Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/830c456428c59925c62404cc0e72ea67580f6e1b.roa
File:                     830c456428c59925c62404cc0e72ea67580f6e1b.roa (raw, json)
Hash identifier:          9b+Nfn2eXy19obEJk6mzwB0L/DpdW5JTBcLe8YgZ/to=
Subject key identifier:   10:6F:7C:93:95:AE:88:E6:75:F0:E3:13:E7:23:10:E6:56:47:E5:2B
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       24A19E
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/830c456428c59925c62404cc0e72ea67580f6e1b.roa
Signing time:             Fri 01 Sep 2023 19:31:34 +0000
ROA not before:           Thu 31 Aug 2023 19:30:43 +0000
ROA not after:            Fri 01 Sep 2028 19:30:43 +0000
asID:                     834
IP address blocks:        190.93.72.0/24 maxlen: 24
                          190.93.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2400670 (0x24a19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Aug 31 19:30:43 2023 GMT
            Not After : Sep  1 19:30:43 2028 GMT
        Subject: CN=830c456428c59925c62404cc0e72ea67580f6e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:df:c4:06:4a:1d:77:8a:39:06:46:c1:d6:f3:
                    9f:99:d3:67:8e:ef:08:7b:4b:d8:58:35:33:76:83:
                    4f:cc:30:3c:5b:0b:ed:0a:13:9b:f9:13:a0:2d:4a:
                    32:a0:89:0f:cb:bf:28:4c:10:9e:bd:43:ad:06:0c:
                    43:24:f4:51:3c:3e:e2:c4:2e:dd:46:19:ad:f2:a7:
                    ac:77:4e:e0:d0:66:59:64:22:7a:af:43:67:46:cc:
                    53:e7:27:eb:50:49:e9:51:2b:54:97:42:79:f6:c3:
                    6e:80:df:be:dc:e9:75:c2:9f:ba:36:b6:81:dd:18:
                    d2:20:94:e7:3b:f6:6b:b2:15:06:ac:63:13:3c:48:
                    52:c9:ca:3d:83:d2:c7:38:83:86:36:e3:8d:49:42:
                    41:ee:db:26:2d:f1:99:48:00:37:48:3d:d4:70:5c:
                    64:ed:07:5b:63:c5:32:34:e1:ef:9c:17:5f:2f:2f:
                    16:9b:f1:47:2a:2e:f6:60:80:c0:6b:a5:42:bf:a7:
                    9c:ce:8a:ae:b3:b3:ad:b4:0c:64:8f:32:47:82:66:
                    1c:9d:8d:bb:d0:9a:60:1a:29:38:03:e0:e8:91:31:
                    73:ea:fa:21:ff:b5:b0:f2:0e:b5:35:da:25:27:64:
                    57:22:1a:07:b6:fb:d3:cc:81:74:47:f4:a6:25:be:
                    75:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6F:7C:93:95:AE:88:E6:75:F0:E3:13:E7:23:10:E6:56:47:E5:2B
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/830c456428c59925c62404cc0e72ea67580f6e1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.72.0/24
                  190.93.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:a6:ca:34:9a:34:98:af:ed:ed:3b:15:d1:dc:21:86:45:c5:
         90:13:a1:b5:42:dd:07:43:af:2f:96:51:82:83:d9:6f:75:1f:
         97:e0:5e:79:28:6e:f2:2e:21:a3:a1:e0:09:4f:ab:45:ca:20:
         df:7e:28:c1:87:9d:4f:ec:4d:e1:bc:a8:e1:4d:76:d9:d9:59:
         f2:b6:28:44:54:93:c2:70:32:54:94:96:5e:ea:af:6e:d6:59:
         0c:50:4a:ff:2f:ac:6e:01:64:2d:62:99:81:18:1f:be:2b:85:
         c2:c5:04:f3:a5:6c:75:4d:aa:c9:5f:79:f2:10:46:8d:1e:3c:
         bd:1c:9b:21:4c:e3:4d:5c:1e:f7:82:57:90:1b:22:e0:c1:40:
         1b:e0:a2:f4:d3:97:4f:ee:ff:fa:5a:65:16:4a:a1:48:43:15:
         8b:28:81:69:27:7d:09:bf:a1:a3:0f:36:db:62:cf:59:51:17:
         e7:da:a0:de:fa:f8:4d:50:6d:b2:a4:ad:77:83:82:09:77:07:
         dc:31:85:b7:69:0c:49:93:67:31:91:90:65:b3:3b:41:65:59:
         fc:87:0e:b3:5c:ba:f6:01:57:2d:39:94:04:33:6d:4a:73:65:
         0b:aa:ce:36:9d:7b:7c:8e:f7:df:89:2e:f9:e0:20:26:e8:32:
         ca:b6:f3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 17:54:14 2023 by rpki-client on console-fra.rpki-client.org