Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/b3c58c0fc5e85b105033703aec10c87b86a470ab.roa
File:                     b3c58c0fc5e85b105033703aec10c87b86a470ab.roa (raw, json)
Hash identifier:          l4FOm5s6gKUn3bfg/M65y4XmaPOJXJcv7JmxY+oSCuE=
Subject key identifier:   12:65:BB:9C:4C:AB:2A:70:BE:4A:DF:EA:B4:C6:8D:8E:3E:F8:DA:82
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1FBBAB
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/b3c58c0fc5e85b105033703aec10c87b86a470ab.roa
Signing time:             Thu 19 Jan 2023 11:17:51 +0000
ROA not before:           Tue 04 May 2021 03:00:00 +0000
ROA not after:            Thu 11 May 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        190.90.0.0/21 maxlen: 21
                          190.90.8.0/21 maxlen: 21
                          190.90.16.0/21 maxlen: 21
                          190.90.24.0/24 maxlen: 24
                          190.90.28.0/22 maxlen: 24
                          190.90.33.0/24 maxlen: 24
                          190.90.34.0/24 maxlen: 24
                          190.90.36.0/22 maxlen: 24
                          190.90.52.0/22 maxlen: 24
                          190.90.60.0/22 maxlen: 24
                          190.90.208.0/21 maxlen: 24
                          190.90.252.0/24 maxlen: 24
                          190.90.240.0/24 maxlen: 24
                          190.90.76.0/24 maxlen: 24
                          190.90.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079659 (0x1fbbab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: May  4 03:00:00 2021 GMT
            Not After : May 11 03:00:00 2023 GMT
        Subject: CN=b3c58c0fc5e85b105033703aec10c87b86a470ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:6e:9a:9b:56:ac:f0:8e:b3:6e:3b:f5:2d:
                    4d:8c:31:a8:9c:92:11:7c:88:01:fa:dd:91:82:32:
                    c4:2c:8b:13:71:ed:f7:45:d6:22:94:9b:4d:94:01:
                    1d:d1:9d:7e:bc:7f:e8:5b:49:07:f4:36:2f:8f:f7:
                    38:9a:23:c6:11:0a:a7:64:34:38:0c:9d:ed:11:31:
                    40:f8:2a:f1:52:be:92:74:95:1e:51:37:08:5f:30:
                    15:48:3b:c9:21:80:de:fc:cb:68:d5:d7:e6:ab:bc:
                    31:a6:0c:db:7b:cf:25:d2:e7:37:d4:76:cf:77:ff:
                    4c:e7:d7:e5:52:3a:42:fe:29:56:57:17:20:74:83:
                    b9:e5:0e:10:9d:ab:7b:12:87:54:18:db:a9:25:84:
                    07:80:b5:d9:4b:e1:ac:23:29:0e:50:96:58:8a:51:
                    ba:d9:7e:63:fc:2c:cb:cd:ff:45:82:5f:08:c4:51:
                    0f:ab:27:4e:bf:94:23:16:7f:61:5a:cf:77:25:23:
                    b3:ff:23:68:0b:25:c4:43:15:b4:5a:bf:c0:fa:96:
                    c6:25:b9:56:84:54:24:d3:90:ee:0c:b7:79:8d:d4:
                    5f:3d:c7:c6:55:a4:28:aa:c6:53:12:a5:af:2e:13:
                    1f:76:98:6b:e9:d1:f0:3e:c3:02:f5:51:9b:51:5c:
                    62:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:65:BB:9C:4C:AB:2A:70:BE:4A:DF:EA:B4:C6:8D:8E:3E:F8:DA:82
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/b3c58c0fc5e85b105033703aec10c87b86a470ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.0.0-190.90.24.255
                  190.90.28.0/22
                  190.90.33.0-190.90.34.255
                  190.90.36.0/22
                  190.90.52.0/22
                  190.90.60.0/22
                  190.90.76.0/23
                  190.90.208.0/21
                  190.90.240.0/24
                  190.90.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:df:49:8b:09:55:b6:0f:24:55:49:66:3a:f6:19:ce:40:fd:
         5f:40:fa:e2:2e:7d:d5:fb:96:39:20:eb:18:b0:dd:72:57:d3:
         54:f3:3e:d7:bb:c8:21:2c:69:42:10:a0:02:a8:b6:d1:33:3d:
         55:ad:59:05:f3:76:1c:40:f1:38:85:7d:11:e4:ab:bf:05:31:
         1f:b6:b0:23:61:fc:37:13:7e:0b:09:de:f9:20:08:04:73:2c:
         ab:b8:47:40:97:cb:ef:03:14:e8:47:70:d7:a1:c1:fc:6b:a6:
         78:1b:69:1d:6a:69:99:f7:68:8a:84:c2:91:4a:61:84:27:86:
         50:14:0f:f0:9c:7a:18:51:51:d4:5a:74:da:79:e6:8f:aa:cd:
         e2:84:17:2c:3d:1d:ea:e2:8c:b7:c6:ae:49:3e:ee:c9:32:e9:
         17:a7:63:9f:81:a2:39:20:fd:04:77:1c:57:9d:4f:89:7e:7c:
         85:b8:ce:f1:25:08:ae:3d:6b:f2:21:bd:9d:41:bc:ab:e4:6e:
         76:c7:0a:dd:f3:81:48:ce:ad:f7:71:44:52:ef:f3:fe:6f:77:
         dd:52:57:40:07:e4:a2:08:dd:f4:04:2f:68:04:1e:4b:3d:86:
         94:6c:e6:89:7a:12:b0:03:3b:b2:54:08:fc:8f:53:30:9f:44:
         9b:e6:36:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org