Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/0376b6f102f900ec3691b4e84a8fe74f10513ad8.roa
File:                     0376b6f102f900ec3691b4e84a8fe74f10513ad8.roa (raw, json)
Hash identifier:          Q7JhM/Kr4ezPvFpRcPmbAJqvb9sWLgT7+ZbNMFTd4Ss=
Subject key identifier:   CA:A1:AB:B8:F1:48:58:3B:50:93:55:01:72:FC:2D:C7:58:BB:49:08
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       13F6DE
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/0376b6f102f900ec3691b4e84a8fe74f10513ad8.roa
Signing time:             Thu 25 Nov 2021 16:13:00 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        190.90.209.0/24 maxlen: 24
                          190.90.19.0/24 maxlen: 24
                          190.90.140.0/24 maxlen: 24
                          190.90.141.0/24 maxlen: 24
                          190.90.224.0/24 maxlen: 24
                          190.90.242.0/24 maxlen: 24
                          190.90.225.0/24 maxlen: 24
                          190.90.37.0/24 maxlen: 24
                          190.90.233.0/24 maxlen: 24
                          190.90.250.0/24 maxlen: 24
                          190.90.251.0/24 maxlen: 24
                          179.1.6.0/24 maxlen: 24
                          179.1.8.0/24 maxlen: 24
                          179.1.9.0/24 maxlen: 24
                          179.1.10.0/24 maxlen: 24
                          179.1.14.0/24 maxlen: 24
                          179.1.80.0/24 maxlen: 24
                          179.1.81.0/24 maxlen: 24
                          179.1.82.0/24 maxlen: 24
                          179.1.127.0/24 maxlen: 24
                          179.1.128.0/24 maxlen: 24
                          179.1.246.0/24 maxlen: 24
                          190.90.20.0/24 maxlen: 24
                          190.90.28.0/24 maxlen: 24
                          190.90.60.0/24 maxlen: 24
                          190.90.81.0/24 maxlen: 24
                          190.90.95.0/24 maxlen: 24
                          190.90.142.0/24 maxlen: 24
                          190.90.147.0/24 maxlen: 24
                          190.90.154.0/24 maxlen: 24
                          190.90.136.0/24 maxlen: 24
                          190.90.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1308382 (0x13f6de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=0376b6f102f900ec3691b4e84a8fe74f10513ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:88:1f:7e:fa:84:be:fe:cb:53:5a:85:12:eb:
                    f3:11:96:34:6a:dd:9e:13:dd:3b:b0:ff:5a:4e:d1:
                    47:64:0b:e6:44:3c:7d:1f:f4:96:55:51:48:46:c4:
                    53:31:c8:57:06:e9:a4:87:9f:56:18:2d:ff:9a:e2:
                    ec:cc:72:0a:d6:c5:b4:0d:0d:b2:3d:5b:5a:bf:99:
                    8f:87:59:87:97:c9:53:a7:e1:ec:da:bf:02:f6:af:
                    46:55:9f:67:75:c3:e5:e4:a9:cd:08:c6:0e:d2:36:
                    48:74:8d:45:1c:0d:43:07:a8:68:12:21:e1:ea:8e:
                    eb:50:b9:fb:f2:3f:22:46:2a:2a:4c:c6:6d:ef:7e:
                    d9:98:0d:68:0e:12:6f:f5:8c:15:c7:12:01:3d:95:
                    e8:77:b7:5e:d7:58:bb:87:56:19:ab:34:3c:42:53:
                    fc:76:ec:d2:d2:cc:05:65:53:31:6d:bf:0f:1f:95:
                    b1:26:a9:40:1a:5b:74:58:21:5f:30:6f:c9:9e:a8:
                    7a:64:58:52:ec:82:e0:d3:2e:c6:df:93:0e:76:1d:
                    03:90:bf:a9:e2:10:69:ef:38:a5:00:d4:15:6d:10:
                    f3:e6:ac:f5:94:f0:2d:6c:d8:6e:fc:12:b7:b5:78:
                    32:ff:ed:6c:96:02:04:1c:5d:ed:62:ce:76:bf:98:
                    7b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A1:AB:B8:F1:48:58:3B:50:93:55:01:72:FC:2D:C7:58:BB:49:08
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/0376b6f102f900ec3691b4e84a8fe74f10513ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.6.0/24
                  179.1.8.0-179.1.10.255
                  179.1.14.0/24
                  179.1.80.0-179.1.82.255
                  179.1.127.0-179.1.128.255
                  179.1.246.0/24
                  190.90.19.0-190.90.20.255
                  190.90.28.0/24
                  190.90.37.0/24
                  190.90.60.0/24
                  190.90.62.0/24
                  190.90.81.0/24
                  190.90.95.0/24
                  190.90.136.0/24
                  190.90.140.0-190.90.142.255
                  190.90.147.0/24
                  190.90.154.0/24
                  190.90.209.0/24
                  190.90.224.0/23
                  190.90.233.0/24
                  190.90.242.0/24
                  190.90.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:cd:56:84:86:cf:c8:c7:da:8f:2f:e2:f0:b7:ac:5c:d5:ff:
         26:1a:8f:1a:ac:9e:48:e3:35:42:34:2b:16:44:9e:0d:f7:26:
         31:a4:3c:5a:a7:f5:d3:23:a7:b9:e5:79:d2:81:98:92:ea:45:
         56:cb:da:ee:4e:ca:67:40:4e:d0:d9:43:88:02:7a:dc:bc:3d:
         4d:12:47:1a:91:5b:0f:b8:3b:3b:2a:14:1c:49:82:d5:96:60:
         60:c4:f4:4d:4d:4f:29:c0:f5:b5:77:79:b2:81:fb:34:2c:a5:
         5b:35:0f:13:23:a7:87:50:33:30:23:37:59:58:47:b6:9c:b6:
         cb:a1:c3:57:46:b4:8e:19:47:8d:5b:a5:1c:02:8a:48:b4:ef:
         7b:d2:f7:da:30:38:a7:3b:5a:15:87:a1:45:ea:3a:7d:e7:48:
         6c:f8:1e:56:40:8c:03:07:46:17:58:38:5d:0f:15:71:ad:bb:
         c8:ce:7c:03:b6:34:74:f4:83:c2:6f:ef:24:55:bd:c7:b2:2d:
         69:99:9a:af:2c:fd:2f:ed:80:95:b0:3f:db:5b:83:c6:f8:a1:
         0c:05:9c:09:a6:30:08:68:54:99:1c:d4:f6:11:e2:4d:33:e4:
         4f:d6:f3:81:95:08:c5:e5:63:b0:30:30:f0:11:24:06:8e:c0:
         52:44:05:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org