Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/13d63b5d0ad4577787e67f3e1f6987b69866e4cb.roa
File:                     13d63b5d0ad4577787e67f3e1f6987b69866e4cb.roa (raw, json)
Hash identifier:          7X25IuRAvgG/eosp/8nQJvcCKRkL4apx/UcLzEtuMIs=
Subject key identifier:   44:36:B9:13:91:ED:8F:63:11:AD:51:61:CF:57:A4:6D:06:7F:A8:D1
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       2147C2
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/13d63b5d0ad4577787e67f3e1f6987b69866e4cb.roa
Signing time:             Tue 21 Feb 2023 16:23:05 +0000
ROA not before:           Mon 26 Sep 2022 14:00:05 +0000
ROA not after:            Sat 28 Sep 2024 14:00:05 +0000
asID:                     3816
IP address blocks:        190.68.0.0/15 maxlen: 15
                          190.68.0.0/19 maxlen: 19
                          190.68.0.0/22 maxlen: 22
                          190.68.4.0/22 maxlen: 22
                          190.68.8.0/21 maxlen: 21
                          190.68.16.0/20 maxlen: 20
                          190.68.32.0/19 maxlen: 19
                          190.68.32.0/21 maxlen: 21
                          190.68.40.0/22 maxlen: 22
                          190.68.44.0/22 maxlen: 22
                          190.68.48.0/21 maxlen: 21
                          190.68.56.0/21 maxlen: 21
                          190.68.60.0/22 maxlen: 22
                          190.68.64.0/19 maxlen: 19
                          190.68.64.0/21 maxlen: 21
                          190.68.72.0/21 maxlen: 21
                          190.68.80.0/22 maxlen: 22
                          190.68.84.0/23 maxlen: 23
                          190.68.86.0/23 maxlen: 23
                          190.68.88.0/21 maxlen: 21
                          190.68.96.0/21 maxlen: 21
                          190.68.104.0/21 maxlen: 21
                          190.68.104.0/22 maxlen: 22
                          190.68.108.0/22 maxlen: 22
                          190.68.112.0/20 maxlen: 20
                          190.68.112.0/22 maxlen: 22
                          190.68.116.0/22 maxlen: 22
                          190.68.120.0/23 maxlen: 23
                          190.68.122.0/23 maxlen: 23
                          190.68.124.0/22 maxlen: 22
                          190.68.128.0/19 maxlen: 19
                          190.68.140.0/22 maxlen: 22
                          190.68.144.0/20 maxlen: 20
                          190.68.160.0/19 maxlen: 19
                          190.68.160.0/23 maxlen: 23
                          190.68.170.0/23 maxlen: 23
                          190.68.172.0/22 maxlen: 22
                          190.68.192.0/20 maxlen: 20
                          190.68.208.0/22 maxlen: 22
                          190.68.212.0/22 maxlen: 22
                          190.68.216.0/21 maxlen: 21
                          190.68.224.0/22 maxlen: 22
                          190.68.228.0/22 maxlen: 22
                          190.68.232.0/22 maxlen: 22
                          190.68.236.0/22 maxlen: 22
                          190.68.240.0/21 maxlen: 21
                          190.68.243.0/24 maxlen: 24
                          190.68.246.0/24 maxlen: 24
                          190.68.248.0/22 maxlen: 22
                          190.68.252.0/24 maxlen: 24
                          190.68.253.0/24 maxlen: 24
                          190.69.0.0/19 maxlen: 19
                          190.69.1.0/24 maxlen: 24
                          190.69.2.0/24 maxlen: 24
                          190.69.4.0/22 maxlen: 22
                          190.69.8.0/22 maxlen: 22
                          190.69.12.0/22 maxlen: 22
                          190.69.16.0/22 maxlen: 22
                          190.69.20.0/22 maxlen: 22
                          190.69.24.0/24 maxlen: 24
                          190.69.32.0/19 maxlen: 19
