Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/364c9c17b2152af3fdee2b783aedc37fd5fc6d92.roa
File:                     364c9c17b2152af3fdee2b783aedc37fd5fc6d92.roa (raw, json)
Hash identifier:          yjZZlXFMAUuXcUYcJN3D62MGzWKCfx45l/QHgSWPm8I=
Subject key identifier:   7E:EC:14:EE:ED:E2:28:46:99:20:F1:54:A4:50:17:EF:D4:DE:1E:8C
Certificate issuer:       /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial:       022632
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/364c9c17b2152af3fdee2b783aedc37fd5fc6d92.roa
Signing time:             Wed 07 Dec 2022 03:13:03 +0000
ROA not before:           Tue 20 Sep 2022 20:43:20 +0000
ROA not after:            Sat 21 Sep 2024 20:43:20 +0000
asID:                     8163
IP address blocks:        190.182.0.0/18 maxlen: 18
                          190.182.45.0/24 maxlen: 24
                          190.182.0.0/24 maxlen: 24
                          190.182.1.0/24 maxlen: 24
                          190.182.2.0/24 maxlen: 24
                          190.182.3.0/24 maxlen: 24
                          190.182.4.0/24 maxlen: 24
                          190.182.5.0/24 maxlen: 24
                          190.182.6.0/24 maxlen: 24
                          190.182.7.0/24 maxlen: 24
                          190.182.8.0/24 maxlen: 24
                          190.182.9.0/24 maxlen: 24
                          190.182.10.0/24 maxlen: 24
                          190.182.11.0/24 maxlen: 24
                          190.182.14.0/24 maxlen: 24
                          190.182.15.0/24 maxlen: 24
                          190.182.16.0/24 maxlen: 24
                          190.182.17.0/24 maxlen: 24
                          190.182.18.0/24 maxlen: 24
                          190.182.19.0/24 maxlen: 24
                          190.182.20.0/24 maxlen: 24
                          190.182.21.0/24 maxlen: 24
                          190.182.22.0/24 maxlen: 24
                          190.182.23.0/24 maxlen: 24
                          190.182.25.0/24 maxlen: 24
                          190.182.26.0/24 maxlen: 24
                          190.182.27.0/24 maxlen: 24
                          190.182.28.0/24 maxlen: 24
                          190.182.29.0/24 maxlen: 24
                          190.182.30.0/24 maxlen: 24
                          190.182.31.0/24 maxlen: 24
                          190.182.32.0/24 maxlen: 24
                          190.182.33.0/24 maxlen: 24
                          190.182.34.0/24 maxlen: 24
                          190.182.35.0/24 maxlen: 24
                          190.182.36.0/24 maxlen: 24
                          190.182.37.0/24 maxlen: 24
                          190.182.38.0/24 maxlen: 24
                          190.182.39.0/24 maxlen: 24
                          190.182.40.0/24 maxlen: 24
                          190.182.41.0/24 maxlen: 24
                          190.182.42.0/24 maxlen: 24
                          190.182.43.0/24 maxlen: 24
                          190.182.44.0/24 maxlen: 24
                          190.182.46.0/24 maxlen: 24
                          190.182.47.0/24 maxlen: 24
                          190.182.48.0/24 maxlen: 24
                          190.182.49.0/24 maxlen: 24
                          190.182.50.0/24 maxlen: 24
                          190.182.51.0/24 maxlen: 24
                          190.182.52.0/24 maxlen: 24
