Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/f305f53b86f7647f24df513040f3d6d6801c17ae.roa
File:                     f305f53b86f7647f24df513040f3d6d6801c17ae.roa (raw, json)
Hash identifier:          CKEqzOVZ7mwP1p2ai2ftLsKQ6eT9U9sWNTtLFn+KlSk=
Subject key identifier:   36:95:57:A2:DE:68:0F:D6:43:E4:EF:E6:87:1E:1C:5F:93:28:83:D1
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1D11EF
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/f305f53b86f7647f24df513040f3d6d6801c17ae.roa
Signing time:             Wed 02 Nov 2022 15:43:10 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     262589
IP address blocks:        190.90.200.0/24 maxlen: 24
                          190.90.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1905135 (0x1d11ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=f305f53b86f7647f24df513040f3d6d6801c17ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:24:b5:41:1c:52:1c:fd:24:b2:f1:87:d7:
                    94:4d:72:81:20:d8:c5:fe:e9:2e:c4:06:30:22:19:
                    2d:7d:db:dc:d4:99:18:52:46:ee:50:0d:52:da:11:
                    32:1c:b0:3c:7b:25:13:17:36:a9:fa:17:4c:cf:89:
                    7f:ee:7f:d3:c5:6b:fa:7e:b7:57:fb:17:be:4c:3c:
                    5c:eb:76:b0:e4:fe:87:34:7f:d9:b0:b6:95:0e:f0:
                    de:1e:be:fb:91:58:92:38:74:07:09:9b:4d:f0:e2:
                    c4:59:e1:a3:94:da:9c:55:51:96:ae:38:e6:fe:d4:
                    e6:05:e1:c4:a7:fb:41:17:63:1a:10:bc:6a:1f:a3:
                    a3:bf:01:7c:f6:6b:b8:78:18:e3:48:c1:ee:c2:4c:
                    e1:c7:07:00:3b:03:ae:9b:55:de:ea:23:c1:a9:4c:
                    01:30:a7:07:31:ef:37:4f:c8:28:56:43:e7:90:69:
                    f2:8f:0f:c7:0e:0b:6b:a0:7b:f1:b9:1c:35:cb:e6:
                    0c:7a:77:dc:43:49:1a:5d:4f:b1:1e:ed:54:b1:57:
                    ec:3a:c4:ce:d8:e8:89:90:4a:32:62:8f:64:f2:c1:
                    03:ac:2b:1a:6c:4d:8b:ac:67:23:8a:19:fb:74:57:
                    5c:42:7a:6c:82:49:d1:a9:d1:ad:5b:6d:5c:a3:46:
                    b9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:95:57:A2:DE:68:0F:D6:43:E4:EF:E6:87:1E:1C:5F:93:28:83:D1
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/f305f53b86f7647f24df513040f3d6d6801c17ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:21:61:22:66:ad:2a:34:2a:96:45:d0:3b:3d:0a:f1:f5:98:
         41:73:55:37:ee:de:a6:a4:c8:b6:a3:c5:ae:68:19:e6:e8:9c:
         53:9f:14:9b:0c:1c:e3:d5:54:36:f3:4a:2e:0c:d3:f1:9a:e9:
         bf:a0:68:14:2e:64:0c:0f:16:71:7d:e5:a4:58:6c:81:58:c7:
         dd:2f:36:26:ba:5d:c0:d4:8b:e8:5f:08:cc:cc:77:5e:af:c7:
         1e:b8:33:ce:be:a9:b7:bf:86:b8:42:74:59:ad:8c:3f:a7:ec:
         d5:eb:87:ae:75:31:56:eb:52:2d:8e:f2:a6:21:35:3b:69:ef:
         6a:05:ba:e4:b3:56:95:ef:b0:e6:d7:32:cc:58:5e:bf:48:65:
         9c:0d:eb:9a:ff:db:86:2e:05:27:4a:d3:d6:ad:25:bc:d0:83:
         9b:8c:24:c0:d4:43:a8:ec:19:56:d5:0a:48:b2:bc:6c:b5:fb:
         19:5f:f8:af:ce:65:85:32:f3:83:40:ed:d3:fd:21:7b:c5:97:
         3b:0b:74:ac:c9:3d:5f:49:1d:59:83:3a:f2:a8:d7:c2:d7:ac:
         c7:a2:4d:5e:88:34:de:32:d8:de:dd:0f:e3:6e:bd:29:c4:b8:
         57:61:b6:e6:f3:c6:f3:05:4e:73:50:ca:44:5c:0b:ea:33:42:
         ff:97:b8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org