                          190.69.32.0/20 maxlen: 20
                          190.69.48.0/20 maxlen: 20
                          190.69.64.0/23 maxlen: 23
                          190.69.66.0/23 maxlen: 23
                          190.69.68.0/23 maxlen: 23
                          190.69.70.0/23 maxlen: 23
                          190.69.72.0/23 maxlen: 23
                          190.69.74.0/23 maxlen: 23
                          190.69.76.0/23 maxlen: 23
                          190.69.78.0/23 maxlen: 23
                          190.69.80.0/23 maxlen: 23
                          190.69.82.0/23 maxlen: 23
                          190.69.84.0/23 maxlen: 23
                          190.69.86.0/23 maxlen: 23
                          190.69.88.0/23 maxlen: 23
                          190.69.90.0/23 maxlen: 23
                          190.69.92.0/23 maxlen: 23
                          190.69.94.0/23 maxlen: 23
                          190.69.96.0/23 maxlen: 23
                          190.69.98.0/23 maxlen: 23
                          190.69.100.0/22 maxlen: 22
                          190.69.104.0/22 maxlen: 22
                          190.69.108.0/22 maxlen: 22
                          190.69.112.0/22 maxlen: 22
                          190.69.116.0/22 maxlen: 22
                          190.69.120.0/21 maxlen: 21
                          190.69.128.0/24 maxlen: 24
                          190.69.130.0/23 maxlen: 23
                          190.69.132.0/22 maxlen: 22
                          190.69.136.0/21 maxlen: 21
                          190.69.136.0/23 maxlen: 23
                          190.69.144.0/22 maxlen: 22
                          190.69.148.0/22 maxlen: 22
                          190.69.152.0/22 maxlen: 22
                          190.69.152.0/24 maxlen: 24
                          190.69.156.0/24 maxlen: 24
                          190.69.157.0/24 maxlen: 24
                          190.69.158.0/24 maxlen: 24
                          190.69.160.0/23 maxlen: 23
                          190.69.162.0/23 maxlen: 23
                          190.69.164.0/22 maxlen: 22
                          190.69.168.0/22 maxlen: 22
                          190.69.172.0/22 maxlen: 22
                          190.69.176.0/24 maxlen: 24
                          190.69.177.0/24 maxlen: 24
                          190.69.178.0/24 maxlen: 24
                          190.69.179.0/24 maxlen: 24
                          190.69.180.0/22 maxlen: 22
                          190.69.184.0/22 maxlen: 22
                          190.69.184.0/23 maxlen: 23
                          190.69.186.0/23 maxlen: 23
                          190.69.188.0/22 maxlen: 22
                          190.69.192.0/22 maxlen: 22
                          190.69.196.0/22 maxlen: 22
                          190.69.200.0/22 maxlen: 22
                          190.69.200.0/24 maxlen: 24
                          190.69.204.0/23 maxlen: 23
                          190.69.206.0/23 maxlen: 23
                          190.69.208.0/20 maxlen: 20
                          190.69.224.0/20 maxlen: 20
                          190.69.240.0/22 maxlen: 22
                          190.69.244.0/22 maxlen: 22
                          190.69.248.0/22 maxlen: 22
                          190.69.252.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181058 (0x2147c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 26 14:00:05 2022 GMT
            Not After : Sep 28 14:00:05 2024 GMT
        Subject: CN=13d63b5d0ad4577787e67f3e1f6987b69866e4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7c:0d:82:d6:6b:5c:9d:72:b2:6d:66:3f:7c:
                    01:24:8a:25:fe:18:97:bc:f9:e3:ad:16:ad:8e:28:
                    f4:72:12:b2:59:e9:b7:71:12:e4:b9:fe:28:70:51:
                    cb:bf:93:77:68:bc:bf:5e:8d:2c:f8:80:30:df:96:
