Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/c26b084e81449831cadf560ef03a18d46f0b21a7.roa
File:                     c26b084e81449831cadf560ef03a18d46f0b21a7.roa (raw, json)
Hash identifier:          x/79pQJGYi/H6+lZLivAjgT79thdkzSuy4oxDfFdmD8=
Subject key identifier:   1B:7E:0C:FF:C6:F4:6C:0B:B3:6C:25:6A:FB:7B:2B:82:D5:67:E3:57
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       204CBE
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/c26b084e81449831cadf560ef03a18d46f0b21a7.roa
Signing time:             Fri 20 Jan 2023 16:37:41 +0000
ROA not before:           Sat 20 Mar 2021 14:35:22 +0000
ROA not after:            Tue 24 Mar 2026 14:35:22 +0000
asID:                     26619
IP address blocks:        190.90.25.0/24 maxlen: 24
                          190.90.26.0/24 maxlen: 24
                          190.90.27.0/24 maxlen: 24
                          190.90.33.0/24 maxlen: 24
                          190.90.35.0/24 maxlen: 24
                          190.90.56.0/22 maxlen: 24
                          190.90.155.0/24 maxlen: 24
                          190.90.156.0/22 maxlen: 24
                          190.90.160.0/22 maxlen: 24
                          190.90.164.0/22 maxlen: 24
                          190.90.168.0/22 maxlen: 24
                          190.90.176.0/22 maxlen: 24
                          190.90.180.0/22 maxlen: 24
                          190.90.184.0/24 maxlen: 24
                          190.90.185.0/24 maxlen: 24
                          190.90.186.0/24 maxlen: 24
                          190.90.216.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2116798 (0x204cbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 20 14:35:22 2021 GMT
            Not After : Mar 24 14:35:22 2026 GMT
        Subject: CN=c26b084e81449831cadf560ef03a18d46f0b21a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:e8:fc:5d:d8:96:67:c8:13:b6:97:48:40:
                    2e:12:a8:66:44:85:be:50:9d:96:d6:50:90:f7:ec:
                    0d:6b:32:e1:c2:f7:33:61:00:44:cf:26:5d:29:03:
                    b0:47:da:44:29:30:45:c9:de:cb:e5:99:7c:41:64:
                    01:3c:f4:1b:35:24:e1:3b:1c:60:12:f3:9a:4c:81:
                    76:46:cb:a7:2e:1c:5e:dc:8d:a2:83:c9:0f:3e:22:
                    5f:ac:91:01:a3:8f:5a:90:a7:4f:00:4d:53:62:a6:
                    88:82:57:28:04:4f:71:9d:28:aa:e6:51:31:48:32:
                    d7:01:9d:96:1f:f3:fa:49:5f:0e:b0:9a:b9:6c:55:
                    a2:24:80:b7:ca:b6:e4:92:aa:87:45:7b:84:ce:7f:
                    49:18:35:da:25:0f:f8:e7:2e:a0:40:26:63:d3:d5:
                    f2:78:f0:b4:4d:30:db:9a:3b:47:37:58:31:67:58:
                    4d:95:70:5a:84:55:d6:3d:15:6a:05:c7:0d:ff:b7:
                    f4:e6:64:cd:5e:8c:59:f7:79:a2:e1:ba:e5:67:ac:
                    3d:8b:50:3d:0c:3b:d6:70:73:2b:26:10:e6:0f:78:
                    06:4e:e1:84:d2:de:d8:f5:79:d8:b1:34:d3:31:12:
