Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/a043fdfecd8f5bd95fb5c35d06c2ac05c3db9394.roa
File:                     a043fdfecd8f5bd95fb5c35d06c2ac05c3db9394.roa (raw, json)
Hash identifier:          Eaa7uTyBLMlK2RPraBTMZleifkRW/FYq4CY7Emub0Ts=
Subject key identifier:   D9:45:59:22:D1:11:C7:AE:B6:E2:7D:D8:CB:23:65:B3:F4:93:FE:2E
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       0D46B9
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/a043fdfecd8f5bd95fb5c35d06c2ac05c3db9394.roa
Signing time:             Wed 24 Mar 2021 14:35:24 +0000
ROA not before:           Wed 24 Mar 2021 14:35:22 +0000
ROA not after:            Tue 24 Mar 2026 14:35:22 +0000
asID:                     266737
IP address blocks:        190.90.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870073 (0xd46b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 24 14:35:22 2021 GMT
            Not After : Mar 24 14:35:22 2026 GMT
        Subject: CN=a043fdfecd8f5bd95fb5c35d06c2ac05c3db9394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:db:63:c6:64:de:fa:86:d0:ba:71:fd:37:
                    61:3d:1e:ec:3a:74:76:6a:c1:ab:02:a9:74:5e:c3:
                    9d:6b:ba:cf:45:fa:b6:4e:f5:44:26:06:ba:b3:94:
                    fe:fe:07:46:56:f9:ed:57:2d:ce:9d:36:5b:fb:9a:
                    02:7a:fe:75:80:de:0b:2d:46:c0:2f:d4:f6:32:4c:
                    c2:18:1c:05:98:45:54:63:93:c8:5f:0c:04:b8:14:
                    89:be:fa:f5:49:84:7a:74:88:2c:46:e7:fc:82:05:
                    30:47:37:f2:24:4d:e0:a6:60:68:14:d7:4b:e4:ee:
                    0d:3b:88:88:51:e4:b4:d7:53:5c:36:d2:39:73:85:
                    e9:69:2d:9e:e8:af:5c:e0:12:95:23:28:f1:be:6f:
                    d8:82:62:35:90:10:e0:54:0f:82:1e:17:77:f9:7e:
                    49:11:0f:5f:50:cd:ee:b9:ec:33:b8:a9:40:a1:40:
                    c7:32:65:a3:08:39:14:be:b2:af:aa:d4:b9:7f:ff:
                    62:db:2d:54:75:91:1f:b0:eb:69:c9:96:28:8c:4c:
                    50:42:6d:32:50:0a:ff:96:58:38:fc:c0:70:4a:4b:
                    e0:07:b4:35:a9:9f:c6:91:b3:e1:ee:6d:57:49:fe:
                    67:e9:2e:90:c8:90:95:d2:69:7c:6c:5b:4b:de:b5:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:45:59:22:D1:11:C7:AE:B6:E2:7D:D8:CB:23:65:B3:F4:93:FE:2E
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/a043fdfecd8f5bd95fb5c35d06c2ac05c3db9394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d7:27:10:95:1b:81:50:36:7a:53:ee:05:21:ef:66:57:d6:
         ab:7d:19:ff:c4:0f:87:a4:b5:ba:e8:7b:93:ea:af:5f:da:45:
         0b:05:32:fd:05:ed:60:85:5f:18:3c:c6:c5:5a:71:79:a0:94:
         6b:37:a4:4b:06:ca:3d:93:ef:8e:ba:d2:cb:02:cc:81:03:59:
         02:5f:e4:51:c1:1b:02:e9:6e:45:3c:3c:d9:5a:46:d0:c9:4c:
         a5:e7:6f:f7:8f:5c:dc:28:9a:22:df:86:ad:39:2b:d9:63:d1:
         1f:d4:bf:68:b7:cc:26:12:e1:16:36:59:25:02:82:db:10:bd:
         8c:77:c0:1d:d2:fe:cd:50:d8:a5:55:b9:6a:f7:cd:d4:a7:7c:
         28:50:66:7c:9c:21:2e:80:b0:35:9f:31:ab:60:0a:24:33:b7:
         38:6c:3c:3d:c4:d0:2a:8b:cc:40:a3:21:d7:6c:6f:43:a4:d7:
         66:80:dd:b1:b2:0d:3b:d8:a3:df:82:4e:96:96:99:cd:68:b6:
         39:fb:d2:2e:d9:23:3a:48:de:59:b1:96:53:d6:04:ed:be:56:
         f6:09:b4:5f:cb:ec:f1:5d:f4:c2:4c:a0:5a:90:71:12:28:5a:
         8e:90:1f:82:c8:63:c9:c3:68:cd:06:cc:c7:af:cd:49:cc:84:
         64:22:c0:0b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDUa5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjEwMzI0
MTQzNTIyWhcNMjYwMzI0MTQzNTIyWjAzMTEwLwYDVQQDEyhhMDQzZmRmZWNkOGY1
YmQ5NWZiNWMzNWQwNmMyYWMwNWMzZGI5Mzk0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtFTbY8Zk3vqG0Lpx/TdhPR7sOnR2asGrAql0XsOda7rPRfq2
TvVEJga6s5T+/gdGVvntVy3OnTZb+5oCev51gN4LLUbAL9T2MkzCGBwFmEVUY5PI
XwwEuBSJvvr1SYR6dIgsRuf8ggUwRzfyJE3gpmBoFNdL5O4NO4iIUeS011NcNtI5
c4XpaS2e6K9c4BKVIyjxvm/YgmI1kBDgVA+CHhd3+X5JEQ9fUM3uuewzuKlAoUDH
MmWjCDkUvrKvqtS5f/9i2y1UdZEfsOtpyZYojExQQm0yUAr/llg4/MBwSkvgB7Q1
qZ/GkbPh7m1XSf5n6S6QyJCV0ml8bFtL3rV6JwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNlFWSLREceutuJ92MsjZbP0k/4uMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5L2EwNDNmZGZlY2Q4ZjViZDk1ZmI1YzM1ZDA2YzJhYzA1YzNkYjkzOTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5acDANBgkqhkiG9w0BAQsFAAOCAQEAZtcnEJUbgVA2elPu
BSHvZlfWq30Z/8QPh6S1uuh7k+qvX9pFCwUy/QXtYIVfGDzGxVpxeaCUazekSwbK
PZPvjrrSywLMgQNZAl/kUcEbAuluRTw82VpG0MlMpedv949c3CiaIt+GrTkr2WPR
H9S/aLfMJhLhFjZZJQKC2xC9jHfAHdL+zVDYpVW5avfN1Kd8KFBmfJwhLoCwNZ8x
q2AKJDO3OGw8PcTQKovMQKMh12xvQ6TXZoDdsbINO9ij34JOlpaZzWi2OfvSLtkj
OkjeWbGWU9YE7b5W9gm0X8vs8V30wkygWpBxEihajpAfgshjycNozQbMx6/NScyE
ZCLACw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org