Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/b39d15eeb9134bee4fd880ad452a7085b2a7a894.roa
File:                     b39d15eeb9134bee4fd880ad452a7085b2a7a894.roa (raw, json)
Hash identifier:          Y0H5H7h6wxyxVCRXDIVXHmUu3Zvr5I7fB4RINbAhi9s=
Subject key identifier:   39:33:A8:AD:2B:1E:57:6F:2F:C4:E9:60:D3:18:3B:6C:C0:65:19:1E
Certificate issuer:       /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial:       170E
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/b39d15eeb9134bee4fd880ad452a7085b2a7a894.roa
Signing time:             Wed 21 Sep 2022 20:47:04 +0000
ROA not before:           Wed 21 Sep 2022 20:43:20 +0000
ROA not after:            Sat 21 Sep 2024 20:43:20 +0000
asID:                     8163
IP address blocks:        190.182.0.0/24 maxlen: 24
                          190.182.1.0/24 maxlen: 24
                          190.182.2.0/24 maxlen: 24
                          190.182.3.0/24 maxlen: 24
                          190.182.4.0/24 maxlen: 24
                          190.182.5.0/24 maxlen: 24
                          190.182.6.0/24 maxlen: 24
                          190.182.7.0/24 maxlen: 24
                          190.182.8.0/24 maxlen: 24
                          190.182.9.0/24 maxlen: 24
                          190.182.10.0/24 maxlen: 24
                          190.182.11.0/24 maxlen: 24
                          190.182.14.0/24 maxlen: 24
                          190.182.15.0/24 maxlen: 24
                          190.182.16.0/24 maxlen: 24
                          190.182.17.0/24 maxlen: 24
                          190.182.18.0/24 maxlen: 24
                          190.182.19.0/24 maxlen: 24
                          190.182.20.0/24 maxlen: 24
                          190.182.21.0/24 maxlen: 24
                          190.182.22.0/24 maxlen: 24
                          190.182.23.0/24 maxlen: 24
                          190.182.25.0/24 maxlen: 24
                          190.182.26.0/24 maxlen: 24
                          190.182.27.0/24 maxlen: 24
                          190.182.28.0/24 maxlen: 24
                          190.182.29.0/24 maxlen: 24
                          190.182.30.0/24 maxlen: 24
                          190.182.31.0/24 maxlen: 24
                          190.182.32.0/24 maxlen: 24
                          190.182.33.0/24 maxlen: 24
                          190.182.34.0/24 maxlen: 24
                          190.182.35.0/24 maxlen: 24
                          190.182.36.0/24 maxlen: 24
                          190.182.37.0/24 maxlen: 24
                          190.182.38.0/24 maxlen: 24
                          190.182.39.0/24 maxlen: 24
                          190.182.40.0/24 maxlen: 24
                          190.182.41.0/24 maxlen: 24
                          190.182.42.0/24 maxlen: 24
                          190.182.43.0/24 maxlen: 24
                          190.182.44.0/24 maxlen: 24
                          190.182.45.0/24 maxlen: 24
                          190.182.46.0/24 maxlen: 24
                          190.182.47.0/24 maxlen: 24
                          190.182.48.0/24 maxlen: 24
                          190.182.49.0/24 maxlen: 24
                          190.182.50.0/24 maxlen: 24
                          190.182.51.0/24 maxlen: 24
                          190.182.52.0/24 maxlen: 24
                          190.182.53.0/24 maxlen: 24