                    06:7c:73:08:c4:fa:32:5a:62:6e:f0:f0:bf:7a:f0:
                    6a:6d:48:5f:63:6e:af:9a:45:86:1a:67:ac:7a:aa:
                    a9:80:a9:50:3f:c6:7c:cb:64:02:0e:da:a3:21:76:
                    0f:c2:eb:ee:ef:6c:96:f4:82:e1:26:79:81:7c:1b:
                    57:bb:1b:ea:bd:ec:e6:2f:07:0d:97:8d:ad:4c:a6:
                    17:ca:c3:34:e2:38:35:e9:69:5b:9b:62:76:b6:39:
                    0f:08:b4:91:4a:4d:9e:34:bf:27:3f:61:55:6c:6c:
                    0a:72:e9:95:79:3a:b2:04:4c:57:13:c7:62:9c:66:
                    18:d2:16:d4:0c:bf:88:f8:5d:03:0e:61:68:27:16:
                    07:63:62:6d:a2:4b:36:bd:82:d6:88:a3:56:10:d1:
                    ed:0f:e2:3b:39:11:07:0f:1e:81:67:31:b2:76:cb:
                    1b:fc:92:25:a8:43:67:ae:a1:ee:bf:98:04:9f:3d:
                    7f:5a:4a:68:c2:b7:6a:ed:89:14:21:cd:ed:4c:6c:
                    fa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:36:B9:13:91:ED:8F:63:11:AD:51:61:CF:57:A4:6D:06:7F:A8:D1
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/13d63b5d0ad4577787e67f3e1f6987b69866e4cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.68.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         16:ed:27:ac:70:d9:16:f6:82:c7:9e:b4:ad:a6:94:f9:bf:7c:
         25:d9:28:b7:fe:a9:f0:6a:33:cd:f7:81:5f:17:9d:1c:01:9d:
         b9:58:24:83:81:a1:a3:74:50:81:2b:a6:f8:41:48:82:eb:cf:
         c2:f0:2f:21:64:76:f7:4d:7c:06:39:6c:eb:dc:ac:ab:8d:52:
         26:bc:c0:37:33:52:00:de:72:92:70:8d:b4:36:f7:ac:d3:61:
         20:3a:37:48:6b:70:99:ae:f7:cf:0c:7c:a7:2e:3b:d0:21:fc:
         0f:18:19:f2:09:6b:94:84:a1:03:25:68:bf:81:90:fe:5f:6a:
         0d:d4:b2:69:fd:cb:45:a4:df:56:b5:20:f1:2f:15:8c:40:ea:
         10:7d:1d:fb:2d:f7:38:ff:02:2a:62:e5:88:75:01:fe:17:97:
         e4:de:08:16:a0:f7:88:6f:5b:d6:19:9b:c2:a0:a5:dd:02:32:
         fe:de:6f:f5:02:be:9e:69:f9:ef:25:38:66:10:9a:84:65:c4:
         35:8f:e3:7b:28:a6:b7:0c:4b:66:5f:9e:1b:32:8f:3d:d8:35:
         04:28:2f:b0:9b:66:d9:11:37:ee:97:dc:5a:b6:2a:e3:87:64:
         f4:9c:c1:83:22:25:15:4e:1a:7a:97:64:4f:d4:dd:b5:4c:2a:
         7b:67:3e:94
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDIUfCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIz
NTgwMDc4ZjRmODk3ZmNmZGJhYTBkOTBjMmVjNmY0NjBlMzMyMjIwHhcNMjIwOTI2
MTQwMDA1WhcNMjQwOTI4MTQwMDA1WjAzMTEwLwYDVQQDEygxM2Q2M2I1ZDBhZDQ1
Nzc3ODdlNjdmM2UxZjY5ODdiNjk4NjZlNGNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkXwNgtZrXJ1ysm1mP3wBJIol/hiXvPnjrRatjij0chKyWem3
cRLkuf4ocFHLv5N3aLy/Xo0s+IAw35YGfHMIxPoyWmJu8PC/evBqbUhfY26vmkWG
GmeseqqpgKlQP8Z8y2QCDtqjIXYPwuvu72yW9ILhJnmBfBtXuxvqvezmLwcNl42t
TKYXysM04jg16Wlbm2J2tjkPCLSRSk2eNL8nP2FVbGwKcumVeTqyBExXE8dinGYY
0hbUDL+I+F0DDmFoJxYHY2Jtoks2vYLWiKNWENHtD+I7OREHDx6BZzGydssb/JIl
qENnrqHuv5gEnz1/Wkpowrdq7YkUIc3tTGz65QIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFEQ2uROR7Y9jEa1RYc9XpG0Gf6jRMB8GA1UdIwQYMBaAFN/Gyo1ROTKXljh0
TDeMs6BDDpW1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjM1ODAw
NzhmNGY4OTdmY2ZkYmFhMGQ5MGMyZWM2ZjQ2MGUzMzIyMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzIwYjU1OGEtODllMC00YzllLWI2YzgtZDdjNjk0
NjMyMTIwLzEzZDYzYjVkMGFkNDU3Nzc4N2U2N2YzZTFmNjk4N2I2OTg2NmU0Y2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMjBiNTU4YS04OWUwLTRjOWUtYjZjOC1kN2M2
OTQ2MzIxMjAvYjM1ODAwNzhmNGY4OTdmY2ZkYmFhMGQ5MGMyZWM2ZjQ2MGUzMzIy
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAb5EMA0GCSqGSIb3DQEBCwUAA4IBAQAW7SescNkW9oLHnrSt
ppT5v3wl2Si3/qnwajPN94FfF50cAZ25WCSDgaGjdFCBK6b4QUiC68/C8C8hZHb3
TXwGOWzr3KyrjVImvMA3M1IA3nKScI20Nves02EgOjdIa3CZrvfPDHynLjvQIfwP
GBnyCWuUhKEDJWi/gZD+X2oN1LJp/ctFpN9WtSDxLxWMQOoQfR37Lfc4/wIqYuWI
dQH+F5fk3ggWoPeIb1vWGZvCoKXdAjL+3m/1Ar6eafnvJThmEJqEZcQ1j+N7KKa3
DEtmX54bMo892DUEKC+wm2bZETful9xatirjh2T0nMGDIiUVThp6l2RP1N21TCp7
Zz6U
-----END CERTIFICATE-----
Generated at Wed Aug 30 17:58:47 2023 by rpki-client on console-ams.rpki-client.org