Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/0893a0831e1deb0cb2f5e1f627bfd3fc9d37d666.roa
File:                     0893a0831e1deb0cb2f5e1f627bfd3fc9d37d666.roa (raw, json)
Hash identifier:          0tf+cTvZvTI1f0KHDMPB3qnGq6Dh/j3H3YrOw93wDQc=
Subject key identifier:   24:DF:D6:D5:60:27:72:0B:3C:72:DF:A3:F7:91:AA:36:73:60:47:97
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1A3B3F
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/0893a0831e1deb0cb2f5e1f627bfd3fc9d37d666.roa
Signing time:             Wed 07 Sep 2022 20:32:58 +0000
ROA not before:           Wed 24 Mar 2021 14:37:20 +0000
ROA not after:            Tue 24 Mar 2026 14:37:20 +0000
asID:                     262145
IP address blocks:        190.211.119.0/24 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719103 (0x1a3b3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Mar 24 14:37:20 2021 GMT
            Not After : Mar 24 14:37:20 2026 GMT
        Subject: CN=0893a0831e1deb0cb2f5e1f627bfd3fc9d37d666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:36:f0:9e:f1:5e:ac:3a:31:c2:1b:fd:df:
                    24:0e:92:09:e7:82:58:81:eb:4b:fc:0c:ca:da:f5:
                    9d:30:d0:aa:46:d8:fd:38:fb:d6:08:fc:48:d1:d9:
                    57:c6:8f:42:7c:91:a3:4b:de:01:c2:3c:04:0a:57:
                    1e:09:46:88:0c:0e:dd:f3:3f:55:7e:d2:f7:ff:cb:
                    68:43:0d:c1:d7:f8:ee:02:8b:5b:14:68:b6:e3:73:
                    6a:90:c9:f1:b6:3e:18:3e:e8:0d:fa:45:18:3c:70:
                    cf:cb:e7:49:99:e7:34:0a:b3:3f:b2:f9:5c:ed:9d:
                    36:35:5a:26:7f:48:9c:b0:11:77:b4:2b:1d:69:f0:
                    1b:72:a8:61:a2:b7:8a:0b:ce:b0:ac:d8:77:7a:94:
                    cc:f2:ef:91:5c:c4:a6:66:b8:c3:2b:eb:e6:2e:5b:
                    67:39:02:fa:38:7a:22:ab:9b:e2:f9:69:f5:5a:2f:
                    04:da:89:1e:c3:e0:e1:14:b6:02:ca:2a:1c:82:a3:
                    7a:be:31:b3:6a:50:cc:b2:94:11:b1:51:25:ec:2c:
                    3a:7a:e3:04:06:2a:a5:55:0a:bb:7b:db:02:ee:f1:
                    df:e0:4b:85:3a:d6:b5:20:f1:6e:4f:f5:e3:48:54:
                    37:be:06:ea:c5:b7:d4:89:f9:65:36:99:86:b2:94:
                    6c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DF:D6:D5:60:27:72:0B:3C:72:DF:A3:F7:91:AA:36:73:60:47:97
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/0893a0831e1deb0cb2f5e1f627bfd3fc9d37d666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:fa:24:54:fa:be:a4:fa:2b:6c:53:5b:5a:07:d8:da:02:60:
         d7:8e:d9:3e:97:89:93:b5:70:90:11:b5:ec:c8:23:6a:40:86:
