Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/e757f8d7798f05bc460465f632a0e90e5dc39bc4.roa
File:                     e757f8d7798f05bc460465f632a0e90e5dc39bc4.roa (raw, json)
Hash identifier:          4P5J3yCb0iS1CvBavlit38Ahn2nfhuGwNMcpnq4JdYI=
Subject key identifier:   66:ED:C5:69:09:32:8B:99:AC:A3:D2:17:C3:08:22:D2:2D:C7:94:74
Certificate issuer:       /CN=b5d933e43bb68e4aa0afa4157c889b4b406113c5
Certificate serial:       18019F
Authority key identifier: B3:37:DF:2A:CC:B3:F7:ED:65:5C:18:67:7B:E3:DB:1E:D5:AC:59:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d933e43bb68e4aa0afa4157c889b4b406113c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/e757f8d7798f05bc460465f632a0e90e5dc39bc4.roa
Signing time:             Wed 03 Aug 2022 16:51:20 +0000
ROA not before:           Wed 03 Aug 2022 03:00:00 +0000
ROA not after:            Fri 24 Mar 2028 03:00:00 +0000
asID:                     52262
IP address blocks:        190.53.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1573279 (0x18019f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5d933e43bb68e4aa0afa4157c889b4b406113c5
        Validity
            Not Before: Aug  3 03:00:00 2022 GMT
            Not After : Mar 24 03:00:00 2028 GMT
        Subject: CN=e757f8d7798f05bc460465f632a0e90e5dc39bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:31:ba:eb:c5:1c:12:ed:63:a3:ec:cb:52:
                    18:2b:f9:5e:fd:e3:21:92:10:8e:45:04:6d:31:9d:
                    97:3e:c7:62:5c:ba:42:09:72:08:b3:03:bb:67:1d:
                    0d:ee:c0:b3:51:e8:9f:f9:d9:ea:d9:43:20:4a:72:
                    21:da:b2:94:ca:ea:02:40:15:1b:8b:a2:25:11:8b:
                    f3:e2:d0:03:c0:6b:f4:95:92:2f:df:d4:cd:46:8b:
                    7c:14:5b:04:7a:67:bb:29:9f:a0:76:1a:58:5e:f8:
                    5b:f6:cf:0b:98:1d:7e:8d:ec:c8:6e:31:c3:45:ee:
                    78:42:78:ac:e2:ea:09:e5:14:6f:38:46:4b:5b:4e:
                    f1:ee:49:87:d9:20:92:4a:ce:e4:5d:aa:9a:6b:ee:
                    a0:79:44:a7:8e:30:c0:3f:83:72:de:fe:43:a3:74:
                    10:2d:b3:45:53:da:71:da:dc:89:6f:c3:ef:3f:17:
                    2b:3c:04:03:f9:22:e8:58:3d:b9:16:f5:f0:b3:a0:
                    f3:a1:df:fd:3b:28:d9:d9:92:38:53:25:aa:16:83:
                    ff:80:01:d5:43:42:dd:df:12:6a:03:e3:56:fd:8b:
                    83:f9:d9:d0:48:43:1d:4f:97:b8:c4:df:0e:7e:3e:
                    28:e2:f5:53:45:fd:4d:97:4b:20:f0:f9:5b:70:a6:
                    43:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:ED:C5:69:09:32:8B:99:AC:A3:D2:17:C3:08:22:D2:2D:C7:94:74
            X509v3 Authority Key Identifier:
                keyid:B3:37:DF:2A:CC:B3:F7:ED:65:5C:18:67:7B:E3:DB:1E:D5:AC:59:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d933e43bb68e4aa0afa4157c889b4b406113c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/e757f8d7798f05bc460465f632a0e90e5dc39bc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/b5d933e43bb68e4aa0afa4157c889b4b406113c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:59:87:f4:3e:8d:7c:c7:53:af:03:5a:c3:0a:d5:60:46:1d:
         c5:19:85:bb:ed:6a:e6:ed:0e:72:dd:7d:3a:f4:42:68:cb:b0:
         b6:cb:a1:96:67:aa:75:1e:09:3d:bc:6a:cd:32:28:4d:a8:95:
         f8:f5:e7:45:51:eb:43:7a:a3:72:e2:27:26:cf:6f:3d:b0:0b:
         f7:df:af:ff:c5:fc:54:97:8b:50:f8:3f:93:1d:83:d3:90:46:
         ae:48:01:52:81:85:cc:f1:51:93:89:dd:7c:8d:69:fd:f7:bf:
         2e:89:56:30:64:0c:c7:c5:9b:8f:72:7f:ad:ee:3f:74:df:36:
         6c:7f:56:6c:92:b5:6e:b5:7c:ed:dc:84:28:91:ab:48:c9:50:
         f7:9b:c5:2f:2b:67:bc:19:7f:e9:24:18:ba:71:d7:2b:64:63:
         eb:7b:3d:b8:ce:25:2d:27:4b:29:c4:47:ff:8e:45:96:bc:fc:
         aa:52:c2:ac:8c:71:89:60:44:94:e3:f4:d9:3c:5f:a4:4e:3b:
         6a:cb:10:f1:41:9c:0f:7b:fa:90:47:77:bf:ab:8e:30:4e:fe:
         fa:d8:84:f7:51:2e:8a:8a:fd:85:b8:f9:bb:51:e8:b1:34:0d:
         44:1a:da:ee:5a:15:af:29:e0:c6:dd:d6:b1:cd:3a:21:2e:da:
         b1:f6:3b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:49 2023 by rpki-client on console-ams.rpki-client.org