Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7a8563f-81cf-40ee-b162-3e1c9dd190a0/422085fc52d21bbb0f2adaeaefc663e70ba79303.roa
File:                     422085fc52d21bbb0f2adaeaefc663e70ba79303.roa (raw, json)
Hash identifier:          C21XYmZKP5oIjQCLg3zRDsgM28/+BvTtLQN7cpcmZM8=
Subject key identifier:   7D:EB:F1:43:90:63:AB:5B:E9:00:B5:4D:6C:2F:8A:82:E5:3B:E3:D3
Certificate issuer:       /CN=e089670a2a007de8eba89876e6af810cadd9be98
Certificate serial:       03F5
Authority key identifier: A1:DB:9C:09:1A:0C:EF:0A:02:F4:DF:0B:EE:20:32:B6:65:F1:4B:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e089670a2a007de8eba89876e6af810cadd9be98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7a8563f-81cf-40ee-b162-3e1c9dd190a0/422085fc52d21bbb0f2adaeaefc663e70ba79303.roa
Signing time:             Thu 21 Jul 2022 15:04:21 +0000
ROA not before:           Thu 21 Jul 2022 03:00:00 +0000
ROA not after:            Sun 21 Jul 2024 03:00:00 +0000
asID:                     52508
IP address blocks:        190.211.152.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e089670a2a007de8eba89876e6af810cadd9be98
        Validity
            Not Before: Jul 21 03:00:00 2022 GMT
            Not After : Jul 21 03:00:00 2024 GMT
        Subject: CN=422085fc52d21bbb0f2adaeaefc663e70ba79303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1c:ff:07:ec:24:fd:4a:f1:92:68:24:3e:2d:
                    40:65:3d:ed:86:57:81:55:83:64:19:6b:c1:85:be:
                    48:b1:51:c1:87:53:d6:43:4a:da:76:3a:82:65:07:
                    7e:3a:2b:32:d1:7f:00:38:84:f8:1d:ee:9c:6a:ee:
                    2a:23:79:d9:f8:6d:fe:a8:66:1a:7b:e6:38:7e:3f:
                    f9:3d:8c:eb:54:cc:b9:6a:b1:aa:02:c0:3c:47:f2:
                    59:04:90:0f:66:92:82:8a:60:28:e9:cc:3e:c9:52:
                    88:a9:66:55:27:ac:86:60:a6:e5:d6:09:1b:9f:8c:
                    53:e0:18:bd:9f:b7:af:1b:22:94:dc:6f:73:5a:93:
                    50:77:58:45:42:6b:a7:92:b7:4c:d0:e0:ba:39:0c:
                    22:2d:ae:e6:f5:85:72:a7:38:9f:6e:12:b4:71:8e:
                    88:67:fd:a0:15:17:c3:da:fb:d0:f1:c3:66:58:92:
                    4b:04:12:ac:4b:b6:cd:f2:23:3e:bd:a2:43:cd:b2:
                    1d:90:29:c4:94:30:df:c2:2f:a2:9a:4e:21:50:7b:
                    b2:88:0b:f0:ce:79:df:b4:e7:74:a1:31:b6:71:77:
                    de:bd:bd:f5:c8:4f:12:8f:e8:9b:30:aa:83:3b:f4:
                    00:dc:43:d3:98:11:2e:7e:b1:93:ed:97:5e:04:70:
                    e5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EB:F1:43:90:63:AB:5B:E9:00:B5:4D:6C:2F:8A:82:E5:3B:E3:D3
            X509v3 Authority Key Identifier:
                keyid:A1:DB:9C:09:1A:0C:EF:0A:02:F4:DF:0B:EE:20:32:B6:65:F1:4B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e089670a2a007de8eba89876e6af810cadd9be98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7a8563f-81cf-40ee-b162-3e1c9dd190a0/422085fc52d21bbb0f2adaeaefc663e70ba79303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7a8563f-81cf-40ee-b162-3e1c9dd190a0/e089670a2a007de8eba89876e6af810cadd9be98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:7a:7e:49:f8:0b:b1:b7:56:4b:36:37:9d:2f:09:37:de:20:
         2f:0b:17:cc:90:94:87:8b:b6:63:c8:42:f5:70:41:f5:3c:00:
         ae:b2:c2:b5:10:3c:e4:aa:97:a4:9e:3b:7c:d8:cc:bc:54:b9:
         d4:b3:68:8d:cc:4c:b7:c8:89:f1:b9:77:62:55:5b:45:25:ac:
         d4:34:5e:db:c2:03:4c:d5:52:bc:6e:2a:be:d5:6c:2d:f0:0d:
         0d:9f:30:f0:ae:ed:5e:0c:2b:7e:79:db:2b:bb:c9:69:c3:a9:
         80:53:d6:6d:7d:20:5d:86:8d:43:ca:14:ea:9b:05:dc:d6:0d:
         c9:92:ed:17:f9:1e:1e:81:9f:59:ca:b7:ed:fd:bf:95:bd:2d:
         c7:90:47:84:da:c3:c0:01:a8:20:19:5f:d8:db:83:5f:ba:85:
         b1:53:42:95:db:96:19:fe:5f:51:d8:d5:2e:50:ab:0a:41:65:
         36:bf:fa:4e:79:17:c9:1c:46:0c:cc:47:c1:11:28:83:fc:30:
         a3:fd:bf:de:95:04:66:b5:ff:fb:e4:7e:ef:2d:55:7a:9a:ba:
         50:3b:89:d9:82:3c:5b:93:7b:fa:ab:d3:bf:65:b5:d9:b7:cc:
         53:8e:dd:71:df:c2:3d:40:32:e0:17:d8:5f:a8:43:18:0d:e0:
         c0:f4:e2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org