Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/b186f100f5b7ca235cec63c686a79c8b1d636a70.roa
File:                     b186f100f5b7ca235cec63c686a79c8b1d636a70.roa (raw, json)
Hash identifier:          RQxboG5hv52Vfkx9SXfkWm5BE6NvS4YANvfPx0xvujA=
Subject key identifier:   F3:6E:BB:A3:60:D3:A1:E8:09:55:28:81:EF:D5:22:4E:89:7B:B8:C2
Certificate issuer:       /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial:       1C4C7C
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/b186f100f5b7ca235cec63c686a79c8b1d636a70.roa
Signing time:             Thu 22 Sep 2022 21:02:58 +0000
ROA not before:           Thu 22 Sep 2022 21:00:56 +0000
ROA not after:            Sun 22 Sep 2024 21:00:56 +0000
asID:                     22368
IP address blocks:        190.13.32.0/21 maxlen: 21
                          190.13.40.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1854588 (0x1c4c7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
        Validity
            Not Before: Sep 22 21:00:56 2022 GMT
            Not After : Sep 22 21:00:56 2024 GMT
        Subject: CN=b186f100f5b7ca235cec63c686a79c8b1d636a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:28:14:e1:f5:6b:d8:68:a1:fa:40:69:a3:
                    04:ed:d3:b1:b3:15:21:af:d3:ab:eb:7e:5b:50:71:
                    bf:0f:aa:dd:7f:4e:61:48:08:05:b0:fa:bb:6e:31:
                    ca:7b:8b:d3:ee:63:53:f1:97:2e:d4:be:f1:b5:e1:
                    42:57:3e:b9:dc:f5:d2:df:e2:f4:94:3c:8f:f1:f6:
                    ac:c7:e7:d4:99:8e:5d:ae:8d:e3:05:c7:4e:bf:f4:
                    ce:71:0c:ca:a4:56:59:01:0c:2c:36:e1:ee:79:39:
                    dc:b3:83:73:b9:e8:b1:1c:74:9b:5c:47:2d:4a:c9:
                    ce:c1:7d:cb:30:77:14:a4:26:78:39:19:d8:91:09:
                    5f:1d:f4:93:76:83:5e:df:a5:9b:dd:4e:29:62:37:
                    69:ed:89:cd:4d:4e:13:d7:89:0f:6c:0c:6e:c2:f9:
                    d3:f2:c7:a8:6f:ac:02:0e:0b:ea:ee:82:10:1e:33:
                    41:43:24:fa:d0:5f:95:d3:24:66:0c:9b:c7:74:93:
                    e1:f7:d7:1e:b1:61:27:66:e7:61:11:59:04:82:58:
                    7e:4d:c2:e2:68:35:c1:53:70:d5:61:68:2d:19:ef:
                    28:c9:6c:de:9b:9c:f4:47:92:30:eb:ad:5a:d2:9d:
                    28:4a:5d:58:63:40:3b:85:39:97:df:28:fd:0a:e3:
                    a2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6E:BB:A3:60:D3:A1:E8:09:55:28:81:EF:D5:22:4E:89:7B:B8:C2
            X509v3 Authority Key Identifier:
                keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/b186f100f5b7ca235cec63c686a79c8b1d636a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:7c:24:4b:12:e3:64:0f:ad:42:d6:a4:2d:b7:03:9d:88:26:
         82:9e:f3:be:08:01:88:b3:2b:a5:45:24:3d:df:38:c5:91:2e:
         fc:8d:78:d3:52:71:5e:f5:f1:ac:b3:6d:6d:f7:1d:0e:5c:2e:
         b9:c6:8a:93:aa:5f:f5:fb:c5:0d:70:9b:cd:75:19:78:35:6a:
         94:76:4f:ca:d7:6e:69:d0:a0:2a:13:db:09:a3:17:90:c5:78:
         2b:6b:6c:27:58:32:1c:78:12:19:04:9f:3e:7a:f3:e7:8d:fe:
         20:c6:4d:b5:a7:d3:c1:06:6e:11:14:ed:c3:1c:02:cf:50:a1:
         8a:2e:26:31:f0:4f:65:3d:a5:46:7f:f4:00:b2:64:a7:54:a6:
         a2:63:0f:01:99:29:56:ff:17:aa:64:1b:7a:5b:23:b7:0d:ff:
         6e:c3:fb:c3:e9:67:88:ed:7b:79:ff:6a:ba:f6:40:74:82:a1:
         73:b6:3f:28:e3:58:82:0a:f2:6e:9a:fe:bb:92:bb:2c:56:52:
         59:ee:ef:84:0a:69:18:1c:5a:a0:88:2a:f0:17:dd:8c:46:a2:
         b4:19:13:16:9e:98:25:ed:05:aa:8c:b3:98:70:1c:1a:93:80:
         c9:a3:ea:39:af:1d:7d:75:33:8b:c7:62:15:a1:7c:81:bf:06:
         5c:d0:8b:9f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHEx8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
N2QzMzA5NDdkMjY0YzgxYjQ1MDNkZjNiMWVmNjdkNDVjYzJkYzQwHhcNMjIwOTIy
MjEwMDU2WhcNMjQwOTIyMjEwMDU2WjAzMTEwLwYDVQQDEyhiMTg2ZjEwMGY1Yjdj
YTIzNWNlYzYzYzY4NmE3OWM4YjFkNjM2YTcwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwfYoFOH1a9hoofpAaaME7dOxsxUhr9Or635bUHG/D6rdf05h
SAgFsPq7bjHKe4vT7mNT8Zcu1L7xteFCVz653PXS3+L0lDyP8fasx+fUmY5dro3j
BcdOv/TOcQzKpFZZAQwsNuHueTncs4NzueixHHSbXEctSsnOwX3LMHcUpCZ4ORnY
kQlfHfSTdoNe36Wb3U4pYjdp7YnNTU4T14kPbAxuwvnT8seob6wCDgvq7oIQHjNB
QyT60F+V0yRmDJvHdJPh99cesWEnZudhEVkEglh+TcLiaDXBU3DVYWgtGe8oyWze
m5z0R5Iw661a0p0oSl1YY0A7hTmX3yj9CuOiCQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPNuu6Ng06HoCVUoge/VIk6Je7jCMB8GA1UdIwQYMBaAFGG2jf2H687Wyisk
4qqP9wfaY14ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzM3ZDMz
MDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjNlNWRkOWUtYmJjYS00YzQ5LTkyZjUtOGM2NzUx
MTY1ZTkyL2IxODZmMTAwZjViN2NhMjM1Y2VjNjNjNjg2YTc5YzhiMWQ2MzZhNzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iM2U1ZGQ5ZS1iYmNhLTRjNDktOTJmNS04YzY3
NTExNjVlOTIvMzM3ZDMzMDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBL4NIDANBgkqhkiG9w0BAQsFAAOCAQEAHXwkSxLjZA+tQtak
LbcDnYgmgp7zvggBiLMrpUUkPd84xZEu/I1401JxXvXxrLNtbfcdDlwuucaKk6pf
9fvFDXCbzXUZeDVqlHZPytduadCgKhPbCaMXkMV4K2tsJ1gyHHgSGQSfPnrz543+
IMZNtafTwQZuERTtwxwCz1Chii4mMfBPZT2lRn/0ALJkp1SmomMPAZkpVv8XqmQb
elsjtw3/bsP7w+lniO17ef9quvZAdIKhc7Y/KONYggrybpr+u5K7LFZSWe7vhApp
GBxaoIgq8BfdjEaitBkTFp6YJe0FqoyzmHAcGpOAyaPqOa8dfXUzi8diFaF8gb8G
XNCLnw==
-----END CERTIFICATE-----
Generated at Wed Aug 30 17:58:47 2023 by rpki-client on console-ams.rpki-client.org