Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5205308f2c0e36055e57f93f58ae469f3ed90861.roa
File:                     5205308f2c0e36055e57f93f58ae469f3ed90861.roa (raw, json)
Hash identifier:          sZ2hgRgFzxGy9T7ry+dtdmJWDNgr+aw9BRbmH18FAtU=
Subject key identifier:   4C:78:76:66:2E:69:30:4B:E5:F2:B9:61:97:7B:08:48:E2:6B:F9:8B
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       297281
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5205308f2c0e36055e57f93f58ae469f3ed90861.roa
Signing time:             Sun 21 Jan 2024 12:35:36 +0000
ROA not before:           Sun 21 Jan 2024 12:35:36 +0000
ROA not after:            Wed 21 Jan 2026 12:35:36 +0000
asID:                     834
IP address blocks:        190.93.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 13:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2716289 (0x297281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Jan 21 12:35:36 2024 GMT
            Not After : Jan 21 12:35:36 2026 GMT
        Subject: CN=5205308f2c0e36055e57f93f58ae469f3ed90861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:38:97:ed:f6:0c:97:f7:6a:bc:0c:89:7a:ed:
                    91:0e:91:3d:08:25:0b:3b:5a:4e:99:7d:6a:7c:cf:
                    b7:0c:81:eb:cd:a8:a2:4f:7c:b4:6c:8a:89:59:2a:
                    6b:36:14:bb:4c:c4:58:be:36:2e:30:96:a6:b9:4e:
                    c6:d6:51:cc:66:4e:c6:9d:8e:39:28:b5:cb:e0:37:
                    1c:a9:b1:97:7c:44:63:34:5f:bf:9f:30:18:4a:07:
                    f8:10:c6:90:12:64:2a:51:00:87:a2:f5:6c:31:32:
                    c4:af:d6:c8:6a:67:80:97:02:2a:5a:80:d4:aa:0d:
                    89:ef:b2:d8:ca:31:bd:f7:0a:6c:46:58:55:ec:75:
                    ef:dd:aa:4f:c5:a5:d6:92:b3:ec:5a:3d:82:fa:e5:
                    99:ad:dd:44:26:98:4a:db:a6:11:86:14:53:6d:20:
                    31:bd:fb:b5:d0:0d:73:3b:1d:30:bf:d5:af:8c:e9:
                    52:d8:cb:f4:30:ce:39:ef:44:c8:54:cf:06:a5:13:
                    0c:bd:dc:93:49:9e:74:75:84:54:5b:a5:10:2c:14:
                    a2:16:54:9f:ff:57:6b:41:25:58:99:7c:95:e9:5f:
                    4d:0e:67:e0:54:1d:ef:b8:74:9c:38:f2:38:2b:a4:
                    89:ef:97:18:c2:a5:41:4f:ac:09:02:10:cd:cd:c5:
                    8a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:78:76:66:2E:69:30:4B:E5:F2:B9:61:97:7B:08:48:E2:6B:F9:8B
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5205308f2c0e36055e57f93f58ae469f3ed90861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:66:d9:80:86:7c:f8:ee:55:ed:a8:f3:fb:3d:a1:95:91:d6:
         79:5a:a2:38:45:05:da:47:60:0e:2a:a3:54:16:d1:ef:13:f4:
         95:36:cc:96:1f:5f:37:b8:34:bf:cc:fc:fc:02:75:63:08:b6:
         0d:9e:af:83:26:96:82:2c:38:62:92:ad:bc:4c:55:3d:3e:83:
         9b:e1:43:c7:12:46:45:ae:59:57:b7:29:76:6d:50:da:a7:66:
         2d:2d:c0:49:4d:43:1b:a0:9c:99:3d:a2:9c:f3:8e:ee:6b:cc:
         17:26:dd:e5:3e:83:90:c5:53:a0:72:63:94:c8:5a:0e:e2:a0:
         99:38:48:3e:55:05:b0:94:6d:7a:54:73:77:c9:60:2b:8b:01:
         40:54:b6:4a:eb:33:37:27:0b:14:2c:a1:57:37:bb:83:67:15:
         88:a3:d4:20:ed:44:11:29:78:41:0a:b6:f8:6b:64:dc:0d:90:
         b0:4e:f2:63:2c:03:3d:57:91:6d:8c:b0:3a:96:86:49:11:9c:
         21:a8:ac:3b:e1:fa:3e:b2:06:42:cd:30:6c:b9:25:6a:08:2f:
         6d:72:ee:90:7e:25:f4:4a:0b:e0:68:02:ed:29:d7:e8:32:b3:
         d2:e9:ea:65:5a:c6:4a:ad:dc:9d:b8:6a:8e:56:fa:3f:c6:ea:
         ac:ea:c3:f4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKXKBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
ZDg1Mzc4NTI2NjIxZmJkNDk1NmVmYTEwNDc4ZjkxMmYwODA3ZGIwHhcNMjQwMTIx
MTIzNTM2WhcNMjYwMTIxMTIzNTM2WjAzMTEwLwYDVQQDEyg1MjA1MzA4ZjJjMGUz
NjA1NWU1N2Y5M2Y1OGFlNDY5ZjNlZDkwODYxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhziX7fYMl/dqvAyJeu2RDpE9CCULO1pOmX1qfM+3DIHrzaii
T3y0bIqJWSprNhS7TMRYvjYuMJamuU7G1lHMZk7GnY45KLXL4DccqbGXfERjNF+/
nzAYSgf4EMaQEmQqUQCHovVsMTLEr9bIameAlwIqWoDUqg2J77LYyjG99wpsRlhV
7HXv3apPxaXWkrPsWj2C+uWZrd1EJphK26YRhhRTbSAxvfu10A1zOx0wv9WvjOlS
2Mv0MM4570TIVM8GpRMMvdyTSZ50dYRUW6UQLBSiFlSf/1drQSVYmXyV6V9NDmfg
VB3vuHScOPI4K6SJ75cYwqVBT6wJAhDNzcWKXQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEx4dmYuaTBL5fK5YZd7CEjia/mLMB8GA1UdIwQYMBaAFBjyWuz3sMhn/mxf
oWHl66ymOasXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTVkODUz
Nzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdkYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzUyMDUzMDhmMmMwZTM2MDU1ZTU3ZjkzZjU4YWU0NjlmM2VkOTA4NjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvZTVkODUzNzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdk
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dRzANBgkqhkiG9w0BAQsFAAOCAQEAGGbZgIZ8+O5V7ajz
+z2hlZHWeVqiOEUF2kdgDiqjVBbR7xP0lTbMlh9fN7g0v8z8/AJ1Ywi2DZ6vgyaW
giw4YpKtvExVPT6Dm+FDxxJGRa5ZV7cpdm1Q2qdmLS3ASU1DG6CcmT2inPOO7mvM
Fybd5T6DkMVToHJjlMhaDuKgmThIPlUFsJRtelRzd8lgK4sBQFS2SuszNycLFCyh
Vze7g2cViKPUIO1EESl4QQq2+Gtk3A2QsE7yYywDPVeRbYywOpaGSRGcIaisO+H6
PrIGQs0wbLklaggvbXLukH4l9EoL4GgC7SnX6DKz0unqZVrGSq3cnbhqjlb6P8bq
rOrD9A==
-----END CERTIFICATE-----
Generated at Thu Feb 1 16:26:05 2024 by rpki-client on console-ams.rpki-client.org