Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/11453dbb6f7921043a60a1ba70e194c09561544d.roa
File:                     11453dbb6f7921043a60a1ba70e194c09561544d.roa (raw, json)
Hash identifier:          l+BxtAjbVnfbX1bJy+t+XXUKg+zTwo8F7fJwtoo5Eb0=
Subject key identifier:   C4:BF:A3:E6:C5:DE:87:B8:2F:8F:92:F2:25:9E:59:2E:73:BC:EF:89
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       17A24F
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/11453dbb6f7921043a60a1ba70e194c09561544d.roa
Signing time:             Wed 27 Apr 2022 04:29:17 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     262589
IP address blocks:        190.90.14.0/24 maxlen: 24
                          179.1.74.0/24 maxlen: 24
                          179.1.99.0/24 maxlen: 24
                          190.90.84.0/24 maxlen: 24
                          190.90.98.0/24 maxlen: 24
                          190.90.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1548879 (0x17a24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=11453dbb6f7921043a60a1ba70e194c09561544d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:e5:97:75:95:8c:61:ba:e4:93:7a:e9:20:
                    eb:47:d2:45:9b:25:3b:cc:f6:b8:b5:4e:db:82:8a:
                    5b:2a:0c:ac:a5:bf:1f:6b:7c:d2:1d:81:39:1f:5e:
                    9d:69:4c:0c:43:c4:f0:61:98:57:b1:82:75:57:7d:
                    e8:48:5c:8d:4a:aa:13:9a:bc:42:35:cf:cb:a2:65:
                    5a:3a:5f:dc:76:19:fe:6a:d9:fb:9d:57:00:8e:a2:
                    fe:ca:d7:83:a0:4c:7c:ad:37:c7:db:84:15:8e:c0:
                    77:7f:c0:f5:78:f5:f0:01:12:b3:1f:e4:4b:41:f7:
                    20:81:78:72:d7:d9:cc:9b:49:81:df:3e:85:2d:a6:
                    fe:c2:7e:bd:e4:88:ca:5c:7d:89:89:4c:82:e1:3e:
                    5d:e8:b9:ac:0e:26:21:1f:44:5b:a9:ad:70:af:ba:
                    08:6d:aa:d4:1d:c1:c4:cb:df:dc:fe:19:1d:49:de:
                    f4:f1:fb:f0:47:12:12:80:c6:97:86:f2:d1:ab:49:
                    ed:c5:03:fb:19:57:89:df:0c:6d:03:4f:24:db:cf:
                    cc:84:0e:c7:2e:41:31:a2:14:c8:6c:b2:27:33:8e:
                    9d:3c:49:f5:02:7b:bc:6d:f2:ed:4a:ac:f8:e3:97:
                    27:9b:08:60:19:b7:7a:16:d9:f2:f2:75:d7:36:38:
                    23:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BF:A3:E6:C5:DE:87:B8:2F:8F:92:F2:25:9E:59:2E:73:BC:EF:89
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/11453dbb6f7921043a60a1ba70e194c09561544d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.74.0/24
                  179.1.99.0/24
                  190.90.14.0/24
                  190.90.84.0/24
                  190.90.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:cd:99:ff:00:15:c0:a8:26:48:2d:9d:4c:3f:ff:1c:d8:27:
         e6:b8:2b:a4:e1:7e:7d:9b:09:4a:07:df:ff:7c:a6:a7:e4:0c:
         81:83:06:ea:92:33:30:29:32:2a:33:d6:4f:df:cd:6e:e2:23:
         86:c2:9a:28:33:38:5e:7c:0e:00:8e:35:14:b0:7b:f6:d4:f3:
         86:e6:9a:06:a9:9d:e4:bb:88:23:e7:db:a5:33:74:8f:00:dc:
         b1:63:c7:34:a9:66:d7:f8:8d:e7:4e:f2:c2:e3:05:8a:9b:58:
         44:80:ff:91:6f:c1:18:e5:69:70:68:c9:93:c1:d4:85:e2:fa:
         03:3e:79:ff:62:89:25:27:55:3d:27:89:84:94:9c:b2:55:75:
         27:8d:88:44:c6:fb:d8:ec:0b:ca:24:5c:a8:20:d1:cc:56:f1:
         13:d4:c8:95:ab:a4:81:06:9b:2e:c5:6a:9a:4d:48:8d:32:84:
         66:da:b9:06:36:8c:22:06:11:52:a2:b0:17:c3:bd:8a:ab:f2:
         14:38:92:95:82:b0:4a:b6:c1:17:cb:93:01:4e:b3:a1:85:a5:
         e8:9e:ab:56:31:81:2a:01:f0:39:17:ef:8e:16:45:79:15:d3:
         4e:29:ac:0f:4c:e0:d2:0c:02:9c:4d:01:88:c1:c9:88:20:fe:
         80:ed:b5:01
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDF6JPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygxMTQ1M2RiYjZmNzky
MTA0M2E2MGExYmE3MGUxOTRjMDk1NjE1NDRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhQjll3WVjGG65JN66SDrR9JFmyU7zPa4tU7bgopbKgyspb8f
a3zSHYE5H16daUwMQ8TwYZhXsYJ1V33oSFyNSqoTmrxCNc/LomVaOl/cdhn+atn7
nVcAjqL+yteDoEx8rTfH24QVjsB3f8D1ePXwARKzH+RLQfcggXhy19nMm0mB3z6F
Lab+wn695IjKXH2JiUyC4T5d6LmsDiYhH0Rbqa1wr7oIbarUHcHEy9/c/hkdSd70
8fvwRxISgMaXhvLRq0ntxQP7GVeJ3wxtA08k28/MhA7HLkExohTIbLInM46dPEn1
Anu8bfLtSqz445cnmwhgGbd6Ftny8nXXNjgjhQIDAQABo4ICczCCAm8wHQYDVR0O
BBYEFMS/o+bF3oe4L4+S8iWeWS5zvO+JMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5LzExNDUzZGJiNmY3OTIxMDQzYTYwYTFiYTcwZTE5NGMwOTU2MTU0NGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQo
MCYwJAQCAAEwHgMEALMBSgMEALMBYwMEAL5aDgMEAL5aVAMEAb5aYjANBgkqhkiG
9w0BAQsFAAOCAQEAi82Z/wAVwKgmSC2dTD//HNgn5rgrpOF+fZsJSgff/3ymp+QM
gYMG6pIzMCkyKjPWT9/NbuIjhsKaKDM4XnwOAI41FLB79tTzhuaaBqmd5LuII+fb
pTN0jwDcsWPHNKlm1/iN507ywuMFiptYRID/kW/BGOVpcGjJk8HUheL6Az55/2KJ
JSdVPSeJhJScslV1J42IRMb72OwLyiRcqCDRzFbxE9TIlaukgQabLsVqmk1IjTKE
Ztq5BjaMIgYRUqKwF8O9iqvyFDiSlYKwSrbBF8uTAU6zoYWl6J6rVjGBKgHwORfv
jhZFeRXTTimsD0zg0gwCnE0BiMHJiCD+gO21AQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-fra.rpki-client.org