Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/1fbc19efcd3d2acff1dcfa83f8b158fd6572a7ce.roa
File:                     1fbc19efcd3d2acff1dcfa83f8b158fd6572a7ce.roa (raw, json)
Hash identifier:          MBXgAI3pUv/47DYutPPTeKmXhhkd5wMdkrnbLi9ao6E=
Subject key identifier:   51:04:3C:32:C5:DE:E6:47:5C:76:DB:85:7C:2C:2E:8C:FC:E9:66:B0
Certificate issuer:       /CN=71ccf671605b5e725ec595356fba462b15442130
Certificate serial:       07AC02
Authority key identifier: 2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/1fbc19efcd3d2acff1dcfa83f8b158fd6572a7ce.roa
Signing time:             Mon 04 Oct 2021 20:04:03 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     271813
IP address blocks:        190.123.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502786 (0x7ac02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ccf671605b5e725ec595356fba462b15442130
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=1fbc19efcd3d2acff1dcfa83f8b158fd6572a7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dc:17:fc:65:fd:bb:f9:1f:3d:a7:59:80:b7:
                    9d:a9:be:f5:cf:dc:6f:90:57:e3:3a:06:6f:d6:a2:
                    ea:59:24:5d:35:f2:9d:e4:8b:8d:48:5b:00:ab:53:
                    9f:15:13:96:33:b8:9d:ea:cc:92:ab:40:0e:9a:0f:
                    15:a1:31:70:d8:14:a9:4e:dd:48:df:7e:a4:4f:67:
                    ea:14:89:a3:6c:33:02:58:6e:1b:52:d6:40:ed:ad:
                    a2:ee:e0:0f:33:8a:59:cd:f4:48:cf:64:3e:f3:18:
                    61:33:24:fc:d7:f2:15:fd:86:e4:b6:fa:ab:ab:3d:
                    85:8e:b3:43:66:a1:16:8f:64:58:ea:23:01:07:42:
                    d7:92:b7:f5:26:66:0d:ea:35:ae:b8:18:b8:08:cc:
                    e2:e0:9f:db:a1:60:81:40:32:45:69:2c:99:9c:9f:
                    9d:ac:5a:5a:8a:86:44:d8:59:63:0f:9d:77:76:95:
                    9b:83:bf:84:df:18:a4:77:2f:6a:13:92:2f:8b:63:
                    9f:98:6f:a7:c1:5e:db:6d:7c:08:8f:47:86:3f:e5:
                    8b:76:a7:79:2f:2d:19:fa:e8:55:fc:cf:3d:49:c0:
                    87:b4:62:9c:db:bf:8f:4f:08:8d:57:6e:42:fa:00:
                    9d:d4:f8:20:f7:e8:d2:6d:03:3e:ad:3e:af:f2:79:
                    e2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:04:3C:32:C5:DE:E6:47:5C:76:DB:85:7C:2C:2E:8C:FC:E9:66:B0
            X509v3 Authority Key Identifier:
                keyid:2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/1fbc19efcd3d2acff1dcfa83f8b158fd6572a7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/71ccf671605b5e725ec595356fba462b15442130.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:19:8f:27:6d:fb:71:45:b6:cf:48:64:31:0e:e8:94:d1:09:
         e5:31:8b:6b:32:96:88:52:61:49:4d:67:53:31:6c:f2:04:44:
         81:29:91:4a:38:b8:30:d9:6d:62:ed:a8:93:94:75:7e:a0:8d:
         8c:ec:37:55:7c:48:58:77:8d:a2:a8:d7:5f:65:8c:92:fe:39:
         05:ad:fe:4c:a6:b0:4d:f1:8f:b2:60:4b:1d:a1:14:e0:fb:9d:
         89:92:67:b6:ae:21:84:d5:f8:fd:8b:b1:32:47:9c:c9:6a:90:
         fb:94:5e:b7:96:64:2c:75:92:c9:fb:92:38:23:1c:da:0b:64:
         b1:07:02:8f:10:3e:56:77:b4:69:9a:52:c2:d9:26:a0:d4:46:
         67:80:67:b3:1f:31:31:2f:e0:7a:9e:96:31:5d:43:ff:32:78:
         7f:96:1b:30:ea:11:ca:bd:25:97:fb:e0:4b:92:05:e3:1a:08:
         83:af:6c:49:7f:00:ae:9d:b1:2e:80:67:84:d4:98:9b:dc:3e:
         93:e0:9e:98:ed:e9:bb:ab:3e:58:04:df:86:20:7e:d4:7b:e0:
         ed:d4:ce:3c:48:08:df:e2:6a:14:3a:1d:5e:20:68:e6:10:09:
         c4:f2:ef:34:56:36:5e:cb:ee:5f:2a:4f:e2:ff:c7:9a:38:a1:
         d1:48:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 08:53:25 2023 by rpki-client on console-fra.rpki-client.org