Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0c6db8c4c12601c439134531c6c4fe4ce9e9bb54.roa
File:                     0c6db8c4c12601c439134531c6c4fe4ce9e9bb54.roa (raw, json)
Hash identifier:          4N0Z8osfXet0vvblTNLRPiJSmlMYggkyfovdpYpxzWA=
Subject key identifier:   5F:29:1E:5F:8D:81:E8:C7:08:59:BE:23:43:92:16:B5:F9:EE:19:C9
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       245C97
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0c6db8c4c12601c439134531c6c4fe4ce9e9bb54.roa
Signing time:             Fri 01 Sep 2023 19:30:50 +0000
ROA not before:           Thu 31 Aug 2023 19:30:43 +0000
ROA not after:            Fri 01 Sep 2028 19:30:43 +0000
asID:                     3257
IP address blocks:        190.93.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2382999 (0x245c97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Aug 31 19:30:43 2023 GMT
            Not After : Sep  1 19:30:43 2028 GMT
        Subject: CN=0c6db8c4c12601c439134531c6c4fe4ce9e9bb54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4f:ab:1c:b4:03:58:e8:9d:0e:8c:c1:96:b6:
                    1d:1c:fe:9c:95:09:3b:1b:2d:b0:ab:19:22:13:e5:
                    98:11:15:92:e9:4b:ac:e6:1a:05:c2:75:b8:99:d8:
                    1f:4e:05:26:37:0d:f4:b7:21:0e:ab:07:3d:f2:d5:
                    35:1a:2e:16:05:c1:5d:5c:d0:75:27:a4:7e:0c:67:
                    5f:d1:fe:eb:15:d5:9b:72:6a:92:52:d5:82:fb:60:
                    f9:42:95:02:8a:e2:7b:0e:8e:ce:83:64:e1:5c:5d:
                    e3:4a:5b:9c:0a:b6:25:4a:09:a7:f2:bf:ad:88:a2:
                    05:9d:bc:41:76:22:ff:e9:88:30:c4:36:19:85:2c:
                    d6:8c:d5:8d:e1:1d:53:8c:a8:73:0c:2a:67:76:d1:
                    13:75:43:d0:93:08:8c:3b:2e:49:5d:a9:1b:0c:cf:
                    7c:1b:ec:34:28:50:c1:02:3d:73:3f:cc:41:a6:9d:
                    7c:c1:46:28:f0:39:76:b2:68:b3:5a:06:0d:45:3f:
                    4d:df:40:15:7a:b8:fb:46:c0:1e:61:b3:fd:26:5b:
                    4d:ed:83:d5:23:56:a3:a9:d5:b8:6d:60:84:41:ba:
                    b3:4f:fc:0a:9d:12:cc:62:f8:2d:a8:0a:82:bd:60:
                    87:14:38:b5:e3:ca:9c:fa:fa:35:4e:e9:62:be:8e:
                    9f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:29:1E:5F:8D:81:E8:C7:08:59:BE:23:43:92:16:B5:F9:EE:19:C9
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0c6db8c4c12601c439134531c6c4fe4ce9e9bb54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:96:a9:f1:23:2d:f6:22:a8:dc:af:cc:3d:c1:3b:87:2a:fd:
         6a:ef:f0:54:a0:62:e5:5f:2f:63:c8:aa:38:28:fb:c5:ed:50:
         9f:53:2b:5b:42:c2:ea:a2:c7:6f:3d:62:45:d3:fa:3f:fa:f9:
         f0:9e:3b:e4:7f:19:ce:ff:7e:ac:10:16:fe:3c:e3:d9:5d:64:
         b3:87:03:a5:bf:01:6c:b5:44:a7:b5:ce:65:75:62:f0:75:79:
         9c:de:1d:9c:80:e0:dc:f1:d0:58:14:e0:f2:1f:ff:bd:78:b1:
         8b:5e:10:75:9a:56:4f:8a:84:d0:f4:36:1e:8e:db:29:80:e0:
         66:3d:ad:22:12:e0:f3:74:ab:4e:07:37:03:ad:3b:98:12:5a:
         f7:02:db:12:6f:35:66:b5:96:44:35:4d:fa:b6:7d:47:93:53:
         df:62:fc:3e:59:70:7b:ca:27:2a:18:46:06:ce:2d:24:76:44:
         21:b9:6c:1c:b3:c2:bb:b6:b5:be:f8:a3:d7:16:7a:9a:0c:07:
         7c:45:30:fe:82:63:94:73:d1:a3:dc:ab:9f:3d:d7:95:6a:61:
         fa:df:f4:a9:e1:72:81:79:ec:02:3d:59:d5:4c:03:f3:51:51:
         44:04:10:71:c4:16:87:60:9b:a9:b1:32:d2:ed:b7:7a:52:7f:
         07:cc:1f:79
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJFyXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
ZDg1Mzc4NTI2NjIxZmJkNDk1NmVmYTEwNDc4ZjkxMmYwODA3ZGIwHhcNMjMwODMx
MTkzMDQzWhcNMjgwOTAxMTkzMDQzWjAzMTEwLwYDVQQDEygwYzZkYjhjNGMxMjYw
MWM0MzkxMzQ1MzFjNmM0ZmU0Y2U5ZTliYjU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzE+rHLQDWOidDozBlrYdHP6clQk7Gy2wqxkiE+WYERWS6Uus
5hoFwnW4mdgfTgUmNw30tyEOqwc98tU1Gi4WBcFdXNB1J6R+DGdf0f7rFdWbcmqS
UtWC+2D5QpUCiuJ7Do7Og2ThXF3jSlucCrYlSgmn8r+tiKIFnbxBdiL/6YgwxDYZ
hSzWjNWN4R1TjKhzDCpndtETdUPQkwiMOy5JXakbDM98G+w0KFDBAj1zP8xBpp18
wUYo8Dl2smizWgYNRT9N30AVerj7RsAeYbP9JltN7YPVI1ajqdW4bWCEQbqzT/wK
nRLMYvgtqAqCvWCHFDi148qc+vo1Tulivo6f9wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFF8pHl+NgejHCFm+I0OSFrX57hnJMB8GA1UdIwQYMBaAFBjyWuz3sMhn/mxf
oWHl66ymOasXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTVkODUz
Nzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdkYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzBjNmRiOGM0YzEyNjAxYzQzOTEzNDUzMWM2YzRmZTRjZTllOWJiNTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvZTVkODUzNzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdk
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dRzANBgkqhkiG9w0BAQsFAAOCAQEAl5ap8SMt9iKo3K/M
PcE7hyr9au/wVKBi5V8vY8iqOCj7xe1Qn1MrW0LC6qLHbz1iRdP6P/r58J475H8Z
zv9+rBAW/jzj2V1ks4cDpb8BbLVEp7XOZXVi8HV5nN4dnIDg3PHQWBTg8h//vXix
i14QdZpWT4qE0PQ2Ho7bKYDgZj2tIhLg83SrTgc3A607mBJa9wLbEm81ZrWWRDVN
+rZ9R5NT32L8Pllwe8onKhhGBs4tJHZEIblsHLPCu7a1vvij1xZ6mgwHfEUw/oJj
lHPRo9yrnz3XlWph+t/0qeFygXnsAj1Z1UwD81FRRAQQccQWh2CbqbEy0u23elJ/
B8wfeQ==
-----END CERTIFICATE-----
Generated at Sun Dec 17 02:53:34 2023 by rpki-client on console-ams.rpki-client.org