Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/906bf96555329f40b2f13175cbd05617ba18f8c9.roa
File:                     906bf96555329f40b2f13175cbd05617ba18f8c9.roa (raw, json)
Hash identifier:          qsg9EwdT7pnizrV9Eq9X68zPzaGDDNLwuSAUfSXGu6Q=
Subject key identifier:   FE:C2:26:38:08:9F:72:53:CC:69:BC:8B:35:F3:03:CD:E0:60:5F:D7
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       20FEED
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/906bf96555329f40b2f13175cbd05617ba18f8c9.roa
Signing time:             Wed 25 Jan 2023 12:59:42 +0000
ROA not before:           Fri 19 Mar 2021 14:35:22 +0000
ROA not after:            Tue 24 Mar 2026 14:35:22 +0000
asID:                     18678
IP address blocks:        190.90.0.0/16 maxlen: 16
                          179.1.72.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2162413 (0x20feed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 19 14:35:22 2021 GMT
            Not After : Mar 24 14:35:22 2026 GMT
        Subject: CN=906bf96555329f40b2f13175cbd05617ba18f8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:e9:5a:77:d3:a5:fa:99:78:28:52:0e:f2:
                    8d:b7:34:fb:51:08:a8:9f:cb:3f:db:28:48:90:e6:
                    18:ae:f6:eb:e6:7b:39:8a:9e:c3:d6:05:4c:9e:e1:
                    33:2f:63:99:51:df:66:3d:ed:24:00:22:fc:b6:71:
                    79:04:e4:45:29:a8:1d:59:fe:70:e7:b8:15:7c:1d:
                    ef:b3:d8:ed:a2:23:a8:e5:e2:68:b0:7b:ab:2d:39:
                    f2:21:c6:d2:b7:57:69:69:89:22:37:fe:53:29:b9:
                    09:7b:6d:2d:a3:65:35:75:04:fd:48:e2:7d:c5:6f:
                    dd:a4:2c:b7:7b:ab:8b:f9:d3:72:2a:c9:98:e1:55:
                    d8:7f:cc:fd:80:3f:48:6b:36:8f:29:70:4e:75:a8:
                    b8:c5:c6:08:75:35:f5:1e:49:a2:eb:91:cb:95:64:
                    39:1c:4a:93:1e:91:1b:98:3d:59:3e:f0:5a:46:56:
                    2e:ad:c8:5f:88:4f:53:8c:98:2b:bb:fb:57:97:c9:
                    d6:83:a6:39:a6:f5:84:8d:24:09:a8:48:39:ff:0e:
                    11:a3:12:6c:34:69:27:d5:d1:dc:1d:09:49:fa:ac:
                    96:ac:0a:f9:8f:3b:3d:60:36:a3:0b:da:cc:35:3e:
                    02:86:2d:70:3f:04:c4:ac:ac:ed:58:42:f0:0d:3e:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C2:26:38:08:9F:72:53:CC:69:BC:8B:35:F3:03:CD:E0:60:5F:D7
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/906bf96555329f40b2f13175cbd05617ba18f8c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.72.0/24
                  190.90.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5d:77:d4:b9:f2:5f:15:8f:70:26:c8:b8:62:6c:ee:57:c4:16:
         e2:2b:a5:a8:fa:9e:d0:97:14:6d:bb:c6:28:4c:8b:2f:4e:19:
         fd:c5:73:3a:97:6c:f5:43:39:cc:a8:b5:22:dc:d6:52:9f:4b:
         ec:e4:e1:6c:07:2a:41:01:81:59:49:d2:3f:0a:4d:e4:cd:cb:
         31:0e:35:b2:6d:88:09:2b:27:8a:2f:aa:fb:54:ca:a3:17:9e:
         75:ce:3e:8b:bc:83:db:97:8f:a0:a5:17:c7:d5:7d:9b:13:59:
         93:54:f7:64:53:13:99:b9:a1:19:43:7e:10:dc:e3:39:93:cd:
         e6:d3:b0:d0:55:c5:bf:8b:57:bc:b0:30:d0:9b:15:2b:00:b4:
         24:1d:ed:66:f5:ad:22:f9:ea:ea:f6:0b:6f:8f:61:33:39:9e:
         6e:c4:a5:77:af:a9:4a:98:d8:29:28:dc:7c:29:a7:3e:5d:95:
         21:fd:c8:16:d2:de:4c:9e:77:18:bb:60:99:73:e4:41:42:b8:
         64:48:59:37:3d:48:35:96:ee:bb:d3:cd:6e:14:8d:9f:2f:44:
         6f:02:c3:6b:06:f4:d5:77:ed:f3:77:5e:f6:33:9c:78:af:fd:
         3b:ab:75:95:60:f3:23:43:a0:84:e1:d3:59:20:21:33:67:10:
         ab:39:17:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org