Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/c95486f1ba42f244855a179ebbe7ea8563ff1cea.roa
File:                     c95486f1ba42f244855a179ebbe7ea8563ff1cea.roa (raw, json)
Hash identifier:          lMDJpeKWugCGAo8QjC3r6L/VOje4Vd0UUsofluF9Vv4=
Subject key identifier:   52:FE:96:4B:A9:04:DD:BA:77:47:97:75:D9:88:EF:DE:66:1A:CF:8C
Certificate issuer:       /CN=48947433eb003e1a071f4fff5deb96c87a6919a3
Certificate serial:       0A9383
Authority key identifier: FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/c95486f1ba42f244855a179ebbe7ea8563ff1cea.roa
Signing time:             Wed 24 Mar 2021 14:34:12 +0000
ROA not before:           Wed 24 Mar 2021 14:34:12 +0000
ROA not after:            Tue 24 Mar 2026 14:34:12 +0000
asID:                     23140
IP address blocks:        146.83.2.0/23 maxlen: 24
                          146.83.4.0/22 maxlen: 22
                          146.83.8.0/21 maxlen: 21
                          146.83.16.0/20 maxlen: 20
                          146.83.32.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693123 (0xa9383)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48947433eb003e1a071f4fff5deb96c87a6919a3
        Validity
            Not Before: Mar 24 14:34:12 2021 GMT
            Not After : Mar 24 14:34:12 2026 GMT
        Subject: CN=c95486f1ba42f244855a179ebbe7ea8563ff1cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a3:e2:f6:88:86:12:7b:ba:c2:30:04:c2:17:
                    1f:ab:e5:cb:cf:fa:1c:29:7d:23:6b:fa:d8:6a:31:
                    e7:1d:c7:7a:08:37:b0:b6:f2:75:ce:0d:d0:56:aa:
                    f0:b0:79:20:1a:70:ad:5c:e6:18:8c:36:ce:11:1b:
                    6b:70:83:ff:8c:13:83:5f:d3:1e:cc:88:76:41:9c:
                    66:22:d3:75:29:3a:65:9e:45:9c:d3:2e:26:9c:36:
                    a5:b1:d2:a3:ca:cf:cb:87:c5:55:d2:b3:cd:ba:4b:
                    63:13:1f:5f:25:c7:f9:cf:ee:ef:1c:c3:d1:58:c6:
                    66:bf:6e:82:7a:76:16:5c:df:aa:e6:cd:66:b9:23:
                    4b:e2:3d:b2:94:68:5f:c2:49:13:0b:8a:e6:aa:91:
                    b8:91:38:d4:64:d5:9c:d8:9e:5e:5d:02:4e:66:f9:
                    95:92:dd:24:75:f4:1c:fe:73:3a:a4:45:f7:be:f3:
                    d3:5f:5f:12:75:6a:94:c3:18:34:3e:45:be:82:9a:
                    0c:b9:1d:4f:27:5c:66:e6:1d:ed:70:64:a1:f8:c3:
                    e6:2b:35:3f:d8:cd:d0:e3:60:84:2f:61:fd:45:66:
                    e1:3e:0e:88:26:ed:e1:1c:c2:0a:ec:c1:36:bd:57:
                    c2:5b:c2:1c:a6:99:ae:f3:e4:45:41:75:f9:1f:28:
                    2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FE:96:4B:A9:04:DD:BA:77:47:97:75:D9:88:EF:DE:66:1A:CF:8C
            X509v3 Authority Key Identifier:
                keyid:FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/c95486f1ba42f244855a179ebbe7ea8563ff1cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.2.0-146.83.63.255

    Signature Algorithm: sha256WithRSAEncryption
         31:af:e9:d2:f8:95:33:fc:7e:2e:5d:f9:64:5e:bb:26:27:af:
         5f:0b:f2:dd:e8:b3:56:63:fc:ad:f8:cc:8c:60:ad:b4:d1:f5:
         df:68:70:07:f1:0a:54:b6:9e:59:fe:69:1b:fc:11:0f:76:30:
         1b:ed:e6:98:35:ab:e1:bc:bc:70:b4:fb:37:25:c5:02:99:31:
         db:34:36:d9:a7:8b:26:83:60:09:ab:02:7a:c0:5d:75:25:54:
         a5:b4:39:12:b8:b9:df:a1:93:16:48:df:4b:96:72:5f:f8:94:
         cd:73:49:9a:01:13:47:0b:ee:a4:64:8a:89:08:12:15:4d:ca:
         49:49:51:c5:d1:fe:16:a8:35:0c:24:d1:84:6f:f6:d5:d6:2b:
         4a:8e:6b:b2:24:e9:22:42:38:04:a7:ce:54:bb:ce:1f:10:8c:
         3e:6c:c3:62:be:aa:5f:e7:b8:ef:32:0e:e5:b4:60:03:9d:7a:
         09:ce:5b:27:85:fb:a3:b3:60:d3:dd:67:5f:95:a5:58:31:17:
         2f:49:57:09:3f:46:b0:b0:a7:9c:de:18:4b:73:12:04:c0:3e:
         45:b5:8f:05:8b:19:21:cd:23:20:2c:f8:3a:9b:23:81:4f:de:
         ff:52:e3:99:94:45:b0:7f:a9:99:b9:0a:4b:db:90:46:be:af:
         ae:57:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-fra.rpki-client.org