Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/9de6e77ff3d85bf9467da9e0ed8a3f7b0c400ee3.roa
File:                     9de6e77ff3d85bf9467da9e0ed8a3f7b0c400ee3.roa (raw, json)
Hash identifier:          cW3Ii7SGGI6BT1ni1xUUEBgjykZa1/AmU0mmw+YvA3I=
Subject key identifier:   2B:AC:E7:5F:A7:C5:FF:83:67:F6:CD:C1:1B:78:D2:5E:7B:65:25:C5
Certificate issuer:       /CN=bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6
Certificate serial:       0D7332
Authority key identifier: 03:83:6F:62:CD:84:48:90:75:9C:DD:AE:F4:FF:A7:33:CF:5A:B6:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/9de6e77ff3d85bf9467da9e0ed8a3f7b0c400ee3.roa
Signing time:             Wed 24 Mar 2021 14:37:22 +0000
ROA not before:           Wed 24 Mar 2021 14:37:22 +0000
ROA not after:            Tue 24 Mar 2026 14:37:22 +0000
asID:                     28022
IP address blocks:        190.106.64.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881458 (0xd7332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6
        Validity
            Not Before: Mar 24 14:37:22 2021 GMT
            Not After : Mar 24 14:37:22 2026 GMT
        Subject: CN=9de6e77ff3d85bf9467da9e0ed8a3f7b0c400ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:f8:cb:2a:25:ee:d0:74:ea:e5:3e:0d:d0:
                    9c:7b:d6:29:27:6f:53:52:aa:de:d8:a4:2c:af:d9:
                    0e:0e:da:ad:70:0b:0d:63:8b:f8:03:57:54:c3:2f:
                    b5:6d:d2:49:27:4c:5c:c3:bd:ba:a8:91:3c:e2:1d:
                    5b:fb:4f:e5:a5:2a:72:2a:08:68:75:ab:4b:c2:5b:
                    ce:65:84:c7:cb:6c:a1:91:60:c0:6e:19:b8:10:f2:
                    66:ae:f4:7e:98:a5:90:7f:da:f4:c5:fc:95:92:e7:
                    da:1e:3d:fb:ee:87:e9:60:69:e4:f9:0a:4c:e5:6e:
                    08:ea:33:b1:43:a6:88:8e:41:65:f6:2d:07:11:03:
                    28:62:6d:5b:e9:1c:d5:d2:da:7f:76:95:81:fa:83:
                    ba:2a:03:98:4a:de:f7:1d:7d:23:ad:6b:86:8f:c4:
                    ca:f0:8e:88:7f:31:51:dd:8e:5c:4c:cb:05:64:88:
                    be:92:49:dd:5a:05:38:7f:60:ad:6f:8d:0b:8e:be:
                    38:c7:dd:bd:f5:f9:98:c2:12:d1:80:72:dc:c2:3b:
                    58:4c:19:20:70:60:6b:d0:21:1c:57:da:83:75:dd:
                    f2:60:3d:08:1c:e0:a0:50:83:5f:df:62:03:ba:5b:
                    77:46:b4:16:a2:05:77:b6:7f:10:dd:c0:b0:c4:dc:
                    ad:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AC:E7:5F:A7:C5:FF:83:67:F6:CD:C1:1B:78:D2:5E:7B:65:25:C5
            X509v3 Authority Key Identifier:
                keyid:03:83:6F:62:CD:84:48:90:75:9C:DD:AE:F4:FF:A7:33:CF:5A:B6:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/9de6e77ff3d85bf9467da9e0ed8a3f7b0c400ee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:71:57:3d:93:ce:0c:f1:df:62:7f:c1:21:8a:92:84:0e:a9:
         56:fd:f4:f2:e1:f6:ba:9d:3d:cf:e9:69:90:54:60:88:e0:30:
         7c:d9:ae:be:e0:7c:2f:57:13:86:90:9b:64:5e:53:7f:35:72:
         f3:83:e0:3f:27:a5:c5:5c:61:b0:e1:38:ca:9a:c5:d2:19:39:
         81:b9:b5:70:5d:f7:6c:08:74:25:74:40:79:c7:09:aa:4f:da:
         e9:7c:85:ed:69:4b:39:93:91:f4:3f:0d:a8:ab:25:ab:8d:c2:
         b6:d7:29:55:3f:98:8f:cb:7e:4b:34:95:20:9e:0f:1b:9d:b6:
         9a:58:7f:bb:80:59:0c:66:25:91:a4:89:d1:dc:bc:2b:24:47:
         72:bd:3b:27:f9:1b:5f:11:4b:97:00:f8:9a:c8:cd:bd:d3:5f:
         3e:85:72:d2:f1:c0:e3:1f:76:b0:3e:8a:28:d5:d7:0c:0e:38:
         fa:66:17:d4:f9:ed:e4:69:2b:80:48:13:5f:c2:d4:1f:f9:11:
         ba:e6:4e:77:ff:46:98:2b:31:80:71:bf:51:9d:57:d4:96:de:
         b3:66:b7:6e:e7:7e:33:8d:63:8c:07:0e:65:2f:dd:33:1a:0f:
         2c:60:79:e6:f9:34:00:3d:f6:b3:0c:d1:12:ce:8c:29:68:e6:
         64:1f:a7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 22:14:42 2023 by rpki-client on console-fra.rpki-client.org