                          190.182.53.0/24 maxlen: 24
                          190.182.54.0/24 maxlen: 24
                          190.182.55.0/24 maxlen: 24
                          190.182.56.0/24 maxlen: 24
                          190.182.57.0/24 maxlen: 24
                          190.182.58.0/24 maxlen: 24
                          190.182.59.0/24 maxlen: 24
                          190.182.60.0/24 maxlen: 24
                          190.182.61.0/24 maxlen: 24
                          190.182.62.0/24 maxlen: 24
                          190.182.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140850 (0x22632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
        Validity
            Not Before: Sep 20 20:43:20 2022 GMT
            Not After : Sep 21 20:43:20 2024 GMT
        Subject: CN=364c9c17b2152af3fdee2b783aedc37fd5fc6d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6a:db:3b:c6:29:72:47:ec:49:5e:f4:2b:fd:
                    fb:3b:0c:99:b5:53:f3:6b:1d:f8:ff:01:64:36:4c:
                    c3:8f:09:d9:ee:9b:10:cc:69:1a:3d:37:c8:cd:4b:
                    99:ef:91:a0:e9:ac:a5:a1:3c:4a:94:3d:20:f2:8a:
                    26:54:e9:99:34:72:2f:d0:89:ba:34:02:33:76:b1:
                    3a:2b:a1:87:4c:0d:57:d8:87:a5:85:27:da:89:69:
                    76:f2:7c:e4:14:9b:6c:90:b5:41:fd:b8:a8:ac:24:
                    d4:b8:fe:5a:0a:a6:c5:c0:2b:8d:de:74:63:92:31:
                    ea:2a:4b:6a:ea:64:c2:b9:0b:1d:c9:c8:5d:19:7a:
                    d2:c3:e2:20:61:09:43:2d:a4:71:98:8a:de:9a:eb:
                    f2:0e:94:b6:76:a2:90:3b:05:75:9a:3e:46:d5:c8:
                    2c:cd:aa:5f:4d:3c:5b:03:31:35:fb:2a:f3:c0:c7:
                    a6:44:b2:57:76:e7:17:6b:15:cd:3e:61:7b:55:02:
                    70:cd:e3:16:3b:87:20:db:a5:8e:58:a5:49:cb:93:
                    96:1b:c9:91:cb:c2:00:a4:b4:11:41:c7:04:ad:99:
                    54:6e:7b:ac:04:d5:32:27:d6:40:eb:67:6e:c7:90:
                    f3:9b:bc:3a:c8:2d:53:48:8c:c6:e2:af:28:1a:ed:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EC:14:EE:ED:E2:28:46:99:20:F1:54:A4:50:17:EF:D4:DE:1E:8C
            X509v3 Authority Key Identifier:
                keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/364c9c17b2152af3fdee2b783aedc37fd5fc6d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.182.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5a:b2:9b:ae:f1:83:f6:7e:fa:77:f2:50:75:e5:8f:28:09:1f:
         a3:28:1c:fd:b0:e3:2e:f0:e6:d4:3e:a9:be:f0:2f:75:10:3b:
         3e:7b:2d:e1:7f:94:f7:eb:64:97:ed:d4:fd:96:52:f8:d1:5c:
         7e:3d:32:c8:fc:c1:15:87:a0:76:3c:03:19:4c:9b:de:3c:2a:
         0b:64:dd:60:3e:a1:ff:36:88:52:7f:15:fc:81:44:ed:54:d2:
         34:c7:ca:3b:97:95:ba:2a:2e:d8:67:93:f2:22:66:a2:27:d3:
         61:b8:51:d6:24:fa:a0:09:ea:74:16:5f:2a:f0:78:01:56:4c:
         b3:c2:f0:67:cb:2b:8f:32:91:77:69:8a:a0:e8:84:7b:60:56:
         51:de:24:cb:25:1a:c0:58:92:47:80:60:e2:34:22:73:9b:e6:
         9a:b1:31:2c:62:dd:2e:73:fb:ea:ce:19:1a:a8:23:1a:b8:2e:
         65:e7:4e:97:03:fa:07:13:0b:90:c3:6c:6e:fd:5c:78:09:f9:
         ed:ce:dc:1d:8b:ad:ba:17:89:e8:24:7a:ef:d6:af:36:16:b7:
         a2:e7:42:1e:1a:4d:d2:3b:c6:37:7c:ef:22:4d:38:74:1a:8d:
         a1:10:58:bd:51:26:07:48:a6:04:83:69:83:1a:8b:f3:76:dd:
         4d:fc:d6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 17:58:47 2023 by rpki-client on console-ams.rpki-client.org