Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/2383999aad426f8a4081ef0413682b40d375d55e.roa
File:                     2383999aad426f8a4081ef0413682b40d375d55e.roa (raw, json)
Hash identifier:          Xyx0U9YgiFE0PEofgT1hBcXKnnriGouuznJhZzJ8CWw=
Subject key identifier:   89:DD:F2:78:E8:58:AC:49:43:1B:D7:0F:95:18:E6:E5:4A:B8:53:35
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1C2B94
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/2383999aad426f8a4081ef0413682b40d375d55e.roa
Signing time:             Wed 28 Sep 2022 13:59:58 +0000
ROA not before:           Wed 28 Sep 2022 13:57:47 +0000
ROA not after:            Sat 28 Sep 2024 13:57:47 +0000
asID:                     3816
IP address blocks:        190.66.0.0/24 maxlen: 24
                          190.66.1.0/24 maxlen: 24
                          190.66.2.0/24 maxlen: 24
                          190.66.3.0/24 maxlen: 24
                          190.66.5.0/24 maxlen: 24
                          190.66.6.0/24 maxlen: 24
                          190.66.7.0/24 maxlen: 24
                          190.66.8.0/21 maxlen: 21
                          190.66.10.0/24 maxlen: 24
                          190.66.14.0/24 maxlen: 24
                          190.66.16.0/20 maxlen: 20
                          190.66.16.0/24 maxlen: 24
                          190.66.17.0/24 maxlen: 24
                          190.66.21.0/24 maxlen: 24
                          190.66.23.0/24 maxlen: 24
                          190.66.24.0/24 maxlen: 24
                          190.66.25.0/24 maxlen: 24
                          190.66.27.0/24 maxlen: 24
                          190.66.30.0/23 maxlen: 23
                          190.66.32.0/22 maxlen: 22
                          190.66.33.0/24 maxlen: 24
                          190.66.34.0/24 maxlen: 24
                          190.66.36.0/22 maxlen: 22
                          190.66.40.0/22 maxlen: 22
                          190.66.44.0/22 maxlen: 22
                          190.66.48.0/21 maxlen: 21
                          190.66.56.0/21 maxlen: 21
                          190.66.64.0/20 maxlen: 20
                          190.66.80.0/22 maxlen: 22
                          190.66.84.0/22 maxlen: 22
                          190.66.88.0/22 maxlen: 22
                          190.66.96.0/20 maxlen: 20
                          190.66.112.0/20 maxlen: 20
                          190.66.128.0/21 maxlen: 21
                          190.66.136.0/21 maxlen: 21
                          190.66.144.0/20 maxlen: 20
                          190.66.160.0/20 maxlen: 20
                          190.66.176.0/22 maxlen: 22
                          190.66.184.0/21 maxlen: 21
                          190.66.192.0/22 maxlen: 22
                          190.66.196.0/22 maxlen: 22
                          190.66.200.0/22 maxlen: 22
                          190.66.204.0/22 maxlen: 22
                          190.66.208.0/20 maxlen: 20
                          190.66.224.0/20 maxlen: 20
                          190.66.240.0/20 maxlen: 20
                          190.67.0.0/21 maxlen: 21
                          190.67.8.0/21 maxlen: 21
                          190.67.16.0/21 maxlen: 21
                          190.67.24.0/23 maxlen: 23
                          190.67.26.0/23 maxlen: 23
                          190.67.28.0/22 maxlen: 22
                          190.67.32.0/19 maxlen: 19
                          190.67.32.0/22 maxlen: 22
                          190.67.38.0/24 maxlen: 24
                          190.67.40.0/22 maxlen: 22
                          190.67.56.0/21 maxlen: 21
                          190.67.64.0/20 maxlen: 20
                          190.67.64.0/21 maxlen: 21
                          190.67.72.0/21 maxlen: 21
                          190.67.80.0/20 maxlen: 20
                          190.67.80.0/21 maxlen: 21
                          190.67.87.0/24 maxlen: 24
                          190.67.88.0/21 maxlen: 21