         3e:62:5c:60:99:31:43:75:04:ec:66:51:c7:d7:39:81:4a:c1:
         a8:5e:af:39:1a:35:84:3c:cf:37:79:d1:da:57:90:48:34:6b:
         17:d5:38:46:c9:3f:1b:86:a2:3e:b1:e8:a2:a1:eb:d9:2b:a5:
         47:28:c7:be:22:eb:a6:5c:cd:c6:44:21:51:f4:ee:55:02:3f:
         b4:2a:51:42:44:16:60:4e:5c:a7:4a:56:2b:22:04:6f:d4:75:
         90:f1:78:b3:d3:b3:8a:27:c8:60:f2:33:31:fa:fc:77:a4:79:
         14:3e:51:e0:14:99:b3:49:2b:c2:a0:e0:dc:15:e6:0a:d3:d5:
         d2:d9:96:2b:21:7d:21:46:cd:ba:f5:fc:55:40:1c:1e:4a:68:
         8b:23:0e:5a:be:5a:8d:e3:55:5f:0e:87:76:41:dc:be:d2:9e:
         c6:ff:2b:80:35:b2:cb:0d:5d:ff:c6:78:25:5f:0f:35:2a:9c:
         95:f0:67:9a:59:20:85:4f:5d:a5:ea:52:3f:b3:dc:05:94:b1:
         6c:bc:df:15:4a:3b:ac:e6:35:7a:71:43:c2:02:6d:af:35:a6:
         e4:09:e6:fb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGjs/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
NzQ3YzE5ODBiY2JlZWQ1NmNiNTE3YzY2N2E5NjZiODk0NWNlZWUwHhcNMjEwMzI0
MTQzNzIwWhcNMjYwMzI0MTQzNzIwWjAzMTEwLwYDVQQDEygwODkzYTA4MzFlMWRl
YjBjYjJmNWUxZjYyN2JmZDNmYzlkMzdkNjY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx7828J7xXqw6McIb/d8kDpIJ54JYgetL/AzK2vWdMNCqRtj9
OPvWCPxI0dlXxo9CfJGjS94BwjwEClceCUaIDA7d8z9VftL3/8toQw3B1/juAotb
FGi243NqkMnxtj4YPugN+kUYPHDPy+dJmec0CrM/svlc7Z02NVomf0icsBF3tCsd
afAbcqhhoreKC86wrNh3epTM8u+RXMSmZrjDK+vmLltnOQL6OHoiq5vi+Wn1Wi8E
2okew+DhFLYCyiocgqN6vjGzalDMspQRsVEl7Cw6euMEBiqlVQq7e9sC7vHf4EuF
Ota1IPFuT/XjSFQ3vgbqxbfUifllNpmGspRsOwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCTf1tVgJ3ILPHLfo/eRqjZzYEeXMB8GA1UdIwQYMBaAFBR0FWjkKW4qa7y5
Trkc04XkHHr0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDU3NDdj
MTk4MGJjYmVlZDU2Y2I1MTdjNjY3YTk2NmI4OTQ1Y2VlZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWJmMTk1Y2UtYzQzZS00M2U2LTgyYmEtZDc3Njg5
NjgwNzg3LzA4OTNhMDgzMWUxZGViMGNiMmY1ZTFmNjI3YmZkM2ZjOWQzN2Q2NjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYmYxOTVjZS1jNDNlLTQzZTYtODJiYS1kNzc2
ODk2ODA3ODcvZDU3NDdjMTk4MGJjYmVlZDU2Y2I1MTdjNjY3YTk2NmI4OTQ1Y2Vl
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7TdzANBgkqhkiG9w0BAQsFAAOCAQEACvokVPq+pPorbFNb
WgfY2gJg147ZPpeJk7VwkBG17MgjakCGPmJcYJkxQ3UE7GZRx9c5gUrBqF6vORo1
hDzPN3nR2leQSDRrF9U4Rsk/G4aiPrHooqHr2SulRyjHviLrplzNxkQhUfTuVQI/
tCpRQkQWYE5cp0pWKyIEb9R1kPF4s9OziifIYPIzMfr8d6R5FD5R4BSZs0krwqDg
3BXmCtPV0tmWKyF9IUbNuvX8VUAcHkpoiyMOWr5ajeNVXw6HdkHcvtKexv8rgDWy
yw1d/8Z4JV8PNSqclfBnmlkghU9dpepSP7PcBZSxbLzfFUo7rOY1enFDwgJtrzWm
5Anm+w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org