Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/cf9c9286f0a966d7f41b814d59a05db2fda7d9d2.roa
File:                     cf9c9286f0a966d7f41b814d59a05db2fda7d9d2.roa (raw, json)
Hash identifier:          QSolUTOi8hXJ0xXY72bgbrcrCkpyzzZjkXA7eo7D1I4=
Subject key identifier:   78:BA:AC:16:B6:F0:44:42:20:79:10:20:AD:18:BE:0F:26:E9:D5:48
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1C282D
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/cf9c9286f0a966d7f41b814d59a05db2fda7d9d2.roa
Signing time:             Wed 28 Sep 2022 13:57:44 +0000
ROA not before:           Wed 28 Sep 2022 13:55:56 +0000
ROA not after:            Sat 28 Sep 2024 13:55:56 +0000
asID:                     3816
IP address blocks:        190.65.0.0/16 maxlen: 16
                          190.65.0.0/19 maxlen: 19
                          190.65.0.0/20 maxlen: 20
                          190.65.0.0/22 maxlen: 22
                          190.65.16.0/21 maxlen: 21
                          190.65.24.0/22 maxlen: 22
                          190.65.28.0/22 maxlen: 22
                          190.65.32.0/19 maxlen: 19
                          190.65.32.0/20 maxlen: 20
                          190.65.56.0/21 maxlen: 21
                          190.65.64.0/19 maxlen: 19
                          190.65.64.0/21 maxlen: 21
                          190.65.76.0/22 maxlen: 22
                          190.65.88.0/21 maxlen: 21
                          190.65.96.0/19 maxlen: 19
                          190.65.99.0/24 maxlen: 24
                          190.65.108.0/24 maxlen: 24
                          190.65.109.0/24 maxlen: 24
                          190.65.112.0/22 maxlen: 22
                          190.65.116.0/22 maxlen: 22
                          190.65.128.0/19 maxlen: 19
                          190.65.136.0/22 maxlen: 22
                          190.65.160.0/19 maxlen: 19
                          190.65.164.0/24 maxlen: 24
                          190.65.180.0/22 maxlen: 22
                          190.65.192.0/19 maxlen: 19
                          190.65.204.0/22 maxlen: 22
                          190.65.212.0/22 maxlen: 22
                          190.65.220.0/22 maxlen: 22
                          190.65.222.0/24 maxlen: 24
                          190.65.224.0/19 maxlen: 19
                          190.65.224.0/23 maxlen: 23
                          190.65.232.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845293 (0x1c282d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 28 13:55:56 2022 GMT
            Not After : Sep 28 13:55:56 2024 GMT
        Subject: CN=cf9c9286f0a966d7f41b814d59a05db2fda7d9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:b1:fe:f1:5e:d7:e6:5b:df:9a:f7:41:e0:
                    b0:da:72:6c:a4:06:ec:ad:71:ab:e9:cc:00:33:d8:
                    d1:4c:d5:e6:45:32:f8:09:3e:38:ff:d2:02:bc:0a:
                    ec:8c:75:25:c3:7c:98:a7:f0:12:36:67:14:c5:d7:
                    9c:d2:f0:c9:9b:1d:b9:5e:08:48:d8:e8:62:86:3a:
                    be:32:86:26:df:8f:d8:04:ba:fe:cc:94:d7:87:ff:
                    d8:7c:d9:78:61:d8:5e:53:05:b2:95:7b:23:6e:9a:
                    4f:7e:e5:84:ec:85:6c:00:c5:ca:ad:45:ec:d8:74:
                    46:97:fd:5e:c7:2c:45:df:22:9f:bd:eb:e5:00:12:
                    7e:62:fe:8d:b8:e3:31:46:71:f8:1b:07:61:f3:d3:
                    63:78:92:41:bb:09:33:dc:3a:2e:e1:d0:a6:d6:85:
                    77:98:2b:30:5a:ce:01:d3:03:03:c8:6e:b9:39:ea:
                    b9:e7:a2:44:d2:de:63:6d:ce:46:07:03:22:e9:c3:
                    c9:7f:da:dd:d0:a5:28:d4:9e:63:5e:97:f9:ed:9d:
                    a0:89:e5:ed:d4:6d:6f:25:4b:11:c3:cf:89:ed:22:
                    3b:c3:2b:48:0e:34:6c:b5:7d:11:c2:e1:08:0e:95:
                    ca:be:60:33:5d:42:2f:67:82:75:bd:ec:a6:75:ea:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BA:AC:16:B6:F0:44:42:20:79:10:20:AD:18:BE:0F:26:E9:D5:48
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/cf9c9286f0a966d7f41b814d59a05db2fda7d9d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.65.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:ec:13:5f:5b:1b:83:5d:a0:c8:8c:8d:a0:00:46:66:fd:
         10:11:b2:10:ab:8e:b6:25:8b:aa:ee:3f:04:1e:6b:61:1d:91:
         e4:87:73:ab:50:9a:b0:f4:cc:bc:62:b2:5e:a1:30:f9:60:da:
         a9:1d:59:98:bb:1a:e0:a9:14:d8:20:89:79:21:65:32:8b:b4:
         2e:b5:73:08:6a:ac:bf:0d:00:10:55:79:bf:77:55:3d:a9:79:
         b3:c3:a1:bd:7f:19:21:ad:c5:11:25:0f:83:b9:ff:4c:1b:e2:
         f9:32:da:6d:27:89:29:9e:b9:e5:20:5c:47:4e:f8:11:ed:e9:
         0e:3b:8c:ff:cf:09:03:d2:db:b5:1c:8e:41:18:02:a4:bc:ab:
         97:9c:e5:2e:8c:3c:1d:c5:43:77:52:fb:ea:7b:7a:a1:3b:14:
         f9:c6:e4:11:8a:51:db:2b:28:4a:d8:ad:87:aa:53:00:94:11:
         e5:96:4f:1f:1f:b7:d4:aa:2e:e3:47:01:45:a0:69:53:9c:8f:
         b4:c8:72:0a:e3:b1:6e:73:89:af:7e:96:51:7e:cc:ef:45:f3:
         04:bc:68:56:83:81:46:24:99:8b:5e:bd:f5:18:20:5f:c5:6e:
         87:d1:ca:38:69:87:16:80:ac:77:84:1b:7a:52:b7:cf:1e:8f:
         29:f3:83:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 18:08:10 2023 by rpki-client on console-fra.rpki-client.org