                          190.67.96.0/21 maxlen: 21
                          190.67.104.0/22 maxlen: 22
                          190.67.108.0/22 maxlen: 22
                          190.67.112.0/21 maxlen: 21
                          190.67.120.0/23 maxlen: 23
                          190.67.122.0/23 maxlen: 23
                          190.67.124.0/22 maxlen: 22
                          190.67.128.0/18 maxlen: 18
                          190.67.136.0/21 maxlen: 21
                          190.67.144.0/22 maxlen: 22
                          190.67.148.0/22 maxlen: 22
                          190.67.152.0/21 maxlen: 21
                          190.67.160.0/22 maxlen: 22
                          190.67.164.0/22 maxlen: 22
                          190.67.168.0/22 maxlen: 22
                          190.67.172.0/22 maxlen: 22
                          190.67.176.0/21 maxlen: 21
                          190.67.184.0/22 maxlen: 22
                          190.67.188.0/22 maxlen: 22
                          190.67.192.0/20 maxlen: 20
                          190.67.208.0/20 maxlen: 20
                          190.67.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1846164 (0x1c2b94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 28 13:57:47 2022 GMT
            Not After : Sep 28 13:57:47 2024 GMT
        Subject: CN=2383999aad426f8a4081ef0413682b40d375d55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:4c:c2:96:7b:5b:99:7b:4a:3b:9d:19:a2:
                    3a:f7:aa:ec:03:7e:31:b0:fd:88:24:07:84:08:e4:
                    f8:a9:ba:db:ac:e0:dd:e0:f9:aa:d2:56:b0:ad:22:
                    b3:11:64:1d:b0:3f:a9:c2:20:1c:0e:65:e3:3c:26:
                    89:50:23:f9:4e:b6:a6:a2:23:05:bb:68:51:b6:92:
                    89:5c:d5:97:3e:05:f7:92:3d:fd:62:27:57:ac:2b:
                    ae:f7:b5:b3:76:5e:cc:c0:f1:19:c2:a3:c7:11:03:
                    3d:cd:2e:a3:4f:1e:f7:aa:04:ad:85:e2:cd:30:3d:
                    4b:d0:ca:7c:33:59:42:13:c2:3f:90:bc:e4:11:d0:
                    75:62:f5:53:62:af:a0:c4:a0:e7:68:48:aa:f8:cd:
                    05:00:7b:22:c0:e1:61:07:e6:60:a9:55:12:7a:7a:
                    be:05:eb:fe:bf:20:48:7b:78:ae:9d:ec:b6:07:e0:
                    52:2a:28:c3:df:32:ec:2d:1a:d3:d0:cc:28:53:0d:
                    8a:67:39:85:d7:ff:f7:a6:59:4e:f5:d8:a3:85:72:
                    a3:6b:b3:64:68:ca:a2:93:c1:1c:3c:cd:83:01:04:
                    53:0a:07:4d:52:f4:f8:04:41:8a:7d:2e:42:08:a0:
                    f6:17:88:cf:79:69:f3:b6:d6:16:53:34:5b:dd:79:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DD:F2:78:E8:58:AC:49:43:1B:D7:0F:95:18:E6:E5:4A:B8:53:35
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/2383999aad426f8a4081ef0413682b40d375d55e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.66.0.0/22
                  190.66.5.0-190.66.91.255
                  190.66.96.0-190.66.179.255
                  190.66.184.0-190.67.255.255

    Signature Algorithm: sha256WithRSAEncryption
         40:fd:8b:6b:e9:19:a2:85:74:91:fd:f9:fc:4d:ad:60:7d:0d:
         d9:1e:45:2b:83:c1:2c:4c:83:46:3a:17:bb:b6:10:a2:db:b9:
         ca:cd:9a:28:8a:d3:49:aa:95:86:b2:89:0a:2b:dc:89:05:ea:
         3f:c6:90:0a:05:56:ea:1d:3c:5f:9f:12:0e:e2:04:2a:4f:cc:
         35:62:30:b4:96:94:cf:95:17:b0:c5:a9:e8:9f:93:40:3b:62:
         98:58:c8:a6:dd:cd:65:2c:a8:fd:74:8e:34:65:27:0d:9a:6b:
         a1:39:0f:f2:78:90:94:a4:05:2c:ad:c3:8b:7d:ff:c0:d0:85:
         88:49:0d:70:fa:98:35:dd:3b:ef:4b:05:b5:c5:84:43:06:c0:
         5c:8d:85:cf:26:89:b2:1b:fc:36:1c:e1:20:41:05:74:21:f0:
         5a:7d:8e:a9:29:ea:ea:d7:83:2c:7c:45:6f:40:61:73:ba:e0:
         b5:7b:d0:a0:43:2a:b7:50:e9:1a:75:6b:cc:1f:0c:b6:ae:11:
         d4:e7:35:f1:1f:ef:93:b7:89:6d:69:66:a1:66:a0:ab:be:c3:
         cf:0d:ed:73:e3:4b:64:9f:e6:76:de:3f:1a:e0:cd:57:4c:24:
         49:b5:ce:64:a9:e2:1d:59:8b:76:11:4f:ac:63:30:ef:12:a4:
         7e:05:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 18:08:10 2023 by rpki-client on console-fra.rpki-client.org