Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/57047f5d5c88190bb5d927fe3494a5f3d8e3393d.roa
File:                     57047f5d5c88190bb5d927fe3494a5f3d8e3393d.roa (raw, json)
Hash identifier:          wqDEbdoNOKpHsfdGGGx18Z5F2L2iFZsDJ8eDTbQVT8E=
Subject key identifier:   F3:A2:B0:FA:75:BD:56:2E:56:B6:66:F5:BC:7A:8E:82:D6:AA:5D:B5
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       1B0D8F
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/57047f5d5c88190bb5d927fe3494a5f3d8e3393d.roa
Signing time:             Thu 22 Sep 2022 20:20:03 +0000
ROA not before:           Thu 22 Sep 2022 20:17:05 +0000
ROA not after:            Sun 22 Sep 2024 20:17:05 +0000
asID:                     265705
IP address blocks:        186.31.128.0/22 maxlen: 24
                          186.28.176.0/22 maxlen: 24
                          186.28.184.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1772943 (0x1b0d8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Sep 22 20:17:05 2022 GMT
            Not After : Sep 22 20:17:05 2024 GMT
        Subject: CN=57047f5d5c88190bb5d927fe3494a5f3d8e3393d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a1:b6:fc:81:8f:09:7f:3d:21:aa:b5:7f:8c:
                    c0:5d:25:72:b2:3d:91:fd:d5:c4:ff:36:c4:32:d6:
                    9f:e0:6e:10:cf:85:cc:12:48:c0:51:7b:72:c8:3e:
                    df:15:de:db:de:3a:8b:8a:15:bb:2f:55:27:bc:12:
                    56:d8:7b:d0:0e:db:db:92:e4:2b:d4:b2:08:fa:52:
                    7f:47:5f:3c:9a:55:6d:d0:53:18:77:7b:2a:9c:96:
                    b3:18:e1:56:e2:45:a8:39:4b:4a:db:1d:50:09:4f:
                    78:d8:6d:9f:19:c4:fd:74:e0:8c:a8:0c:0f:fc:06:
                    3d:1b:5e:db:03:67:f4:8d:db:85:05:8f:de:84:36:
                    f2:02:b4:dc:99:8b:a6:4c:95:c8:64:02:68:83:cf:
                    4e:47:5c:6e:ed:71:4e:c2:c6:a3:9b:c2:59:30:51:
                    8e:a8:84:6e:7d:95:21:ba:24:cd:88:b4:1f:26:d9:
                    82:9f:52:32:97:30:c4:b7:cc:77:58:25:05:17:1f:
                    d6:47:8e:27:b2:e7:6d:ee:9f:d4:02:31:6b:ad:fe:
                    ef:05:19:44:f1:e3:9e:fb:70:f4:ef:d0:fc:bd:ba:
                    ac:76:d0:33:e2:49:e2:05:5f:3f:6e:75:5e:b4:2b:
                    07:2d:15:09:2d:87:69:ee:69:ec:9e:a3:89:ee:e0:
                    d7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A2:B0:FA:75:BD:56:2E:56:B6:66:F5:BC:7A:8E:82:D6:AA:5D:B5
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/57047f5d5c88190bb5d927fe3494a5f3d8e3393d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.28.176.0/22
                  186.28.184.0/22
                  186.31.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:39:67:89:f5:e7:aa:9e:71:1c:b5:69:93:73:b6:27:49:c6:
         2f:ee:c9:4f:ec:23:6a:a3:c7:bd:76:de:a5:62:7f:d8:06:79:
         43:34:12:9c:0b:88:ed:15:c9:bd:e5:af:7b:43:5a:d8:89:03:
         30:1a:e8:1e:7b:30:02:4a:da:6b:62:2f:38:e0:cc:8b:b0:89:
         11:7a:7f:31:80:8d:6d:6b:89:d3:80:74:00:72:07:b2:ba:a9:
         30:d8:56:ad:57:cd:65:9b:c4:7a:59:90:c6:0c:f2:3b:85:39:
         96:c0:1a:eb:19:5e:9f:5d:08:e4:57:13:43:f2:6a:ea:0d:9f:
         50:75:8c:98:3a:bb:79:12:84:87:34:77:9a:72:f9:ef:57:b5:
         68:36:64:4f:b4:1c:dd:b5:98:cd:be:fd:01:de:cb:29:b8:60:
         cc:82:9e:c7:c9:4e:c9:72:66:aa:17:c6:69:54:ac:f1:0a:55:
         0e:78:09:59:d0:f9:0f:57:ba:59:1f:0c:46:d4:a8:1f:27:d2:
         04:27:c9:d6:aa:3b:64:fe:1d:34:ed:0d:75:2a:2c:fc:56:5d:
         75:79:9b:02:3a:5a:cc:44:b6:46:f9:3c:e2:b4:94:d2:83:7e:
         ee:95:a8:fd:9d:b1:7d:86:72:ac:25:c9:f7:a5:c3:e6:33:bf:
         fe:eb:13:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:49 2023 by rpki-client on console-ams.rpki-client.org