Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/64bbc8243b473f309021549f897d5c7246db18cc.roa
File:                     64bbc8243b473f309021549f897d5c7246db18cc.roa (raw, json)
Hash identifier:          IxZQ0LLlfUHTZq7EJmSnODmWBVBc40Ew3jcwdvCcRTY=
Subject key identifier:   42:21:31:59:7F:36:9B:2E:1A:61:78:5D:BA:21:99:5B:49:22:02:9B
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1FC2CC
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/64bbc8243b473f309021549f897d5c7246db18cc.roa
Signing time:             Thu 19 Jan 2023 11:20:29 +0000
ROA not before:           Mon 22 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     262589
IP address blocks:        190.90.208.0/23 maxlen: 24
                          190.90.148.0/24 maxlen: 24
                          190.90.207.0/24 maxlen: 24
                          190.90.235.0/24 maxlen: 24
                          190.90.83.0/24 maxlen: 24
                          190.90.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2081484 (0x1fc2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 22 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=64bbc8243b473f309021549f897d5c7246db18cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:71:55:32:c1:2d:dc:27:6f:1c:82:b1:91:24:
                    a4:00:f7:f5:15:bf:29:98:19:1d:c7:41:18:fa:a3:
                    ab:4d:77:5b:ba:6c:d0:f7:18:ef:48:c7:3a:dd:9b:
                    7a:52:4e:bd:89:f7:67:9e:bf:49:5d:34:f7:ac:f0:
                    5e:dc:da:21:56:4a:91:65:ef:60:4f:ce:71:d2:6e:
                    ac:4c:56:d3:a6:d3:6e:7b:d6:90:40:68:f1:71:07:
                    09:fa:c5:36:44:52:38:d7:af:d2:75:ac:1f:64:2d:
                    8c:f9:52:e2:16:ae:7f:2d:f4:9e:e9:0f:aa:5e:fa:
                    98:d4:14:6b:d2:b5:fe:9b:60:9e:51:20:2c:d0:7a:
                    aa:ba:9f:53:a7:4a:08:d3:13:83:51:f2:2b:27:78:
                    74:aa:27:3f:c4:98:4a:63:b9:d5:a4:97:70:1e:0e:
                    79:33:e2:15:24:3e:b1:7c:8c:e7:4a:08:a4:ed:8f:
                    fc:a4:b7:f6:bd:99:7f:8f:06:25:67:12:67:8f:b8:
                    54:97:bc:2a:3f:ba:00:eb:e2:20:18:3c:4a:30:77:
                    70:1e:07:f3:4f:76:f4:9e:da:3b:45:82:ab:9b:2c:
                    9a:c2:8c:4b:92:a1:21:de:34:f3:0e:b0:1f:db:19:
                    a4:76:85:78:61:0b:0b:0c:f4:d1:36:cb:d7:32:5b:
                    39:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:21:31:59:7F:36:9B:2E:1A:61:78:5D:BA:21:99:5B:49:22:02:9B
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/64bbc8243b473f309021549f897d5c7246db18cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.83.0/24
                  190.90.148.0/24
                  190.90.207.0-190.90.209.255
                  190.90.235.0/24
                  190.90.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:c9:20:d7:15:2b:37:72:b9:05:53:50:59:24:e3:cd:0d:d7:
         9f:61:b3:71:09:69:54:4a:68:96:77:ff:f3:9c:50:45:d3:5b:
         42:a3:e1:ab:c4:cf:11:11:5a:50:1a:0e:0e:76:de:7b:b9:6f:
         7e:5d:88:98:8f:f3:59:a4:16:e6:03:11:7b:8b:0b:61:bf:84:
         ad:35:e6:02:8c:5c:4a:31:81:6f:c4:71:0a:f9:33:b8:d6:e5:
         b3:5d:2a:03:2a:88:23:58:76:e3:44:5b:b0:fc:1c:14:ac:d3:
         33:c1:d7:09:32:2d:26:6c:88:00:72:80:f8:bb:b0:b2:d2:cd:
         ff:93:6e:52:39:5e:bd:38:6d:aa:b6:79:03:4b:97:b3:26:5d:
         27:0a:8f:ad:1a:5d:25:28:28:c4:60:5a:95:6a:b4:45:4a:46:
         99:14:b9:9b:cb:7b:04:48:50:59:53:27:69:2d:a8:51:21:21:
         f7:0d:00:bd:3a:54:2e:39:76:bc:88:52:fb:c0:7a:11:f0:1f:
         f2:45:b3:3a:3a:40:9f:de:c6:5f:f8:66:6d:ae:2a:60:ea:d2:
         dc:18:fa:8a:3c:a7:0d:aa:31:1c:e0:95:eb:9a:f5:4d:78:30:
         89:4b:ea:e4:79:96:d3:a5:06:98:0e:99:45:dc:9a:20:d7:0a:
         cc:5b:69:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org