Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/8fe7d9c11533f476b58831d06f30bf85b9ea4cc1.roa
File:                     8fe7d9c11533f476b58831d06f30bf85b9ea4cc1.roa (raw, json)
Hash identifier:          CdEU4EruKFEkSzc8QG9N5vGOmDYQMGp4+8cZZyJT8Gg=
Subject key identifier:   75:52:8E:7D:0B:F6:DC:0F:72:28:9A:04:3C:5E:BF:17:00:22:5C:FE
Certificate issuer:       /CN=d0615608a5f64a875e5be0a66c710b668ecb0886
Certificate serial:       189F
Authority key identifier: C3:2B:D5:97:7D:9A:F1:4D:F2:53:CB:EB:AC:C7:D2:22:2A:41:67:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0615608a5f64a875e5be0a66c710b668ecb0886.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/8fe7d9c11533f476b58831d06f30bf85b9ea4cc1.roa
Signing time:             Sun 11 Apr 2021 18:57:19 +0000
ROA not before:           Sun 11 Apr 2021 03:00:00 +0000
ROA not after:            Tue 11 Apr 2023 03:00:00 +0000
asID:                     28398
IP address blocks:        164.163.188.0/22 maxlen: 22
                          164.163.188.0/24 maxlen: 24
                          164.163.189.0/24 maxlen: 24
                          164.163.190.0/24 maxlen: 24
                          164.163.191.0/24 maxlen: 24
                          2806:2ed::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6303 (0x189f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0615608a5f64a875e5be0a66c710b668ecb0886
        Validity
            Not Before: Apr 11 03:00:00 2021 GMT
            Not After : Apr 11 03:00:00 2023 GMT
        Subject: CN=8fe7d9c11533f476b58831d06f30bf85b9ea4cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:63:c5:ff:6a:ac:8b:b0:28:43:f5:5a:3c:3e:
                    52:3a:ba:05:08:b1:47:d8:10:b0:bf:de:44:df:34:
                    80:a0:3d:0d:36:a3:94:24:eb:48:f1:77:22:eb:41:
                    1b:1f:c8:fe:3a:e8:73:9f:94:a3:86:cd:46:72:18:
                    22:3f:e0:94:c2:c5:70:d3:bb:09:0a:5e:97:a6:01:
                    90:24:ba:b3:03:6c:4b:a3:3e:8f:e9:cc:2d:e1:31:
                    11:24:6d:45:1a:62:b3:b2:56:62:1f:86:6b:4f:a1:
                    8c:64:3b:b8:26:89:c2:13:bb:93:b0:a7:22:77:18:
                    07:2b:dd:31:c5:6f:91:91:a5:0f:a1:59:3f:0e:02:
                    9c:c8:c1:7b:80:83:50:5b:a4:3b:4e:39:80:1a:4c:
                    8e:1e:38:1f:7e:11:33:b8:1f:e2:23:6d:16:b7:cc:
                    89:6f:fd:97:58:42:5c:60:04:2b:94:9c:d6:f4:d4:
                    cc:46:57:af:1e:32:0d:86:a6:cf:b3:22:48:fe:3d:
                    77:49:82:51:78:07:29:1b:2f:fb:8c:33:8b:5d:0b:
                    5e:ab:f1:cc:d3:a1:1f:6c:1a:86:c9:6a:ff:1e:d0:
                    87:3f:53:23:2e:f4:2f:f1:c0:68:a6:f7:68:79:2a:
                    a2:11:85:a7:96:13:99:db:c6:b4:52:7a:87:24:e0:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:52:8E:7D:0B:F6:DC:0F:72:28:9A:04:3C:5E:BF:17:00:22:5C:FE
            X509v3 Authority Key Identifier:
                keyid:C3:2B:D5:97:7D:9A:F1:4D:F2:53:CB:EB:AC:C7:D2:22:2A:41:67:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0615608a5f64a875e5be0a66c710b668ecb0886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/8fe7d9c11533f476b58831d06f30bf85b9ea4cc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/d0615608a5f64a875e5be0a66c710b668ecb0886.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.188.0/22
                IPv6:
                  2806:2ed::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:b5:e3:5e:f7:b6:17:1e:bf:ea:7c:3e:bf:6e:6b:c9:ce:50:
         60:7e:c4:2e:73:d6:63:af:e5:cb:83:27:82:37:e2:8a:1b:1c:
         21:2a:01:e3:f7:cf:7d:2d:a3:4f:7c:73:50:b1:fb:12:ca:c0:
         0a:02:d5:0f:67:86:88:c4:8a:26:20:0d:d8:9d:95:b3:63:c1:
         37:9e:92:85:fc:da:10:e5:e0:b6:2e:4f:b6:1f:76:14:5f:54:
         fa:35:fc:f7:44:4b:0c:e4:d7:c4:11:1f:7e:20:9f:21:77:36:
         b4:4e:1c:a5:fe:f6:cc:11:e5:bd:d7:13:da:fd:44:3a:50:f1:
         f2:7c:bf:33:55:ca:bc:a6:36:16:98:b4:02:3f:ea:2b:a1:24:
         65:2b:77:54:92:47:41:1a:f5:fa:33:56:63:f0:26:bf:8e:c2:
         cd:05:fe:ba:70:d0:20:3c:c0:04:ca:34:43:52:aa:7b:66:32:
         62:3a:1b:f5:83:e5:b1:93:93:08:8f:1b:fd:4f:b0:88:14:70:
         22:5b:9b:72:c9:d9:11:af:ed:66:a4:37:be:65:ea:70:be:32:
         af:b5:61:1c:2c:2b:b5:54:93:03:05:ad:57:ac:c2:9d:b0:70:
         80:bd:da:89:d0:2e:c8:1b:d8:c1:67:dd:ba:7c:20:bf:30:45:
         fb:61:f8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org