Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/4105d93d39245fdf125610fdbd13e91c50297d44.roa
File:                     4105d93d39245fdf125610fdbd13e91c50297d44.roa (raw, json)
Hash identifier:          CprK1LISzDWAXB0XJUwxGuP/vyVtrGvPTx8vcO3kFnc=
Subject key identifier:   96:BD:BA:A4:22:B0:93:FE:C6:D6:65:79:71:B1:43:93:50:84:03:92
Certificate issuer:       /CN=a421ae9f935de1a361bde176bcfb6a5e99b7b1cd
Certificate serial:       197B
Authority key identifier: E1:8F:1B:93:41:93:82:6A:3D:D3:73:B2:42:3A:BA:D8:DF:9E:3E:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a421ae9f935de1a361bde176bcfb6a5e99b7b1cd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/4105d93d39245fdf125610fdbd13e91c50297d44.roa
Signing time:             Sat 02 Oct 2021 21:31:38 +0000
ROA not before:           Sat 02 Oct 2021 03:00:00 +0000
ROA not after:            Mon 02 Oct 2023 03:00:00 +0000
asID:                     271864
IP address blocks:        190.113.32.0/22 maxlen: 24
                          190.113.32.0/24 maxlen: 24
                          190.113.33.0/24 maxlen: 24
                          190.113.34.0/24 maxlen: 24
                          190.113.35.0/24 maxlen: 24
                          2803:b410::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6523 (0x197b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a421ae9f935de1a361bde176bcfb6a5e99b7b1cd
        Validity
            Not Before: Oct  2 03:00:00 2021 GMT
            Not After : Oct  2 03:00:00 2023 GMT
        Subject: CN=4105d93d39245fdf125610fdbd13e91c50297d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:c6:20:21:e7:45:21:07:18:80:1c:7b:0b:
                    9b:b3:c3:a9:a2:c3:58:95:70:25:69:76:22:bb:eb:
                    d0:c7:1d:fe:28:a6:1b:f5:ca:8c:66:d5:14:67:88:
                    0c:ba:e3:ba:15:49:19:fc:7f:57:b5:85:24:f4:19:
                    de:10:68:c7:b1:57:ed:81:da:c4:58:42:3a:7c:22:
                    7b:3f:a3:04:30:5a:ba:0a:00:cd:0f:20:03:8e:4c:
                    49:54:df:3b:09:c5:9a:00:26:32:7f:96:96:71:7b:
                    0f:6a:75:16:0e:af:25:a3:a0:e8:f1:fe:e2:ee:56:
                    e2:ca:44:c7:b2:b4:3a:77:f8:a6:60:c3:33:52:98:
                    78:5a:0e:b8:f5:fa:35:ed:10:70:98:76:34:4b:fe:
                    57:9d:ce:73:ce:af:e0:e7:ca:13:e9:1b:8f:36:45:
                    44:dc:f5:41:08:84:03:3f:c5:b9:bb:cf:b2:72:aa:
                    bb:27:17:10:7b:6c:d6:95:b8:70:26:3d:c3:b0:1d:
                    27:dd:ca:f0:fb:f8:4b:6e:50:6d:e6:e5:2d:d1:1f:
                    8f:11:fa:69:6c:13:c6:4d:a0:96:8d:c5:a1:0b:f2:
                    1e:4f:ad:ba:72:78:00:c5:a0:b0:82:52:89:3b:c0:
                    17:9e:45:e8:ae:84:2d:64:32:4c:0a:29:e7:bd:b7:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BD:BA:A4:22:B0:93:FE:C6:D6:65:79:71:B1:43:93:50:84:03:92
            X509v3 Authority Key Identifier:
                keyid:E1:8F:1B:93:41:93:82:6A:3D:D3:73:B2:42:3A:BA:D8:DF:9E:3E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a421ae9f935de1a361bde176bcfb6a5e99b7b1cd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/4105d93d39245fdf125610fdbd13e91c50297d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/a421ae9f935de1a361bde176bcfb6a5e99b7b1cd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.32.0/22
                IPv6:
                  2803:b410::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:52:87:14:61:ef:4d:ba:02:36:41:15:f2:d7:40:ee:55:6d:
         35:44:00:98:3b:de:db:e7:e5:f9:4a:e0:6e:07:fc:dc:5b:87:
         13:f5:5a:fc:fe:91:82:86:b3:f9:06:80:66:b9:ce:ca:50:c1:
         28:d1:1d:3a:6a:c8:1e:51:1d:7f:61:43:21:bb:c1:3f:59:8a:
         54:4d:f1:4e:c9:ff:87:62:2c:b0:51:fe:99:25:fa:a8:33:85:
         2f:5c:15:80:51:27:e1:8a:ff:54:c5:57:49:54:df:1f:25:ac:
         af:b7:48:01:ff:50:10:fd:4a:04:89:b3:72:57:07:d2:4f:99:
         ac:ba:56:06:b1:ca:ab:8e:e8:ca:e3:04:81:8f:02:bc:b8:73:
         e0:85:1e:91:ad:29:2d:2e:87:37:2d:e9:fd:5b:06:23:a4:e0:
         ef:ec:7d:5e:c4:19:87:36:04:62:b6:82:ac:04:80:43:84:68:
         49:76:d4:94:c1:f3:86:1d:34:2c:96:e3:c8:58:0c:66:11:d2:
         ab:38:82:76:f9:7b:3f:f8:7f:76:2d:67:0e:0f:79:66:ec:3b:
         6d:be:14:88:b6:06:21:f7:c0:21:64:2a:b1:d2:53:30:35:8d:
         e2:7e:35:59:f7:2b:c1:cc:b6:8e:bc:cb:a6:b5:7e:ba:00:d0:
         a7:0e:57:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 09:03:22 2023 by rpki-client on console-ams.rpki-client.org