Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/3c31c5a2e4fb3c67fdc3cc81d66e09a072abd543.roa
File:                     3c31c5a2e4fb3c67fdc3cc81d66e09a072abd543.roa (raw, json)
Hash identifier:          vMeobqzoK/Oe4Vw4Wl//Y7FdvPx2pfzlIYq5ASZNCBQ=
Subject key identifier:   47:B9:8C:44:9A:8C:70:50:EA:D0:78:3B:C4:36:F5:3E:02:DB:36:52
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       1C26CC
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/3c31c5a2e4fb3c67fdc3cc81d66e09a072abd543.roa
Signing time:             Wed 09 Nov 2022 20:17:53 +0000
ROA not before:           Wed 21 Sep 2022 20:17:05 +0000
ROA not after:            Sun 22 Sep 2024 20:17:05 +0000
asID:                     265705
IP address blocks:        186.28.180.0/24 maxlen: 24
                          186.28.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1844940 (0x1c26cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Sep 21 20:17:05 2022 GMT
            Not After : Sep 22 20:17:05 2024 GMT
        Subject: CN=3c31c5a2e4fb3c67fdc3cc81d66e09a072abd543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d4:b4:d9:32:63:f2:ed:07:c0:9d:20:66:79:
                    ce:66:a1:80:d4:a2:0e:76:41:94:bf:74:55:3e:29:
                    98:c6:f0:f7:db:81:04:e0:d2:4f:06:5c:a9:fd:a0:
                    c8:fd:36:c0:90:92:16:cc:79:25:53:4d:09:18:9e:
                    fc:4d:22:86:a3:dd:b4:96:3e:43:69:1b:98:dc:ce:
                    24:8c:74:20:8a:ce:ba:4a:c0:d8:e9:e4:f6:2d:0f:
                    a7:7a:8c:38:2e:47:a8:73:41:08:4f:5a:e0:04:f5:
                    06:15:5a:f3:51:a7:2b:71:c9:b3:4c:54:62:87:bb:
                    37:b6:5c:aa:d7:83:32:cd:ca:b8:ba:3f:d9:d7:5a:
                    6d:fb:ee:bf:90:27:32:b3:4c:3a:e8:40:95:a2:92:
                    8f:4a:52:0c:67:af:82:e1:97:26:b2:87:a9:4a:1e:
                    5b:23:39:de:98:b4:22:17:e9:d9:45:cb:03:5e:36:
                    57:4f:22:8f:8c:79:71:4a:c8:50:a9:24:2b:f5:3a:
                    aa:25:ad:fd:1c:df:e5:3e:9b:c9:d9:6d:0d:46:85:
                    9e:3b:e9:2f:52:2c:1c:0d:fa:5c:20:d0:27:35:cf:
                    92:0a:0c:ce:3a:09:fb:04:28:d7:5e:5e:81:6a:5a:
                    cf:e5:5d:a3:6a:f8:13:6e:ea:0d:8a:3d:24:83:9a:
                    17:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B9:8C:44:9A:8C:70:50:EA:D0:78:3B:C4:36:F5:3E:02:DB:36:52
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/3c31c5a2e4fb3c67fdc3cc81d66e09a072abd543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.28.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:ce:9d:fc:f1:62:b3:47:a0:44:e1:ed:65:11:24:62:2c:16:
         7e:dc:b1:d5:74:71:0c:1e:ee:d5:67:8b:63:2d:e4:be:04:50:
         80:d7:f1:dd:57:45:27:02:71:09:0f:85:13:f4:40:ad:94:8e:
         ca:03:4c:f2:ae:b3:cb:26:9b:e4:e2:8a:9f:85:5d:c6:8b:47:
         e1:e1:2e:0e:d9:97:5b:8e:dc:76:d1:e8:59:ba:6c:8e:c6:3e:
         a1:2e:08:76:17:58:d2:bf:8d:09:86:ce:59:f0:f9:05:15:8b:
         04:d4:bb:4e:fb:55:92:7e:3b:96:f2:83:fa:a4:0e:2b:52:01:
         d6:69:34:a0:84:63:fc:5a:4e:21:ff:70:43:2d:6d:2f:52:52:
         53:8c:34:66:c4:69:0c:08:05:12:3f:62:c9:ab:14:95:c6:21:
         63:77:f9:43:b7:a5:25:b3:06:b2:a4:6a:dd:8e:22:d1:c3:84:
         06:97:de:ad:bd:03:21:d3:fd:97:53:ae:82:fc:53:ac:a8:b1:
         1e:22:9c:a3:5b:ef:91:c0:f7:a2:4f:7c:69:fb:f4:3d:ec:66:
         8b:10:10:2c:cd:8d:c5:48:c8:2d:65:3a:00:62:73:90:e6:3e:
         b8:ef:6e:53:76:12:10:2e:0c:02:a0:9c:57:2d:bf:ca:34:20:
         59:9e:eb:8f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHCbMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4
NTUxOTdmNTkwZmYyOThiNTJhYjM1OGRhMDhhMGZkYmZlNmE4ODMwHhcNMjIwOTIx
MjAxNzA1WhcNMjQwOTIyMjAxNzA1WjAzMTEwLwYDVQQDEygzYzMxYzVhMmU0ZmIz
YzY3ZmRjM2NjODFkNjZlMDlhMDcyYWJkNTQzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl9S02TJj8u0HwJ0gZnnOZqGA1KIOdkGUv3RVPimYxvD324EE
4NJPBlyp/aDI/TbAkJIWzHklU00JGJ78TSKGo920lj5DaRuY3M4kjHQgis66SsDY
6eT2LQ+neow4Lkeoc0EIT1rgBPUGFVrzUacrccmzTFRih7s3tlyq14Myzcq4uj/Z
11pt++6/kCcys0w66ECVopKPSlIMZ6+C4ZcmsoepSh5bIznemLQiF+nZRcsDXjZX
TyKPjHlxSshQqSQr9TqqJa39HN/lPpvJ2W0NRoWeO+kvUiwcDfpcINAnNc+SCgzO
Ogn7BCjXXl6BalrP5V2javgTbuoNij0kg5oXLQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEe5jESajHBQ6tB4O8Q29T4C2zZSMB8GA1UdIwQYMBaAFDzc0eVbXZoW/XX/
IxD889OGilrKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzg1NTE5
N2Y1OTBmZjI5OGI1MmFiMzU4ZGEwOGEwZmRiZmU2YTg4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTMyYzQyNDAtY2VlYS00NzBlLTk2NGMtNzRkOWJj
MWUzODBhLzNjMzFjNWEyZTRmYjNjNjdmZGMzY2M4MWQ2NmUwOWEwNzJhYmQ1NDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMzJjNDI0MC1jZWVhLTQ3MGUtOTY0Yy03NGQ5
YmMxZTM4MGEvNzg1NTE5N2Y1OTBmZjI5OGI1MmFiMzU4ZGEwOGEwZmRiZmU2YTg4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAboctDANBgkqhkiG9w0BAQsFAAOCAQEAjs6d/PFis0egROHt
ZREkYiwWftyx1XRxDB7u1WeLYy3kvgRQgNfx3VdFJwJxCQ+FE/RArZSOygNM8q6z
yyab5OKKn4VdxotH4eEuDtmXW47cdtHoWbpsjsY+oS4IdhdY0r+NCYbOWfD5BRWL
BNS7TvtVkn47lvKD+qQOK1IB1mk0oIRj/FpOIf9wQy1tL1JSU4w0ZsRpDAgFEj9i
yasUlcYhY3f5Q7elJbMGsqRq3Y4i0cOEBpferb0DIdP9l1OugvxTrKixHiKco1vv
kcD3ok98afv0PexmixAQLM2NxUjILWU6AGJzkOY+uO9uU3YSEC4MAqCcVy2/yjQg
WZ7rjw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org