Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/07f1c99a48455ddd7e4ec641eea84ff0e7c69411.roa
File:                     07f1c99a48455ddd7e4ec641eea84ff0e7c69411.roa (raw, json)
Hash identifier:          NWQUP38zKKV9ERWMFrN7/5ZLOkmvi/SViMI6Nb8FuSM=
Subject key identifier:   04:19:06:DB:60:A5:B1:7B:01:DB:9A:13:F9:FE:37:B0:E9:4F:61:B1
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       298419
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/07f1c99a48455ddd7e4ec641eea84ff0e7c69411.roa
Signing time:             Wed 24 Jan 2024 13:03:33 +0000
ROA not before:           Wed 24 Jan 2024 13:03:33 +0000
ROA not after:            Sat 24 Jan 2026 13:03:33 +0000
asID:                     834
IP address blocks:        190.93.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 13:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2720793 (0x298419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Jan 24 13:03:33 2024 GMT
            Not After : Jan 24 13:03:33 2026 GMT
        Subject: CN=07f1c99a48455ddd7e4ec641eea84ff0e7c69411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:09:5f:cb:b0:99:39:68:c4:1e:19:c3:e8:
                    11:aa:90:63:0c:a3:a3:70:25:75:dc:be:2c:eb:06:
                    2d:75:28:6b:68:12:06:12:b2:c0:0a:82:6c:f8:77:
                    00:e9:71:11:78:40:9d:83:ff:1b:6f:3e:23:5b:26:
                    eb:0c:4b:c3:5f:40:de:2b:88:3b:ec:01:58:bf:68:
                    90:50:99:1c:33:04:27:1d:c6:ef:12:d0:63:03:c4:
                    d4:64:77:54:ba:03:4c:50:2e:f5:28:b8:74:16:a3:
                    a2:7d:13:df:2b:58:dd:ab:d9:07:c3:37:8e:49:7d:
                    02:0e:31:5d:5a:cb:ef:64:7c:3b:e3:66:5c:03:e4:
                    56:e0:51:97:68:08:e2:a9:28:cb:09:15:43:ea:2c:
                    3f:0f:d6:6e:38:c7:26:de:a7:2f:2a:e1:e4:1f:6d:
                    1d:76:88:93:5a:1c:09:e1:bb:5a:05:43:2b:79:8a:
                    7d:4e:2d:a9:8e:1e:e4:5a:b0:71:a1:23:21:0d:8c:
                    10:43:37:03:d1:9f:eb:59:9a:6d:ab:73:db:75:5a:
                    bc:80:51:24:29:0e:26:65:12:b9:d2:56:ec:b8:3e:
                    90:dc:53:01:8c:8a:9e:2f:f2:74:f1:7b:d3:4c:bc:
                    69:e9:22:8f:c1:2a:c7:e7:2a:98:e9:37:c0:76:6b:
                    fa:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:19:06:DB:60:A5:B1:7B:01:DB:9A:13:F9:FE:37:B0:E9:4F:61:B1
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/07f1c99a48455ddd7e4ec641eea84ff0e7c69411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:b6:dd:79:9d:2a:dc:72:4e:9c:20:72:7c:0e:e0:cd:10:41:
         89:cb:09:53:9c:5a:a8:dc:c8:cf:2c:47:fa:9d:48:61:df:7f:
         25:e5:93:df:76:74:db:7a:38:e4:09:0f:7a:29:be:55:96:32:
         63:ff:00:c5:cf:7b:51:97:e8:d8:90:42:6b:aa:fa:71:c8:f5:
         f9:4a:d9:ca:48:4f:01:2d:9c:be:09:f6:49:bf:a5:be:48:03:
         17:e2:f0:35:f0:29:ff:8a:37:7f:7d:f8:2f:ba:82:70:20:53:
         a3:fc:51:da:b2:39:4c:a1:bf:23:3c:c8:15:c0:f3:30:61:b3:
         41:0f:5b:45:73:45:41:67:a2:6e:e3:b1:3f:9c:d4:be:14:7c:
         58:34:8b:34:6e:52:08:20:28:31:14:5c:1d:e5:a5:98:95:39:
         5c:f3:0e:fe:50:2b:ec:fe:35:87:06:13:00:dc:4c:5c:4c:30:
         75:b0:71:23:e3:10:f1:bb:f3:5a:c6:90:78:0a:11:2c:6f:80:
         d2:54:0d:09:36:b0:44:be:23:b9:63:c6:d7:d7:03:a9:d2:3f:
         4c:d7:7e:d2:c3:ea:95:84:81:c9:55:e7:de:2c:9e:56:ba:cb:
         34:bf:84:1f:bd:ae:8e:f8:67:7d:25:28:c0:97:d9:80:15:73:
         ee:65:99:0b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKYQZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
ZDg1Mzc4NTI2NjIxZmJkNDk1NmVmYTEwNDc4ZjkxMmYwODA3ZGIwHhcNMjQwMTI0
MTMwMzMzWhcNMjYwMTI0MTMwMzMzWjAzMTEwLwYDVQQDEygwN2YxYzk5YTQ4NDU1
ZGRkN2U0ZWM2NDFlZWE4NGZmMGU3YzY5NDExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvm8JX8uwmTloxB4Zw+gRqpBjDKOjcCV13L4s6wYtdShraBIG
ErLACoJs+HcA6XEReECdg/8bbz4jWybrDEvDX0DeK4g77AFYv2iQUJkcMwQnHcbv
EtBjA8TUZHdUugNMUC71KLh0FqOifRPfK1jdq9kHwzeOSX0CDjFdWsvvZHw742Zc
A+RW4FGXaAjiqSjLCRVD6iw/D9ZuOMcm3qcvKuHkH20ddoiTWhwJ4btaBUMreYp9
Ti2pjh7kWrBxoSMhDYwQQzcD0Z/rWZptq3PbdVq8gFEkKQ4mZRK50lbsuD6Q3FMB
jIqeL/J08XvTTLxp6SKPwSrH5yqY6TfAdmv6jQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAQZBttgpbF7AduaE/n+N7DpT2GxMB8GA1UdIwQYMBaAFBjyWuz3sMhn/mxf
oWHl66ymOasXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTVkODUz
Nzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdkYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzA3ZjFjOTlhNDg0NTVkZGQ3ZTRlYzY0MWVlYTg0ZmYwZTdjNjk0MTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvZTVkODUzNzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdk
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dVDANBgkqhkiG9w0BAQsFAAOCAQEAZrbdeZ0q3HJOnCBy
fA7gzRBBicsJU5xaqNzIzyxH+p1IYd9/JeWT33Z023o45AkPeim+VZYyY/8Axc97
UZfo2JBCa6r6ccj1+UrZykhPAS2cvgn2Sb+lvkgDF+LwNfAp/4o3f334L7qCcCBT
o/xR2rI5TKG/IzzIFcDzMGGzQQ9bRXNFQWeibuOxP5zUvhR8WDSLNG5SCCAoMRRc
HeWlmJU5XPMO/lAr7P41hwYTANxMXEwwdbBxI+MQ8bvzWsaQeAoRLG+A0lQNCTaw
RL4juWPG19cDqdI/TNd+0sPqlYSByVXn3iyeVrrLNL+EH72ujvhnfSUowJfZgBVz
7mWZCw==
-----END CERTIFICATE-----
Generated at Thu Feb 1 16:26:05 2024 by rpki-client on console-ams.rpki-client.org