Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/11aa0d535d2b6c0363337001a5dcdb72587e26ec.roa
File:                     11aa0d535d2b6c0363337001a5dcdb72587e26ec.roa (raw, json)
Hash identifier:          YZRGr0uCKY3tXo1Gz4w7FGWounauU3cau6o1eLgacAk=
Subject key identifier:   55:88:FA:1A:D4:5F:78:36:E3:10:F7:DD:6B:58:9E:0F:4F:28:88:B9
Certificate issuer:       /CN=56c3a26bfe1f2ba89c0d10d235f8d546cb537932
Certificate serial:       0D4056
Authority key identifier: FF:D6:0A:3D:12:E8:DE:BE:61:82:65:33:ED:71:64:80:7D:B2:08:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/11aa0d535d2b6c0363337001a5dcdb72587e26ec.roa
Signing time:             Wed 24 Mar 2021 22:49:53 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     267848
IP address blocks:        190.97.168.0/23 maxlen: 23
                          190.97.170.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868438 (0xd4056)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c3a26bfe1f2ba89c0d10d235f8d546cb537932
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=11aa0d535d2b6c0363337001a5dcdb72587e26ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:de:2a:d9:90:3b:58:65:79:1c:44:7a:23:
                    f0:4f:75:b4:16:74:5e:2a:cb:af:c7:71:58:6e:4e:
                    05:28:da:3c:3e:72:38:f3:59:ba:80:46:51:70:f4:
                    55:63:9f:72:d1:77:ba:29:6f:22:51:b6:6e:a0:08:
                    ec:cd:e2:8d:da:fe:3c:99:b5:0c:8c:cd:21:96:7e:
                    b8:19:24:53:1c:43:ca:b2:c0:d3:13:d9:53:36:c1:
                    0c:63:86:b5:64:ab:65:ee:3f:9a:9b:06:fb:ae:ea:
                    d5:6e:a5:18:52:a1:ac:4b:65:36:d2:9d:c3:7f:8b:
                    13:47:8a:4b:cb:a0:bc:ff:7f:66:54:9b:dc:8b:28:
                    03:b9:4b:d6:37:a4:ce:50:a7:ef:db:94:ca:df:dd:
                    35:27:94:6e:0a:ee:09:96:81:bd:d4:bf:67:33:be:
                    11:0a:21:08:cc:79:ca:bf:1a:46:b2:9e:f9:eb:86:
                    e5:a8:07:22:17:0e:bd:c3:19:4c:14:83:85:8e:16:
                    65:ee:6b:c1:83:a5:6e:e4:3f:60:f4:49:08:8f:bd:
                    35:a1:de:0c:84:6f:3c:40:f4:db:1f:49:81:f2:ac:
                    fd:23:51:7d:91:1b:2e:13:56:6c:38:02:5b:03:47:
                    01:bc:af:8b:e8:7c:9b:a2:ba:e2:27:26:64:2e:a0:
                    24:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:88:FA:1A:D4:5F:78:36:E3:10:F7:DD:6B:58:9E:0F:4F:28:88:B9
            X509v3 Authority Key Identifier:
                keyid:FF:D6:0A:3D:12:E8:DE:BE:61:82:65:33:ED:71:64:80:7D:B2:08:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/11aa0d535d2b6c0363337001a5dcdb72587e26ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:6b:b2:02:6f:15:0f:e3:d0:e6:33:69:69:a5:b9:62:75:75:
         f4:31:18:2d:eb:bd:1f:a8:10:91:b8:18:46:ef:1f:1a:9c:00:
         63:04:7e:42:08:f8:ef:f9:8d:20:7c:02:1f:48:97:48:f8:0f:
         99:c3:18:49:d5:49:52:67:29:42:28:c6:3e:26:ec:4a:9a:b5:
         ae:57:94:7e:ce:e3:4a:8a:96:41:97:33:00:3e:70:c7:02:d2:
         3e:af:2e:ef:77:1e:3f:e9:22:8c:df:3e:d7:63:f2:ba:a0:23:
         f5:0f:f7:0b:39:3e:31:7e:f6:4f:ec:11:e8:bf:77:ce:d3:cb:
         50:f1:b4:20:9e:84:eb:27:4b:bf:20:38:18:18:a9:f3:3a:1c:
         86:28:99:23:cc:2b:35:e8:a7:5a:f2:7a:3f:4a:bc:9a:5f:00:
         0e:67:5a:86:b8:a5:14:9d:3a:1e:39:14:23:c2:f6:de:54:b7:
         22:77:c1:d6:b1:87:35:db:e9:ac:8c:d0:2c:ae:a2:b1:2e:ab:
         8d:57:98:34:6c:92:f3:ef:cd:4d:5f:6e:bb:10:18:c0:af:82:
         bd:59:8a:36:c2:50:0c:be:38:65:59:74:7b:50:1c:14:6e:4c:
         ea:17:bb:e4:2c:02:d1:dc:eb:d7:2b:5b:5f:00:e9:1f:db:f5:
         e3:31:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-fra.rpki-client.org