                          190.182.54.0/24 maxlen: 24
                          190.182.55.0/24 maxlen: 24
                          190.182.56.0/24 maxlen: 24
                          190.182.57.0/24 maxlen: 24
                          190.182.58.0/24 maxlen: 24
                          190.182.59.0/24 maxlen: 24
                          190.182.60.0/24 maxlen: 24
                          190.182.61.0/24 maxlen: 24
                          190.182.62.0/24 maxlen: 24
                          190.182.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5902 (0x170e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
        Validity
            Not Before: Sep 21 20:43:20 2022 GMT
            Not After : Sep 21 20:43:20 2024 GMT
        Subject: CN=b39d15eeb9134bee4fd880ad452a7085b2a7a894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:1d:43:60:cf:0e:a5:0e:d0:52:26:63:6d:
                    c8:84:08:41:b7:2c:9f:af:80:35:1e:4f:24:29:05:
                    92:0c:0c:3f:07:88:dd:ea:57:3e:c3:ff:cd:9a:a0:
                    8b:53:05:23:02:ba:13:2f:2a:ca:c1:da:2a:36:0d:
                    83:ed:f6:14:b9:d7:79:3a:e2:2b:5c:7f:44:15:f8:
                    e6:9d:7e:33:d0:05:20:d0:c2:aa:d8:e9:b1:6f:74:
                    ec:70:b7:b7:5c:5c:64:d0:34:7e:29:59:b5:f6:b7:
                    36:07:50:9c:c1:37:be:ed:f7:02:3a:53:37:bc:54:
                    8f:48:16:28:28:1a:81:27:ac:dc:f6:79:85:70:a2:
                    c5:f3:58:88:75:08:34:41:20:0e:1e:00:3e:63:27:
                    26:db:49:c9:e1:3d:c0:63:da:ff:ee:54:4b:85:13:
                    c0:76:70:2a:a7:67:79:dc:90:0d:68:de:dd:f8:2b:
                    81:41:1b:08:bd:5e:8e:fb:38:15:ea:99:79:5a:9b:
                    3e:2f:b5:01:64:1b:98:65:c8:8d:25:a3:a2:38:c3:
                    b6:ef:38:e0:f1:22:d2:f0:f9:31:89:42:af:0f:f1:
                    cc:e1:ac:cf:93:db:51:10:fb:c9:d7:14:eb:8b:e9:
                    72:0a:be:3b:c9:c4:4b:16:54:4a:d3:8f:48:fb:37:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:33:A8:AD:2B:1E:57:6F:2F:C4:E9:60:D3:18:3B:6C:C0:65:19:1E
            X509v3 Authority Key Identifier:
                keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/b39d15eeb9134bee4fd880ad452a7085b2a7a894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.182.0.0-190.182.11.255
                  190.182.14.0-190.182.23.255
                  190.182.25.0-190.182.63.255

    Signature Algorithm: sha256WithRSAEncryption
         39:5b:a6:e6:84:c9:f0:d8:42:0f:7b:37:7a:e7:51:eb:e5:93:
         42:ca:df:d9:0f:73:a9:39:d9:55:2a:7c:7f:91:7f:b5:64:f1:
         49:e6:bc:5f:d6:ff:05:4e:fa:49:8b:68:36:e3:ab:8d:81:dc:
         86:ea:d9:8b:d4:47:90:f9:1e:74:e5:9b:a8:64:14:7f:2a:96:
         16:4b:61:2a:d8:66:1e:71:87:c3:8d:2d:54:f4:c4:22:45:7c:
         82:ec:cc:5b:a7:1b:68:d7:01:09:c5:2e:54:40:5c:64:4e:73:
         17:12:aa:b9:d7:84:cf:eb:a8:50:24:49:61:6c:c0:e4:ca:fa:
         fe:1c:54:68:da:09:1b:32:d3:7a:5a:29:49:b7:56:6a:a7:2e:
         98:a2:e3:39:ec:c8:d1:09:9a:cf:69:97:ee:f9:09:8b:3c:74:
         d9:33:6e:01:bd:56:7e:61:9b:06:af:31:85:ed:90:fe:1e:71:
         af:02:d0:4f:be:f8:e2:1d:6a:a8:0b:7e:d4:1c:0b:41:99:db:
         62:21:4c:59:e8:59:e4:5a:bd:a5:64:91:39:37:27:24:e6:37:
         0e:28:0f:c1:35:ce:5d:fd:71:bf:05:59:f2:ae:13:a0:70:f0:
         ef:8b:52:0a:08:e5:e8:93:25:55:8d:5a:62:82:05:7c:30:66:
         19:ee:89:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-fra.rpki-client.org