                    65:f4:39:48:7f:ac:c6:ed:9d:e2:3b:81:26:1a:6b:
                    b2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7E:0C:FF:C6:F4:6C:0B:B3:6C:25:6A:FB:7B:2B:82:D5:67:E3:57
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/c26b084e81449831cadf560ef03a18d46f0b21a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.25.0-190.90.27.255
                  190.90.33.0/24
                  190.90.35.0/24
                  190.90.56.0/22
                  190.90.155.0-190.90.171.255
                  190.90.176.0-190.90.186.255
                  190.90.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:ed:15:97:24:22:57:62:b8:f4:a0:76:ee:67:cc:00:b7:0e:
         30:a5:62:21:2b:d5:31:c2:74:43:8d:3f:7b:73:42:6b:94:81:
         52:b8:d3:43:12:d5:7d:6d:0c:ad:f6:e3:28:c2:2c:66:fa:1f:
         2b:c0:c1:e0:7e:1d:3f:34:31:2d:df:49:60:ab:98:d6:c2:99:
         eb:ed:87:8b:0c:f2:7a:e7:1c:86:7a:1e:30:61:46:92:41:00:
         91:4b:6e:0e:9a:d3:41:7e:4f:7e:0a:90:fc:79:fc:28:98:24:
         fb:65:8f:ce:2b:ba:5e:39:66:2d:6a:12:32:3c:27:0b:d6:7f:
         19:ac:0a:53:b4:6b:40:61:d1:d3:a8:ff:ed:b0:34:86:0f:bb:
         ab:b8:05:a0:b9:fb:0e:ae:8c:d2:1e:e9:69:af:29:b4:31:97:
         56:d4:76:1d:52:2c:7a:3a:aa:64:67:95:83:57:cb:96:77:6b:
         9d:95:ce:5a:b4:81:29:80:c3:9c:dd:d5:ac:b9:57:2c:b0:39:
         34:7e:f6:ae:17:9d:02:76:35:b5:8e:33:0f:96:1e:23:2b:b3:
         7a:ff:c2:8c:f4:52:79:76:94:9a:ef:60:02:34:c6:a7:47:b4:
         cc:8b:a1:45:25:fd:80:56:b0:3a:01:47:19:bb:de:84:7a:67:
         96:9f:00:b7
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIDIEy+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjEwMzIw
MTQzNTIyWhcNMjYwMzI0MTQzNTIyWjAzMTEwLwYDVQQDEyhjMjZiMDg0ZTgxNDQ5
ODMxY2FkZjU2MGVmMDNhMThkNDZmMGIyMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAz4Po/F3YlmfIE7aXSEAuEqhmRIW+UJ2W1lCQ9+wNazLhwvcz
YQBEzyZdKQOwR9pEKTBFyd7L5Zl8QWQBPPQbNSThOxxgEvOaTIF2RsunLhxe3I2i
g8kPPiJfrJEBo49akKdPAE1TYqaIglcoBE9xnSiq5lExSDLXAZ2WH/P6SV8OsJq5
bFWiJIC3yrbkkqqHRXuEzn9JGDXaJQ/45y6gQCZj09XyePC0TTDbmjtHN1gxZ1hN
lXBahFXWPRVqBccN/7f05mTNXoxZ93mi4brlZ6w9i1A9DDvWcHMrJhDmD3gGTuGE
0t7Y9XnYsTTTMRJl9DlIf6zG7Z3iO4EmGmuyAwIDAQABo4IClzCCApMwHQYDVR0O
BBYEFBt+DP/G9GwLs2wlavt7K4LVZ+NXMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5L2MyNmIwODRlODE0NDk4MzFjYWRmNTYwZWYwM2ExOGQ0NmYwYjIxYTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBggrBgEFBQcBBwEB/wRM
MEowSAQCAAEwQjAMAwQAvloZAwQCvloYAwQAvlohAwQAvlojAwQCvlo4MAwDBAC+
WpsDBAK+WqgwDAMEBL5asAMEAL5augMEAb5a2DANBgkqhkiG9w0BAQsFAAOCAQEA
Y+0VlyQiV2K49KB27mfMALcOMKViISvVMcJ0Q40/e3NCa5SBUrjTQxLVfW0Mrfbj
KMIsZvofK8DB4H4dPzQxLd9JYKuY1sKZ6+2HiwzyeucchnoeMGFGkkEAkUtuDprT
QX5PfgqQ/Hn8KJgk+2WPziu6XjlmLWoSMjwnC9Z/GawKU7RrQGHR06j/7bA0hg+7
q7gFoLn7Dq6M0h7paa8ptDGXVtR2HVIsejqqZGeVg1fLlndrnZXOWrSBKYDDnN3V
rLlXLLA5NH72rhedAnY1tY4zD5YeIyuzev/CjPRSeXaUmu9gAjTGp0e0zIuhRSX9
gFawOgFHGbvehHpnlp8Atw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org