Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/3456b8b8c5b33713741ea7461a7b3049f1dd1e9d.roa
File:                     3456b8b8c5b33713741ea7461a7b3049f1dd1e9d.roa (raw, json)
Hash identifier:          eE8tAZPRW3KK3gKMd0IhWIm7ibAWxwfUxSlCdTvOGlQ=
Subject key identifier:   57:8E:87:3C:F8:E7:4B:68:01:2E:74:0B:F7:84:19:BB:02:BB:13:C2
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       14C919
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/3456b8b8c5b33713741ea7461a7b3049f1dd1e9d.roa
Signing time:             Tue 04 Jan 2022 18:56:21 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     7315
IP address blocks:        186.112.0.0/14 maxlen: 24
                          190.52.0.0/19 maxlen: 24
                          190.66.0.0/15 maxlen: 24
                          200.30.96.0/19 maxlen: 24
                          200.89.192.0/20 maxlen: 24
                          200.89.208.0/20 maxlen: 24
                          201.228.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1362201 (0x14c919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=3456b8b8c5b33713741ea7461a7b3049f1dd1e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:33:51:26:fc:c6:e4:58:cd:55:91:a7:31:de:
                    5a:cd:0f:c9:cf:70:a4:bd:fc:a3:e4:e2:79:0f:41:
                    11:d8:c7:30:d2:11:fc:22:12:8c:58:65:5e:4b:ab:
                    66:51:35:54:83:56:cf:9d:32:dd:37:65:6b:41:70:
                    2c:62:7f:02:a8:d2:a4:e7:ae:75:74:33:f0:c9:c9:
                    de:de:cf:f7:72:8e:e3:70:d3:86:b8:d6:11:05:08:
                    92:b5:c4:d8:60:1a:a8:df:fe:b5:ca:94:93:47:e8:
                    bd:72:e4:18:54:00:ac:42:88:64:fe:17:45:27:7c:
                    d2:1a:2c:87:f3:15:70:ea:63:c7:f0:14:06:4c:5d:
                    4b:44:27:0e:ed:ce:5f:9a:62:27:2c:c6:67:4e:df:
                    8a:b2:6f:1c:6f:5c:17:8e:58:c8:ba:65:28:d0:c7:
                    a8:7a:b6:b0:25:46:b7:75:90:14:c1:64:0f:0d:c1:
                    cd:ea:f3:e7:46:3a:72:84:33:8c:e1:81:69:97:0c:
                    03:55:38:ab:3b:9b:eb:b5:4f:f4:a7:5b:1a:b5:b3:
                    6f:ec:cb:8e:98:7c:bb:4a:d0:9c:01:f7:a9:a9:91:
                    d0:00:23:de:25:a4:de:c3:62:3e:7e:ba:34:97:f8:
                    a5:d0:30:10:83:94:4c:0e:bf:34:60:ff:d3:76:c0:
                    f3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8E:87:3C:F8:E7:4B:68:01:2E:74:0B:F7:84:19:BB:02:BB:13:C2
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/3456b8b8c5b33713741ea7461a7b3049f1dd1e9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.112.0.0/14
                  190.52.0.0/19
                  190.66.0.0/15
                  200.30.96.0/19
                  200.89.192.0/19
                  201.228.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         63:8c:64:1d:e6:23:93:b7:73:c6:a6:e2:15:69:c0:ea:e4:a3:
         97:81:2e:34:47:87:c4:68:c3:a5:59:46:8b:ef:be:cf:9b:ba:
         4e:a3:c5:8e:46:91:c2:de:59:40:40:6d:bd:a2:2f:0d:39:d6:
         e6:d8:11:9e:23:49:67:97:64:df:41:7d:9c:bc:c2:a1:62:5a:
         36:f6:34:f4:81:8d:d1:0a:2d:d9:77:b3:dc:09:aa:cd:b0:a4:
         88:b8:ac:47:48:e2:6b:d8:77:18:06:a4:ac:38:01:66:4b:24:
         a4:a9:4e:8d:67:05:20:c5:2d:71:8a:2b:60:9c:22:f0:d0:0a:
         a5:d8:d5:74:ac:6f:b5:b6:8d:2f:ba:90:b3:58:5d:5d:a2:17:
         49:b0:6f:a0:cb:53:84:6e:70:f9:d4:d8:32:03:d1:9b:4d:b0:
         3d:aa:c1:59:cd:bc:fa:73:bb:6a:33:bb:ae:ef:82:72:66:d7:
         47:b5:78:6a:b9:f0:68:33:1e:d3:ae:3f:7f:70:f6:38:3b:9b:
         a5:79:70:d1:b5:ae:28:45:09:f7:bb:d0:57:0c:97:66:f2:f3:
         92:33:0d:19:4c:3f:de:8b:33:4c:0c:bb:1b:ea:99:f8:85:df:
         b5:12:4b:99:7b:43:d9:c3:72:fa:9c:25:67:bd:6a:29:1d:bb:
         72:f7:33:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:53 2023 by rpki-client on console-ams.rpki-client.org