Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/070e379d92d8fb751cc4dc56d47f7ac741cb9d71.roa
File:                     070e379d92d8fb751cc4dc56d47f7ac741cb9d71.roa (raw, json)
Hash identifier:          +Gr5cKG193x1MVsvjXZYY+bgigHwJJDHn2Bo7nQre2k=
Subject key identifier:   9D:68:61:08:E6:3C:44:D6:49:A0:CC:18:E6:50:CE:76:86:56:A7:61
Certificate issuer:       /CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
Certificate serial:       1E1D3B
Authority key identifier: ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/070e379d92d8fb751cc4dc56d47f7ac741cb9d71.roa
Signing time:             Wed 05 Apr 2023 12:12:45 +0000
ROA not before:           Tue 04 Apr 2023 12:12:00 +0000
ROA not after:            Sat 05 Apr 2025 12:12:00 +0000
asID:                     272975
IP address blocks:        190.104.44.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1973563 (0x1e1d3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
        Validity
            Not Before: Apr  4 12:12:00 2023 GMT
            Not After : Apr  5 12:12:00 2025 GMT
        Subject: CN=070e379d92d8fb751cc4dc56d47f7ac741cb9d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a6:9d:48:67:d1:53:cd:a1:5b:e2:b5:2d:d3:
                    43:35:1b:94:e3:e4:b2:89:83:f1:88:e3:54:2f:eb:
                    aa:bf:10:74:c6:13:35:c9:24:b8:ee:fe:4c:6d:b8:
                    9a:ee:d1:84:53:bc:ef:0b:df:7f:fa:ad:10:f5:e5:
                    c6:1d:7a:0e:a3:79:5a:c2:2b:32:96:1e:5e:3f:04:
                    3b:88:d4:c2:b5:c3:a5:20:f0:3b:da:50:82:6a:1c:
                    80:12:c0:00:d2:c4:c0:fd:c6:f8:3a:f9:55:49:16:
                    b8:10:66:51:9e:47:11:31:3b:d1:f0:d1:05:a4:40:
                    a2:39:17:ca:cd:7a:70:6b:7c:9b:ca:df:55:fe:8a:
                    d7:38:5e:18:3d:13:12:95:9d:66:17:ea:f9:80:56:
                    3e:db:18:8f:89:ff:65:dc:40:2e:e3:d7:bd:30:09:
                    fd:a2:ff:ae:07:47:ef:bc:59:cf:60:c2:34:12:8a:
                    01:3f:59:7b:6e:8c:d8:b4:45:b9:6f:fc:6d:43:9d:
                    90:74:dc:d8:4c:12:96:5f:60:1f:60:a1:36:e3:48:
                    dc:80:41:7a:4c:4a:c1:78:26:e9:43:2e:ca:fe:d5:
                    fb:19:9c:1a:2f:e6:45:67:07:f3:0f:87:75:1c:53:
                    ae:21:f7:79:28:df:62:b8:e4:61:f5:8f:94:f0:79:
                    59:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:68:61:08:E6:3C:44:D6:49:A0:CC:18:E6:50:CE:76:86:56:A7:61
            X509v3 Authority Key Identifier:
                keyid:ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/070e379d92d8fb751cc4dc56d47f7ac741cb9d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:c7:37:b5:5d:b2:86:82:48:2b:b2:a2:6d:21:3a:19:a3:f5:
         f1:9f:7e:62:06:d5:b5:9e:4f:9f:6e:e0:c5:4c:39:e6:83:c8:
         f2:0a:cb:8c:80:76:6f:2e:56:c3:7c:2f:bf:83:22:32:ee:e6:
         72:50:ca:c2:8f:2b:0c:06:72:77:4e:3a:fc:af:57:0f:4e:d8:
         65:58:95:1a:c6:fb:d1:1a:10:aa:31:b4:d3:25:f9:a6:a9:f2:
         e3:b6:41:19:1a:1f:85:97:62:4f:d0:6c:c5:63:9d:4c:19:4f:
         65:80:ab:23:8c:d6:fa:99:64:30:6a:1f:62:08:57:71:46:43:
         af:a6:2f:fc:e7:45:15:0f:41:26:1f:40:10:5d:7c:6e:ef:bf:
         44:e8:4c:dd:4c:58:8a:b0:bf:cd:ba:d0:8b:ff:0c:b2:3a:cf:
         0e:7e:69:b2:87:f0:bd:80:2b:2c:00:38:98:43:cf:7c:ba:c6:
         8a:8b:d8:91:4c:34:1d:3a:7a:7c:82:71:4c:a6:20:e7:62:94:
         72:61:2b:ff:a8:9b:56:b0:dc:bd:a8:1d:3f:49:8f:fd:da:fd:
         d8:69:e2:20:d1:e6:60:31:9b:c5:a1:a4:50:54:13:69:9e:50:
         6f:bf:9b:0d:5e:94:f5:cd:18:fe:80:71:fa:a3:8d:be:c5:df:
         50:79:9e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 18:20:25 2023 by rpki-client on console-ams.rpki-client.org