Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/c4477445185013315297b1155d92ccd96dc99a90.roa
File:                     c4477445185013315297b1155d92ccd96dc99a90.roa (raw, json)
Hash identifier:          m3DlaTig3oeC+01ugSksHl+xDYjUi7RmWLqn47YMtjM=
Subject key identifier:   7C:FE:E0:C7:FC:D5:56:F8:50:D4:26:FB:39:F7:14:CF:46:DC:37:03
Certificate issuer:       /CN=48947433eb003e1a071f4fff5deb96c87a6919a3
Certificate serial:       197B74
Authority key identifier: FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/c4477445185013315297b1155d92ccd96dc99a90.roa
Signing time:             Mon 21 Nov 2022 16:12:20 +0000
ROA not before:           Sun 08 May 2022 03:00:00 +0000
ROA not after:            Sun 10 May 2026 03:00:00 +0000
asID:                     28116
IP address blocks:        146.83.231.0/24 maxlen: 24
                          146.83.232.0/24 maxlen: 24
                          146.83.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1670004 (0x197b74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48947433eb003e1a071f4fff5deb96c87a6919a3
        Validity
            Not Before: May  8 03:00:00 2022 GMT
            Not After : May 10 03:00:00 2026 GMT
        Subject: CN=c4477445185013315297b1155d92ccd96dc99a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:23:db:3f:2b:bb:c3:2d:fb:5d:0c:b7:ae:d5:
                    0b:5a:6c:2f:0b:ba:45:97:e9:6c:82:20:0d:37:c2:
                    76:9e:7d:80:f6:b8:7f:3f:63:b9:6a:4e:0e:24:80:
                    d2:37:8c:92:69:1f:a1:ef:63:2f:f0:89:83:54:80:
                    bd:77:2e:3a:ce:65:20:1e:4f:42:d6:eb:34:fe:9b:
                    42:a4:1e:e5:d3:78:e0:6e:fc:8b:24:b0:38:9a:e4:
                    10:4c:a2:fc:0a:46:a1:c1:fc:76:64:2e:2e:9a:15:
                    5a:df:12:24:02:1f:48:19:00:4c:93:f5:03:7e:ee:
                    26:73:67:00:82:05:3c:ea:4c:ec:2a:09:3a:e0:f8:
                    19:ce:cd:1f:9e:ce:43:e4:00:d7:29:c0:d1:34:2a:
                    41:cb:bf:c9:ee:08:2d:88:50:89:fd:f0:c1:43:a5:
                    0b:8f:30:bd:0e:3f:57:aa:de:e1:4a:68:1d:7b:15:
                    63:03:03:40:66:cd:c8:17:f0:c2:fb:17:8f:8a:b8:
                    20:54:ee:e6:3a:6b:ac:5e:c7:ad:37:8d:95:72:91:
                    18:a4:37:2c:19:16:10:c9:69:13:97:49:43:eb:49:
                    d0:f3:e5:b6:99:98:62:8f:15:fa:f5:8a:b1:75:20:
                    e3:00:10:72:01:3b:e8:8c:32:84:9a:88:5f:8b:e9:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FE:E0:C7:FC:D5:56:F8:50:D4:26:FB:39:F7:14:CF:46:DC:37:03
            X509v3 Authority Key Identifier:
                keyid:FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/c4477445185013315297b1155d92ccd96dc99a90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.231.0-146.83.233.255

    Signature Algorithm: sha256WithRSAEncryption
         5b:60:2c:b3:86:d3:38:8a:f1:66:63:f4:aa:05:32:56:60:6e:
         18:f4:14:14:06:8b:99:34:b6:bc:8e:52:fe:71:22:3b:10:4f:
         14:e4:fe:e0:8d:1e:3d:82:1f:b3:91:cd:55:a3:bd:22:e5:8e:
         e9:ee:2a:17:fa:f5:f4:5f:cf:9d:70:39:08:6f:5b:03:57:06:
         57:a8:90:8d:84:8a:f6:eb:91:a1:e1:3f:7b:62:da:22:74:cb:
         04:b1:98:ac:43:28:10:82:fd:4a:ff:90:9d:00:21:46:10:db:
         3a:ac:09:a5:e2:6f:76:f0:0f:f1:39:9f:43:2f:a5:bd:51:22:
         60:e1:28:13:9d:67:d4:05:c2:cf:c4:f9:f2:75:08:fc:19:b5:
         4b:9b:2d:f3:d2:04:d4:98:0c:e6:92:b2:b0:18:b6:42:bf:33:
         58:54:9a:3a:14:48:16:4f:7b:e6:89:ff:36:68:18:06:a2:75:
         34:4a:6b:25:be:aa:e9:be:09:66:b5:ce:c4:17:0e:f3:a6:d6:
         9e:30:ff:5a:1b:12:14:c8:1f:57:8c:9f:82:41:e5:34:8e:ab:
         19:81:0a:9d:4b:7f:37:69:90:bf:b2:45:4e:5b:ed:8d:e2:02:
         c5:b3:c1:e5:6b:92:00:e2:92:82:10:b1:d1:51:0b:84:67:ea:
         25:0a:2a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-fra.rpki-client.org