Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b6bc4e2988a46b219192f4db3437e6747a4f833f.roa
File:                     b6bc4e2988a46b219192f4db3437e6747a4f833f.roa (raw, json)
Hash identifier:          X3j/W7NooQvst+n3n38u6dyVt/1HuwBNZK47FzN1rKk=
Subject key identifier:   5C:34:83:AA:57:15:63:04:61:C2:21:7A:5C:B5:F9:ED:CB:0E:47:FD
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       260344
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b6bc4e2988a46b219192f4db3437e6747a4f833f.roa
Signing time:             Thu 05 Oct 2023 13:41:19 +0000
ROA not before:           Wed 04 Oct 2023 13:41:19 +0000
ROA not after:            Sun 05 Oct 2025 13:41:19 +0000
asID:                     834
IP address blocks:        190.93.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2491204 (0x260344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Oct  4 13:41:19 2023 GMT
            Not After : Oct  5 13:41:19 2025 GMT
        Subject: CN=b6bc4e2988a46b219192f4db3437e6747a4f833f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:a4:28:43:6f:77:0d:b0:6a:3b:d6:8d:75:
                    12:ab:4b:72:56:b0:61:b0:b3:d1:89:ea:8a:e0:44:
                    92:9e:10:13:12:72:08:c9:01:87:2e:83:37:c1:bf:
                    b0:ca:bb:ac:fb:0d:e4:8c:c0:82:2f:4f:09:3f:16:
                    b5:80:9d:59:23:0e:2d:e2:16:89:ef:57:1e:24:10:
                    b3:8f:3d:ac:51:76:7e:0d:af:61:ce:6f:70:80:6e:
                    fc:d4:38:da:44:52:d6:5b:95:fb:87:20:89:0b:7c:
                    f7:cb:4e:7f:d6:f4:e9:60:75:c3:5a:10:c5:a3:e2:
                    1d:f0:d2:87:0b:59:c1:65:e6:6b:fa:f5:66:aa:1a:
                    f3:16:4a:45:39:32:66:ce:f8:9d:81:e9:3c:b8:b8:
                    1f:15:bc:e0:f8:5c:61:52:70:a9:12:4a:d9:14:cb:
                    17:6a:28:7f:ee:d8:fc:12:a3:fb:b4:4a:31:92:0b:
                    2e:c3:b5:22:b3:fb:e8:08:ea:24:f7:f7:89:37:8d:
                    38:a5:f5:35:4c:22:12:62:54:6c:29:3a:43:1b:1e:
                    2c:c3:b5:b9:92:cc:af:36:af:82:dd:43:dc:04:5c:
                    07:89:a1:9c:9e:c8:09:c9:43:db:c7:d2:5b:25:81:
                    9d:78:63:91:e5:c0:6e:45:74:bd:da:7e:60:5f:42:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:34:83:AA:57:15:63:04:61:C2:21:7A:5C:B5:F9:ED:CB:0E:47:FD
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b6bc4e2988a46b219192f4db3437e6747a4f833f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:48:7a:ef:58:e6:cb:6b:f3:68:bf:da:10:75:d4:40:b6:d2:
         68:24:58:dd:db:4f:6a:fb:68:16:14:b8:14:0b:f8:1b:35:f8:
         c2:e3:15:48:c4:83:ad:bf:4c:8f:05:53:1f:ae:bd:c2:30:61:
         d2:41:b2:85:37:09:12:f2:98:37:22:16:c3:a6:31:c0:11:c3:
         b6:6c:c4:c0:09:a2:16:bb:12:ec:a0:f8:68:9d:94:93:bd:da:
         ce:e8:04:fc:68:de:7d:63:d2:9d:ef:e0:ed:82:c9:2c:dc:8c:
         42:3a:4e:88:03:12:5e:20:60:3a:3e:d6:33:5d:68:2c:45:55:
         45:76:27:f0:d8:60:99:04:59:86:56:1c:c4:a4:fc:91:15:ac:
         29:f2:42:3e:66:c4:cd:18:69:03:b2:fd:f6:3c:7d:d8:a4:ac:
         14:0b:97:7e:e2:13:36:ea:59:59:9a:52:12:84:3f:04:63:73:
         9e:91:4c:62:37:80:e7:8e:dc:38:eb:59:13:05:52:c3:0d:6a:
         92:dc:55:68:12:cb:8e:9b:30:01:2e:ab:be:15:b6:e6:94:e0:
         9f:18:c6:74:bb:2b:73:6f:56:64:e8:27:e1:05:03:9a:9b:a3:
         d5:24:dd:fc:48:b7:6c:e7:53:de:f6:ff:d1:02:c9:3e:7c:eb:
         f7:41:9e:d3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJgNEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
ZDg1Mzc4NTI2NjIxZmJkNDk1NmVmYTEwNDc4ZjkxMmYwODA3ZGIwHhcNMjMxMDA0
MTM0MTE5WhcNMjUxMDA1MTM0MTE5WjAzMTEwLwYDVQQDEyhiNmJjNGUyOTg4YTQ2
YjIxOTE5MmY0ZGIzNDM3ZTY3NDdhNGY4MzNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvP+kKENvdw2wajvWjXUSq0tyVrBhsLPRieqK4ESSnhATEnII
yQGHLoM3wb+wyrus+w3kjMCCL08JPxa1gJ1ZIw4t4haJ71ceJBCzjz2sUXZ+Da9h
zm9wgG781DjaRFLWW5X7hyCJC3z3y05/1vTpYHXDWhDFo+Id8NKHC1nBZeZr+vVm
qhrzFkpFOTJmzvidgek8uLgfFbzg+FxhUnCpEkrZFMsXaih/7tj8EqP7tEoxkgsu
w7Uis/voCOok9/eJN404pfU1TCISYlRsKTpDGx4sw7W5ksyvNq+C3UPcBFwHiaGc
nsgJyUPbx9JbJYGdeGOR5cBuRXS92n5gX0JC6QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFw0g6pXFWMEYcIhely1+e3LDkf9MB8GA1UdIwQYMBaAFBjyWuz3sMhn/mxf
oWHl66ymOasXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTVkODUz
Nzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdkYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2L2I2YmM0ZTI5ODhhNDZiMjE5MTkyZjRkYjM0MzdlNjc0N2E0ZjgzM2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvZTVkODUzNzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdk
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dXzANBgkqhkiG9w0BAQsFAAOCAQEAV0h671jmy2vzaL/a
EHXUQLbSaCRY3dtPavtoFhS4FAv4GzX4wuMVSMSDrb9MjwVTH669wjBh0kGyhTcJ
EvKYNyIWw6YxwBHDtmzEwAmiFrsS7KD4aJ2Uk73azugE/GjefWPSne/g7YLJLNyM
QjpOiAMSXiBgOj7WM11oLEVVRXYn8NhgmQRZhlYcxKT8kRWsKfJCPmbEzRhpA7L9
9jx92KSsFAuXfuITNupZWZpSEoQ/BGNznpFMYjeA547cOOtZEwVSww1qktxVaBLL
jpswAS6rvhW25pTgnxjGdLsrc29WZOgn4QUDmpuj1STd/Ei3bOdT3vb/0QLJPnzr
90Ge0w==
-----END CERTIFICATE-----
Generated at Sun Oct 8 16:32:06 2023 by rpki-client on console-fra.rpki-client.org