Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/97d41d4e5d1589f368dc65a7565860a195600228.roa
File:                     97d41d4e5d1589f368dc65a7565860a195600228.roa (raw, json)
Hash identifier:          J71QME8bZ382qR4Mi52f59AM35avYG8gbg6h7/3tmvM=
Subject key identifier:   E1:FC:BA:4F:77:0E:6F:89:CB:68:00:6D:87:80:A7:8B:3C:E1:7F:3A
Certificate issuer:       /CN=3ec2580c7b1428c52b125216e3788d1f223af85f
Certificate serial:       05B200
Authority key identifier: D1:17:91:28:50:01:02:52:FE:D7:CD:F1:D3:6D:F5:FA:E3:8E:1D:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ec2580c7b1428c52b125216e3788d1f223af85f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/97d41d4e5d1589f368dc65a7565860a195600228.roa
Signing time:             Mon 02 Aug 2021 17:02:04 +0000
ROA not before:           Mon 02 Aug 2021 03:00:00 +0000
ROA not after:            Wed 02 Aug 2023 03:00:00 +0000
asID:                     262186
IP address blocks:        177.93.32.0/19 maxlen: 24
                          181.225.96.0/20 maxlen: 24
                          186.96.96.0/19 maxlen: 24
                          186.148.160.0/19 maxlen: 24
                          186.179.96.0/20 maxlen: 24
                          186.190.224.0/21 maxlen: 24
                          190.2.208.0/21 maxlen: 24
                          190.13.80.0/21 maxlen: 24
                          191.97.0.0/20 maxlen: 24
                          191.102.64.0/18 maxlen: 24
                          192.144.112.0/22 maxlen: 24
                          200.69.64.0/19 maxlen: 24
                          2803:1a00::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373248 (0x5b200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec2580c7b1428c52b125216e3788d1f223af85f
        Validity
            Not Before: Aug  2 03:00:00 2021 GMT
            Not After : Aug  2 03:00:00 2023 GMT
        Subject: CN=97d41d4e5d1589f368dc65a7565860a195600228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ad:e5:29:fa:78:5e:6b:0e:26:0e:d3:4b:7c:
                    0b:ea:82:76:c3:7c:ed:e3:b7:e3:17:ce:7a:47:f8:
                    b1:cf:26:dd:61:92:4d:07:d8:1e:50:62:01:c1:c4:
                    dc:c1:fd:32:fa:9a:28:a5:91:b3:16:1f:1c:da:61:
                    ca:de:fa:f4:80:11:fa:b4:0e:d9:76:94:5a:77:d3:
                    e9:0f:96:92:8e:60:40:46:c1:46:67:b7:36:90:6a:
                    a4:55:06:54:16:d9:0a:79:19:31:91:61:f5:27:19:
                    6d:05:3e:78:9c:2e:43:17:1a:28:49:16:f2:d6:06:
                    59:2b:b1:0c:71:5a:16:c1:b0:ad:15:e9:94:83:8a:
                    63:c1:50:f5:06:55:1b:ee:0f:42:1c:43:44:77:16:
                    27:7b:0e:74:72:a8:20:fa:5e:09:5d:4b:93:94:2b:
                    f3:98:b8:a0:63:dc:a4:36:b0:c7:cb:26:51:b2:5b:
                    d8:a3:a2:d7:46:34:c8:43:ed:22:b0:ec:b0:04:45:
                    65:ee:4b:c8:9d:c4:a4:a4:31:92:ac:3b:02:82:89:
                    17:3c:79:2e:b5:d2:8c:ef:a4:7b:e2:48:88:9a:b2:
                    cd:fc:ca:4b:de:8a:f2:e1:9f:d7:c9:d2:38:c7:18:
                    1c:18:b0:6e:e5:26:d2:9b:21:d0:35:3d:61:de:9b:
                    68:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FC:BA:4F:77:0E:6F:89:CB:68:00:6D:87:80:A7:8B:3C:E1:7F:3A
            X509v3 Authority Key Identifier:
                keyid:D1:17:91:28:50:01:02:52:FE:D7:CD:F1:D3:6D:F5:FA:E3:8E:1D:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ec2580c7b1428c52b125216e3788d1f223af85f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/97d41d4e5d1589f368dc65a7565860a195600228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/3ec2580c7b1428c52b125216e3788d1f223af85f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.32.0/19
                  181.225.96.0/20
                  186.96.96.0/19
                  186.148.160.0/19
                  186.179.96.0/20
                  186.190.224.0/21
                  190.2.208.0/21
                  190.13.80.0/21
                  191.97.0.0/20
                  191.102.64.0/18
                  192.144.112.0/22
                  200.69.64.0/19
                IPv6:
                  2803:1a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:77:c6:7f:75:29:a3:7c:87:e8:b8:bd:f7:ab:2b:aa:e2:0d:
         06:f6:50:f2:f6:04:8a:06:38:e0:90:ef:a9:0b:4c:57:95:e8:
         98:2c:0c:4f:08:fc:d7:29:42:73:32:9e:f2:fe:9a:8c:72:c9:
         92:2d:3f:f2:bf:0a:f2:2a:19:e0:af:72:c5:e1:ca:ca:a1:a9:
         a4:e7:41:54:d2:63:23:b6:90:1e:ca:aa:e4:95:c9:44:4c:32:
         40:42:e9:17:d5:67:3e:34:7a:c0:23:95:b0:b4:a3:82:01:3a:
         e2:3d:4a:6d:fa:d8:e9:1e:1a:bf:e5:3d:b4:65:9b:0b:43:b4:
         2e:ff:f9:4c:af:41:f1:21:79:40:08:f2:4c:b8:df:3e:6f:f4:
         f0:2d:9e:10:18:6e:29:bf:76:38:d6:5b:bd:ce:f1:cb:cf:ad:
         28:b1:b7:53:c7:89:5d:de:f2:ed:cb:e0:fb:89:b5:d2:aa:d8:
         9e:ed:9a:51:b4:d3:30:35:15:7d:82:2e:c5:c1:4e:e8:c3:24:
         2f:4e:3f:8e:5f:df:28:cc:58:25:b8:d0:ae:96:ee:ea:41:f0:
         43:a2:2a:09:c4:2e:09:fb:50:b7:d5:0e:9e:70:a2:50:8f:98:
         c2:80:30:cd:ec:d1:c6:9e:bd:1d:31:8c:e3:39:1e:ba:14:36:
         4b:a1:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 08:53:11 2023 by rpki-client on console-fra.rpki-client.org