Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/2ce70d9d9fe838e632762bb272a690b629d382f0.roa
File:                     2ce70d9d9fe838e632762bb272a690b629d382f0.roa (raw, json)
Hash identifier:          q4rQUfvY1A7OloojaFVpBm3/iqlElR+N4h8Ulnj+nng=
Subject key identifier:   2F:8A:1A:96:A7:16:1C:40:04:49:81:4E:33:C3:1E:5F:5B:76:2C:03
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       267560
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/2ce70d9d9fe838e632762bb272a690b629d382f0.roa
Signing time:             Mon 16 Oct 2023 12:49:24 +0000
ROA not before:           Sun 15 Oct 2023 12:49:24 +0000
ROA not after:            Thu 16 Oct 2025 12:49:24 +0000
asID:                     197789
IP address blocks:        190.93.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2520416 (0x267560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Oct 15 12:49:24 2023 GMT
            Not After : Oct 16 12:49:24 2025 GMT
        Subject: CN=2ce70d9d9fe838e632762bb272a690b629d382f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:f7:60:84:b9:ac:a2:79:02:40:e5:67:1f:
                    57:b4:0d:60:2b:71:b8:94:af:56:07:1d:c9:02:70:
                    f8:03:e4:23:c7:61:33:e3:3c:60:e6:06:aa:fe:ec:
                    9b:4f:32:2b:10:b4:58:67:ed:c7:44:30:de:b1:db:
                    72:8d:3c:6b:b8:35:de:84:e3:13:b7:f5:8b:95:17:
                    91:70:ac:9d:34:bc:90:d3:a6:09:fc:cf:d9:0d:4b:
                    c9:ce:01:3e:81:11:e5:0c:47:6c:96:0f:49:8b:83:
                    b8:de:aa:e2:9b:d8:08:d8:74:0e:ad:a3:9c:97:37:
                    96:b9:4e:ad:9a:6f:c1:fb:b4:d5:b4:bc:5e:bc:82:
                    5b:9d:98:c8:da:cb:22:14:84:ef:a4:37:ed:de:6a:
                    b7:ff:52:f0:81:63:20:82:fc:6e:d9:30:e4:4d:a3:
                    ee:5a:31:c3:98:35:76:ee:74:9a:4f:40:a4:48:63:
                    ea:df:f9:f0:9c:42:f6:db:ff:09:fc:64:32:98:3b:
                    61:f6:75:11:e4:0a:32:99:df:1a:85:60:1e:b3:38:
                    64:aa:be:f4:d8:96:0e:c3:08:68:ed:d4:4b:e2:d1:
                    df:13:8a:dc:e3:a3:cb:e5:e4:86:ed:8d:d2:95:6e:
                    ab:53:9f:d1:7b:94:ec:d6:52:7f:42:92:98:bd:10:
                    96:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8A:1A:96:A7:16:1C:40:04:49:81:4E:33:C3:1E:5F:5B:76:2C:03
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/2ce70d9d9fe838e632762bb272a690b629d382f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:2e:3b:4f:58:0f:a4:10:27:43:13:34:78:07:be:b4:3d:98:
         2e:cb:2a:b4:89:47:13:2d:46:9d:d1:1a:c0:ad:94:70:e7:bd:
         83:db:2d:88:81:46:5b:13:8c:5d:ac:a4:1e:3f:81:fc:d1:77:
         f1:68:47:bf:66:60:29:9f:34:a6:a7:59:75:07:e5:5d:63:8b:
         20:20:cf:1a:64:67:b2:55:fd:55:6d:35:3b:95:4a:3d:30:81:
         b1:3e:07:5e:2b:c3:2c:24:ed:26:41:23:43:51:6e:c4:27:b6:
         6a:f2:a2:47:3e:a1:5b:96:f5:8e:ac:fc:66:e3:47:80:1e:7c:
         e5:07:45:b0:a6:03:a9:d7:3c:ab:c2:52:17:a2:7d:a8:58:a3:
         11:f4:0c:98:e8:59:6d:75:3d:aa:bd:7a:a4:aa:b3:cb:bb:4f:
         97:f6:48:93:06:8f:05:0e:88:83:c6:6f:f2:2c:2a:d0:ff:c4:
         ac:a1:99:1c:99:8a:d2:4d:70:49:30:ed:80:80:42:d0:4e:da:
         df:bf:ba:2d:00:8b:f1:63:56:c1:d5:0f:b0:f0:c2:7a:68:ea:
         af:da:30:f6:18:f7:fb:62:11:c6:83:f4:8f:1f:37:03:1b:0e:
         d7:aa:35:14:8b:c6:cc:22:f7:b1:fb:d7:2d:55:57:56:c6:78:
         1e:b2:d1:88
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJnVgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
ZDg1Mzc4NTI2NjIxZmJkNDk1NmVmYTEwNDc4ZjkxMmYwODA3ZGIwHhcNMjMxMDE1
MTI0OTI0WhcNMjUxMDE2MTI0OTI0WjAzMTEwLwYDVQQDEygyY2U3MGQ5ZDlmZTgz
OGU2MzI3NjJiYjI3MmE2OTBiNjI5ZDM4MmYwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtVb3YIS5rKJ5AkDlZx9XtA1gK3G4lK9WBx3JAnD4A+Qjx2Ez
4zxg5gaq/uybTzIrELRYZ+3HRDDesdtyjTxruDXehOMTt/WLlReRcKydNLyQ06YJ
/M/ZDUvJzgE+gRHlDEdslg9Ji4O43qrim9gI2HQOraOclzeWuU6tmm/B+7TVtLxe
vIJbnZjI2ssiFITvpDft3mq3/1LwgWMggvxu2TDkTaPuWjHDmDV27nSaT0CkSGPq
3/nwnEL22/8J/GQymDth9nUR5Aoymd8ahWAeszhkqr702JYOwwho7dRL4tHfE4rc
46PL5eSG7Y3SlW6rU5/Re5Ts1lJ/QpKYvRCWRwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFC+KGpanFhxABEmBTjPDHl9bdiwDMB8GA1UdIwQYMBaAFBjyWuz3sMhn/mxf
oWHl66ymOasXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTVkODUz
Nzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdkYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzJjZTcwZDlkOWZlODM4ZTYzMjc2MmJiMjcyYTY5MGI2MjlkMzgyZjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvZTVkODUzNzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdk
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dWzANBgkqhkiG9w0BAQsFAAOCAQEAQy47T1gPpBAnQxM0
eAe+tD2YLssqtIlHEy1GndEawK2UcOe9g9stiIFGWxOMXaykHj+B/NF38WhHv2Zg
KZ80pqdZdQflXWOLICDPGmRnslX9VW01O5VKPTCBsT4HXivDLCTtJkEjQ1FuxCe2
avKiRz6hW5b1jqz8ZuNHgB585QdFsKYDqdc8q8JSF6J9qFijEfQMmOhZbXU9qr16
pKqzy7tPl/ZIkwaPBQ6Ig8Zv8iwq0P/ErKGZHJmK0k1wSTDtgIBC0E7a37+6LQCL
8WNWwdUPsPDCemjqr9ow9hj3+2IRxoP0jx83AxsO16o1FIvGzCL3sfvXLVVXVsZ4
HrLRiA==
-----END CERTIFICATE-----
Generated at Mon Nov 20 12:46:34 2023 by rpki-client on console-ams.rpki-client.org