Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1f49c3a363cdbab540268e7abcd335cc00b611d9.roa
File:                     1f49c3a363cdbab540268e7abcd335cc00b611d9.roa (raw, json)
Hash identifier:          eJ1KVdVouR5SvV7FZF0db16bKfsgDQtAvLoZiL4PfTQ=
Subject key identifier:   DF:D6:C3:BC:49:92:D0:65:C8:42:59:54:C2:89:6B:70:18:25:56:C2
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       16979B
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1f49c3a363cdbab540268e7abcd335cc00b611d9.roa
Signing time:             Tue 01 Feb 2022 15:16:11 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27757
IP address blocks:        186.46.140.0/24 maxlen: 24
                          186.46.141.0/24 maxlen: 24
                          190.152.254.0/24 maxlen: 24
                          190.152.255.0/24 maxlen: 24
                          190.152.110.0/24 maxlen: 24
                          181.112.204.0/22 maxlen: 24
                          181.113.97.0/24 maxlen: 24
                          181.113.157.0/24 maxlen: 24
                          181.196.11.0/24 maxlen: 24
                          181.196.13.0/24 maxlen: 24
                          181.196.14.0/24 maxlen: 24
                          181.196.66.0/24 maxlen: 24
                          181.211.104.0/24 maxlen: 24
                          181.211.105.0/24 maxlen: 24
                          181.211.106.0/24 maxlen: 24
                          181.211.217.0/24 maxlen: 24
                          186.42.8.0/24 maxlen: 24
                          186.42.9.0/24 maxlen: 24
                          186.42.12.0/24 maxlen: 24
                          186.42.112.0/23 maxlen: 24
                          186.42.172.0/22 maxlen: 24
                          186.42.198.0/23 maxlen: 24
                          186.46.56.0/22 maxlen: 24
                          186.46.152.0/21 maxlen: 24
                          186.46.172.0/24 maxlen: 24
                          186.46.175.0/24 maxlen: 24
                          186.46.224.0/24 maxlen: 24
                          186.46.232.0/21 maxlen: 24
                          186.47.137.0/24 maxlen: 24
                          186.47.138.0/24 maxlen: 24
                          186.47.182.0/24 maxlen: 24
                          186.47.183.0/24 maxlen: 24
                          186.178.19.0/24 maxlen: 24
                          186.178.36.0/23 maxlen: 24
                          186.178.37.0/24 maxlen: 24
                          186.178.43.0/24 maxlen: 24
                          186.178.47.0/24 maxlen: 24
                          186.178.48.0/24 maxlen: 24
                          186.178.51.0/24 maxlen: 24
                          186.178.67.0/24 maxlen: 24
                          186.178.107.0/24 maxlen: 24
                          186.178.112.0/24 maxlen: 24
                          186.178.115.0/24 maxlen: 24
                          186.178.117.0/24 maxlen: 24
                          186.178.170.0/24 maxlen: 24
                          190.11.3.0/24 maxlen: 24
                          190.11.20.0/24 maxlen: 24
                          190.11.26.0/24 maxlen: 24
                          190.152.39.0/24 maxlen: 24
                          190.152.46.0/24 maxlen: 24
                          190.152.108.0/24 maxlen: 24
                          190.152.109.0/24 maxlen: 24
                          190.152.131.0/24 maxlen: 24
                          190.152.161.0/24 maxlen: 24
                          190.152.185.0/24 maxlen: 24
                          190.152.187.0/24 maxlen: 24
                          190.152.191.0/24 maxlen: 24
                          190.152.201.0/24 maxlen: 24
                          190.152.216.0/23 maxlen: 24
                          190.152.220.0/24 maxlen: 24
                          190.152.236.0/24 maxlen: 24
                          200.107.22.0/24 maxlen: 24
                          200.107.29.0/24 maxlen: 24
                          201.219.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480603 (0x16979b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=1f49c3a363cdbab540268e7abcd335cc00b611d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:79:01:81:0e:37:b6:9f:18:ac:c3:3d:b0:ea:
