa:78:84:81:ea:ec:42:ad:34:a1:1a:5f:8f:15:7b:
         77:b0:52:ff:1d:64:b4:76:d1:af:32:b8:37:68:c6:20:79:ab:
         53:87:0d:a3:30:18:ab:5d:49:ad:bb:6d:df:4e:95:71:1e:9b:
         6b:4b:3c:de
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDD4SdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFj
NzMwY2M0ZjExNDBlOWMzYTI0Mzc2OGQxMDUyYWUyYmYzNmQyNzkwHhcNMjEwNzA1
MDMwMDAwWhcNMjMwNzA1MDMwMDAwWjAzMTEwLwYDVQQDEyhkODIyYjhmOTg0Y2Jk
NDQ4YjZhZWYzOTUwZDIyNWE0NWE2YmNkZjg0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr5r4nayGorG22SAzXPWp6qG3sllv3lCbLt3RQ2AdswXzxNSn
pDNeCta3tGqbR0uxsp2dvyOMYD2Ak3gELcA3kNoLBWQ+H4wSLBkQxFJoS1bZZ40A
5IO1nSO4nKZoVPiN1kQ7Ns0D3a2UrFSh4tqQK4MswuhlD0ygEK4YxwIfLj6IevQa
bEFm5qDIONYLyVGp5zM+HESKXk5rOm2wG6jkY7kL/4TVa/Mk3P/1GxcjqtZmXRd8
SAZXl4H/NTT190cz4RkJJh5mZE/TBJxZFeSw2Ea1Mnb2cEJUzUyvEUkr8kQgLbQc
256KkyAvWK/p989aBIYXOFiTOgYDORWJHPCqeQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGYWjeHFicB2nSipFormp45/8fm9MB8GA1UdIwQYMBaAFD2jZzfaSs3l6WtL
qUcId2SKsyUZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWM3MzBj
YzRmMTE0MGU5YzNhMjQzNzY4ZDEwNTJhZTJiZjM2ZDI3OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTFjODFlZmYtYTZjZC00MzE5LWIzYzMtZGNhODNl
ODY2ZDI1L2Q4MjJiOGY5ODRjYmQ0NDhiNmFlZjM5NTBkMjI1YTQ1YTZiY2RmODQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MWM4MWVmZi1hNmNkLTQzMTktYjNjMy1kY2E4
M2U4NjZkMjUvMWM3MzBjYzRmMTE0MGU5YzNhMjQzNzY4ZDEwNTJhZTJiZjM2ZDI3
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL42HjANBgkqhkiG9w0BAQsFAAOCAQEAGW1kVJxKGsqxnQsi
bzPCqxwdtvSr/LHZkYuSZBl2QUMfG8Kbi5AASVqihgcxnu60LDqZwACeRENRaXB8
YGjzOfy7Iiv0Jg7JV8D1NYyIEwrbjw/+ewbd4aDkFWaSUr3PAgdqq5/EaOllUN/c
d2hFYW6tbe9yZLK6enovZ2we2eEhGcWNDPVzaHiJO+hzpST1PDzHiLCt7qkAqS3K
lPHrmhW47PBS+hzL7iBo/axIXs5xEuuVN43UaSaS+3Qybjw24BmFQrnwM3b1+niE
gersQq00oRpfjxV7d7BS/x1ktHbRrzK4N2jGIHmrU4cNozAYq11Jrbtt306VcR6b
a0s83g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-fra.rpki-client.org