Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b41f74d4-8d9f-4f3b-b3a6-4302dcd1b8b7/ded88ceda25c7b78f0538536f4eb981343009bbe.roa
File:                     ded88ceda25c7b78f0538536f4eb981343009bbe.roa (raw, json)
Hash identifier:          htJtntgo06H4P/3Kz87FBCYI5Q0g+21ngeCgbIflGo0=
Subject key identifier:   5D:B1:80:E0:41:84:91:86:CF:D8:60:3A:62:C8:6B:68:AD:6F:F3:21
Certificate issuer:       /CN=3d0c81ffcb2c33196530a7adeea74bd988502b6c
Certificate serial:       03FB
Authority key identifier: F6:71:79:4E:D7:DC:03:D4:43:3A:D6:DE:32:8B:5E:A9:DB:77:E6:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d0c81ffcb2c33196530a7adeea74bd988502b6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b41f74d4-8d9f-4f3b-b3a6-4302dcd1b8b7/ded88ceda25c7b78f0538536f4eb981343009bbe.roa
Signing time:             Thu 09 Sep 2021 15:00:12 +0000
ROA not before:           Thu 09 Sep 2021 03:00:00 +0000
ROA not after:            Sat 09 Sep 2023 03:00:00 +0000
asID:                     398712
IP address blocks:        190.111.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d0c81ffcb2c33196530a7adeea74bd988502b6c
        Validity
            Not Before: Sep  9 03:00:00 2021 GMT
            Not After : Sep  9 03:00:00 2023 GMT
        Subject: CN=ded88ceda25c7b78f0538536f4eb981343009bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:93:c9:bc:7e:88:6d:84:6a:50:97:a1:b8:
                    80:31:c6:fc:c4:c9:6b:f1:60:d7:59:e4:8e:a5:ef:
                    ac:3b:03:8a:27:9c:11:fd:d0:7f:23:b3:01:7d:ed:
                    a7:9a:c8:04:da:87:02:3f:e4:17:e0:e7:6e:23:47:
                    7a:42:2c:36:a7:4a:76:47:d2:c6:8c:84:99:64:de:
                    9c:e4:dd:6c:49:58:ee:f9:2f:d2:68:16:1d:88:51:
                    47:b7:90:9a:d3:8f:f8:af:34:c0:0f:a3:67:0a:93:
                    96:c2:39:a4:39:e2:96:b6:3b:d5:95:fa:98:e5:b9:
                    36:d3:29:34:72:b4:65:12:81:d3:78:3a:e5:a1:0a:
                    6b:08:b4:45:4e:74:0a:a8:b1:b0:42:22:22:69:4e:
                    91:c6:6e:7c:b0:c8:23:da:2a:e3:af:87:9e:01:ed:
                    c6:7a:56:64:28:a8:ad:87:4c:17:f1:6d:7c:df:f9:
                    2e:ad:85:e6:07:6f:98:34:f4:cc:67:da:56:2b:53:
                    96:69:d5:53:52:f3:ff:8f:59:d6:9a:5a:1b:a6:af:
                    32:fa:7e:5a:7b:75:08:25:45:80:b4:23:a9:87:27:
                    15:1d:1d:83:fb:10:04:65:b5:3e:e4:fc:e5:1c:f9:
                    cf:cb:95:76:1f:05:ff:b0:fb:d2:b3:35:97:a8:42:
                    d6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B1:80:E0:41:84:91:86:CF:D8:60:3A:62:C8:6B:68:AD:6F:F3:21
            X509v3 Authority Key Identifier:
                keyid:F6:71:79:4E:D7:DC:03:D4:43:3A:D6:DE:32:8B:5E:A9:DB:77:E6:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d0c81ffcb2c33196530a7adeea74bd988502b6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b41f74d4-8d9f-4f3b-b3a6-4302dcd1b8b7/ded88ceda25c7b78f0538536f4eb981343009bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b41f74d4-8d9f-4f3b-b3a6-4302dcd1b8b7/3d0c81ffcb2c33196530a7adeea74bd988502b6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:2a:12:cd:84:b3:8f:18:37:b4:07:db:90:a3:cd:03:c1:42:
         53:ed:1c:68:79:26:dc:c9:b8:ee:c8:da:ee:d1:31:48:b4:cc:
         da:44:75:29:5d:9b:b8:b2:c8:2c:72:59:a3:22:3a:74:5a:8b:
         a3:0d:c3:6e:a3:c2:9d:63:96:9f:86:7a:98:ba:b9:6c:07:6e:
         67:fe:ce:2c:f3:a0:d2:b4:68:66:6a:01:a9:c1:4c:72:2f:aa:
         cb:82:4d:57:37:b0:f2:ce:66:c6:5f:ef:17:11:e1:91:7f:bd:
         dd:16:4e:f8:e2:6f:8a:5e:b6:e8:cd:3c:ff:39:08:da:ba:9a:
         6b:d6:1d:0b:ec:34:7f:38:61:43:d2:b8:97:63:f2:10:47:f0:
         e9:27:67:6f:d1:0e:c1:42:f9:66:c3:a7:62:53:6d:86:cb:2a:
         b2:de:f7:ad:54:e1:07:cd:19:fd:4f:8f:a9:7f:a9:66:45:b4:
         c8:0b:2c:67:93:b2:4f:4f:0e:ad:72:5f:dc:38:b4:a7:a5:2e:
         b1:d8:6d:ca:0f:0d:00:17:08:25:31:00:64:8e:2d:bf:f3:48:
         36:f8:6d:c6:15:ae:0c:19:e0:3f:a0:bb:e8:d2:df:98:21:8a:
         27:8b:0c:a0:7b:b2:3d:17:86:af:f6:05:f9:c8:4a:23:21:4f:
         51:97:4a:76
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICA/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM2Qw
YzgxZmZjYjJjMzMxOTY1MzBhN2FkZWVhNzRiZDk4ODUwMmI2YzAeFw0yMTA5MDkw
MzAwMDBaFw0yMzA5MDkwMzAwMDBaMDMxMTAvBgNVBAMTKGRlZDg4Y2VkYTI1Yzdi
NzhmMDUzODUzNmY0ZWI5ODEzNDMwMDliYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmL5PJvH6IbYRqUJehuIAxxvzEyWvxYNdZ5I6l76w7A4onnBH9
0H8jswF97aeayATahwI/5Bfg524jR3pCLDanSnZH0saMhJlk3pzk3WxJWO75L9Jo
Fh2IUUe3kJrTj/ivNMAPo2cKk5bCOaQ54pa2O9WV+pjluTbTKTRytGUSgdN4OuWh
CmsItEVOdAqosbBCIiJpTpHGbnywyCPaKuOvh54B7cZ6VmQoqK2HTBfxbXzf+S6t
heYHb5g09Mxn2lYrU5Zp1VNS8/+PWdaaWhumrzL6flp7dQglRYC0I6mHJxUdHYP7
EARltT7k/OUc+c/LlXYfBf+w+9KzNZeoQtZ3AgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUXbGA4EGEkYbP2GA6YshraK1v8yEwHwYDVR0jBBgwFoAU9nF5TtfcA9RDOtbe
Moteqdt35uswDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8zZDBjODFm
ZmNiMmMzMzE5NjUzMGE3YWRlZWE3NGJkOTg4NTAyYjZjLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9iNDFmNzRkNC04ZDlmLTRmM2ItYjNhNi00MzAyZGNk
MWI4YjcvZGVkODhjZWRhMjVjN2I3OGYwNTM4NTM2ZjRlYjk4MTM0MzAwOWJiZS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2I0MWY3NGQ0LThkOWYtNGYzYi1iM2E2LTQzMDJk
Y2QxYjhiNy8zZDBjODFmZmNiMmMzMzE5NjUzMGE3YWRlZWE3NGJkOTg4NTAyYjZj
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCvm+gMA0GCSqGSIb3DQEBCwUAA4IBAQBHKhLNhLOPGDe0B9uQ
o80DwUJT7RxoeSbcybjuyNru0TFItMzaRHUpXZu4ssgsclmjIjp0WoujDcNuo8Kd
Y5afhnqYurlsB25n/s4s86DStGhmagGpwUxyL6rLgk1XN7DyzmbGX+8XEeGRf73d
Fk744m+KXrbozTz/OQjauppr1h0L7DR/OGFD0riXY/IQR/DpJ2dv0Q7BQvlmw6di
U22Gyyqy3vetVOEHzRn9T4+pf6lmRbTICyxnk7JPTw6tcl/cOLSnpS6x2G3KDw0A
FwglMQBkji2/80g2+G3GFa4MGeA/oLvo0t+YIYoniwyge7I9F4av9gX5yEojIU9R
l0p2
-----END CERTIFICATE-----
Generated at Fri Sep 8 09:12:33 2023 by rpki-client on console-ams.rpki-client.org