                    52:3f:ff:9f:c6:2c:8c:f5:88:6f:17:69:a9:9b:37:
                    7a:d5:86:76:6a:49:d3:65:ff:2c:5d:98:31:e4:42:
                    b2:86:9f:39:fa:1b:1f:0a:06:6c:23:b8:5e:7c:02:
                    a7:2a:3d:18:b4:59:bf:9a:6b:3d:d7:80:2a:50:b7:
                    1e:17:bd:a5:42:3a:5f:9e:2a:9d:de:95:71:23:f6:
                    6d:74:9d:e4:d0:b1:79:9b:11:5d:31:a9:00:49:ee:
                    4b:1b:ce:82:13:ce:09:11:1a:f4:fa:28:59:5e:26:
                    6e:74:af:d5:c0:db:25:e5:38:ab:a8:0d:8b:09:af:
                    43:0d:0b:9c:f8:a1:d9:ef:2b:72:c9:38:22:65:e3:
                    09:bb:92:df:fd:9c:b6:2d:d0:72:a2:1f:9f:cf:c2:
                    30:97:1e:88:92:5b:f1:22:76:0a:eb:04:05:29:1b:
                    0d:c9:f4:c6:78:be:15:19:f8:5d:ed:55:80:6b:cc:
                    03:77:c1:70:cf:d6:50:2a:03:10:1c:1f:cf:d6:2c:
                    2c:13:7a:87:9d:44:2d:02:54:0b:2b:2c:53:26:d6:
                    38:e9:52:d6:c9:cf:7e:5e:28:e8:d5:9a:6d:2d:b4:
                    98:27:ff:e7:75:6a:f3:c5:f8:6a:e1:e8:15:cb:dc:
                    7b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D6:C3:BC:49:92:D0:65:C8:42:59:54:C2:89:6B:70:18:25:56:C2
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1f49c3a363cdbab540268e7abcd335cc00b611d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.112.204.0/22
                  181.113.97.0/24
                  181.113.157.0/24
                  181.196.11.0/24
                  181.196.13.0-181.196.14.255
                  181.196.66.0/24
                  181.211.104.0-181.211.106.255
                  181.211.217.0/24
                  186.42.8.0/23
                  186.42.12.0/24
                  186.42.112.0/23
                  186.42.172.0/22
                  186.42.198.0/23
                  186.46.56.0/22
                  186.46.140.0/23
                  186.46.152.0/21
                  186.46.172.0/24
                  186.46.175.0/24
                  186.46.224.0/24
                  186.46.232.0/21
                  186.47.137.0-186.47.138.255
                  186.47.182.0/23
                  186.178.19.0/24
                  186.178.36.0/23
                  186.178.43.0/24
                  186.178.47.0-186.178.48.255
                  186.178.51.0/24
                  186.178.67.0/24
                  186.178.107.0/24
                  186.178.112.0/24
                  186.178.115.0/24
                  186.178.117.0/24
                  186.178.170.0/24
                  190.11.3.0/24
                  190.11.20.0/24
                  190.11.26.0/24
                  190.152.39.0/24
                  190.152.46.0/24
                  190.152.108.0-190.152.110.255
                  190.152.131.0/24
                  190.152.161.0/24
                  190.152.185.0/24
                  190.152.187.0/24
                  190.152.191.0/24
                  190.152.201.0/24
                  190.152.216.0/23
                  190.152.220.0/24
                  190.152.236.0/24
                  190.152.254.0/23
                  200.107.22.0/24
                  200.107.29.0/24
                  201.219.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:7d:c2:ae:70:30:61:29:a2:e8:2a:2e:98:d2:97:d3:66:22:
         42:87:25:5a:e2:00:61:21:8c:e7:52:a7:59:26:76:6d:41:04:
         85:63:ae:84:f4:cd:c7:fc:1b:1a:f2:af:0d:94:44:d8:58:18:
         3c:65:0d:b7:d0:7b:ac:24:3d:75:a4:34:9f:89:a1:25:45:b7:
         0a:dc:3a:78:8f:5b:3f:8f:68:0d:d0:81:ac:d3:31:95:52:5d:
         8c:cf:fc:c5:f7:94:36:f8:4f:56:d3:14:55:26:4e:6e:14:4c:
         de:db:e4:c2:72:22:79:30:15:b3:8d:b0:0f:2d:e4:89:fe:4b:
         18:28:50:41:39:ad:1b:c9:f5:5f:87:21:35:0c:fa:3d:36:d7:
         73:8d:79:09:c6:61:64:d1:81:5c:08:84:5b:53:8c:a9:14:66:
         f7:ce:ff:dd:2f:dd:4b:0b:df:8f:71:14:05:d0:73:42:c3:be:
         d6:b5:96:fc:e8:8e:f2:3e:81:6d:e6:81:c1:2d:04:fd:d9:8b:
         54:fb:22:5c:0b:46:6c:2c:ce:6f:76:db:21:30:31:5a:b1:3c:
         c9:d9:7a:b9:ef:31:bc:94:fd:8e:33:ad:c6:72:94:78:8c:23:
         06:20:ae:66:e6:b2:e6:f4:35:9a:e6:83:95:54:25:84:5d:97:
         5d:b7:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org