Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/ad6d3749f2a96476438efc82eabb29a612d4e3af.roa
File:                     ad6d3749f2a96476438efc82eabb29a612d4e3af.roa (raw, json)
Hash identifier:          olALCLSkrAF23+RfGa9oSGKj/DXs0QxVd8qozJFxK/g=
Subject key identifier:   DC:17:9A:F2:5B:5C:2D:79:A1:AB:FA:2E:97:E7:F9:D5:75:50:4A:DE
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       22B607
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/ad6d3749f2a96476438efc82eabb29a612d4e3af.roa
Signing time:             Fri 04 Aug 2023 16:15:36 +0000
ROA not before:           Thu 03 Aug 2023 16:15:36 +0000
ROA not after:            Mon 04 Aug 2025 16:15:36 +0000
asID:                     834
IP address blocks:        190.93.68.0/24 maxlen: 24
                          190.93.69.0/24 maxlen: 24
                          190.93.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2274823 (0x22b607)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  3 16:15:36 2023 GMT
            Not After : Aug  4 16:15:36 2025 GMT
        Subject: CN=ad6d3749f2a96476438efc82eabb29a612d4e3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e5:10:bb:a5:33:c2:75:7a:a9:b4:db:0a:8b:
                    24:52:08:2d:4b:ef:4a:d1:bc:a6:b2:62:19:a4:26:
                    a7:86:30:8d:ac:ce:93:f9:dd:c5:da:91:b1:a4:15:
                    56:0d:cc:ac:22:61:70:1e:23:04:e9:6d:5d:27:10:
                    ed:67:ae:58:46:c8:e8:6b:ac:82:0a:22:b7:25:ef:
                    d9:8a:a1:cd:e6:71:5b:c6:d3:ac:63:df:d7:01:8f:
                    a2:e3:0c:79:e9:f1:49:23:2d:54:14:a8:d8:0f:21:
                    03:70:7f:b8:9f:61:7c:b2:25:2d:50:5a:1a:00:ab:
                    0f:5d:a8:aa:2c:33:72:18:80:79:f9:2c:5c:73:5d:
                    07:e2:04:4f:47:9a:bb:ce:f3:5e:5f:88:49:80:e6:
                    34:58:c1:17:2f:84:12:37:a5:4f:db:8e:23:48:cf:
                    3f:9f:a1:d4:10:f6:11:52:30:47:49:8f:f1:c9:2e:
                    9f:5b:95:46:d7:3e:95:fe:2f:d5:79:d8:b6:4c:ec:
                    95:e8:cb:0b:9e:12:92:0d:04:f4:f3:ef:d0:2f:c0:
                    7e:66:e8:42:b3:59:98:1a:b0:47:ac:45:66:54:b9:
                    14:1a:5d:c9:20:af:08:b5:ab:56:f6:37:4d:36:69:
                    82:4f:56:ba:4c:2b:7a:b3:c0:fb:d1:c5:95:3f:bb:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:17:9A:F2:5B:5C:2D:79:A1:AB:FA:2E:97:E7:F9:D5:75:50:4A:DE
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/ad6d3749f2a96476438efc82eabb29a612d4e3af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.68.0/23
                  190.93.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:9e:f4:23:0b:ce:1c:91:48:42:fc:51:66:37:c0:6e:80:f0:
         c1:2f:1b:99:4c:55:08:d2:81:62:a7:95:71:93:fb:7b:7f:36:
         93:40:2d:76:c3:54:43:ea:70:04:ef:ae:ec:e4:c4:9b:84:b8:
         48:05:a0:37:53:e5:3d:42:df:01:ca:fd:c2:44:8e:3f:85:28:
         82:08:ad:2c:60:0d:9c:7b:1b:0e:80:f0:52:9b:e2:15:29:92:
         b8:02:f2:0e:8a:cb:6a:17:94:44:44:11:e4:da:13:2a:47:fc:
         5c:5a:ae:66:c1:0d:b5:c8:47:83:de:a0:6e:4d:50:81:b4:05:
         74:8c:6a:4e:49:45:75:ea:4c:60:30:93:da:79:68:98:5b:fd:
         fa:31:19:ab:ee:cd:fc:f7:89:07:56:82:cd:ef:3e:7a:d2:4d:
         ba:67:2d:80:07:f6:55:33:a0:d7:08:ed:48:9c:51:35:64:1a:
         ae:9b:17:2a:28:dd:e8:30:d0:2a:64:0b:db:50:1c:d0:76:96:
         c0:13:69:5b:28:81:1b:89:e8:31:c7:6d:c4:78:46:74:a8:30:
         9d:78:df:2b:ff:38:75:cd:b0:25:ef:2a:da:03:40:92:f8:03:
         04:c1:ea:b2:49:ed:dc:5c:eb:1a:c3:a9:1d:93:82:50:11:f0:
         14:3a:3c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 15:54:03 2023 by rpki-client on console-fra.rpki-client.org