Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b82a0e26398f1ea1fa7c4742b14bfa73c7cc91be.roa
File:                     b82a0e26398f1ea1fa7c4742b14bfa73c7cc91be.roa (raw, json)
Hash identifier:          LKRzszQKcDJAyEaf3G1FbHZHSRYsHAeQvWcHKFvYJsc=
Subject key identifier:   E2:BF:1D:9D:E8:A1:B6:48:69:34:49:BA:58:F2:EE:3A:40:1D:74:AD
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       24BB5F
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b82a0e26398f1ea1fa7c4742b14bfa73c7cc91be.roa
Signing time:             Fri 01 Sep 2023 19:31:51 +0000
ROA not before:           Thu 31 Aug 2023 19:30:43 +0000
ROA not after:            Fri 01 Sep 2028 19:30:43 +0000
asID:                     147186
IP address blocks:        190.93.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407263 (0x24bb5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Aug 31 19:30:43 2023 GMT
            Not After : Sep  1 19:30:43 2028 GMT
        Subject: CN=b82a0e26398f1ea1fa7c4742b14bfa73c7cc91be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:17:15:ee:82:c3:08:0e:da:4b:0b:e0:25:a0:
                    3e:f6:17:22:b1:4d:62:50:1c:bf:0d:64:51:76:de:
                    78:15:ca:bb:60:1d:d2:72:47:27:89:14:1d:a3:df:
                    a9:d8:61:0b:fb:95:58:3a:64:a1:54:d2:87:4d:20:
                    6d:ef:b9:67:91:7d:c0:a9:3c:d7:ea:5c:f4:ac:3d:
                    1f:c8:14:f1:d6:6c:d5:3a:98:1b:c3:df:ba:5c:23:
                    29:00:f3:e1:0d:d1:0f:17:e2:c4:60:fc:09:3e:6a:
                    07:4e:f0:43:c3:1c:b0:86:2a:c6:27:07:9b:9a:f1:
                    20:7e:83:17:d5:45:e5:db:3b:50:bd:9e:cb:d5:b8:
                    8c:41:4c:66:08:8e:ef:34:da:30:e2:9f:13:c2:e7:
                    f9:43:2b:ac:fb:ce:20:96:f3:d9:3c:42:95:6c:83:
                    97:b2:34:ae:aa:34:0a:ca:07:28:ec:2f:db:c2:d9:
                    ab:64:1c:44:6d:07:6b:19:9f:65:fb:17:41:3d:c3:
                    62:2f:e3:cc:59:67:b5:2d:6c:79:ec:bd:d7:bb:77:
                    9f:4c:db:34:6c:02:cb:f4:58:12:e2:0b:fe:13:4f:
                    00:16:b3:8f:a4:ab:33:1d:c7:a7:7b:a3:26:ae:a7:
                    16:92:81:b8:17:65:1d:27:9e:08:20:11:fa:f8:10:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BF:1D:9D:E8:A1:B6:48:69:34:49:BA:58:F2:EE:3A:40:1D:74:AD
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b82a0e26398f1ea1fa7c4742b14bfa73c7cc91be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:6d:c5:e9:bc:ed:c2:51:78:99:1a:2c:c3:55:8c:7d:19:74:
         ce:e2:d7:76:68:59:10:0c:44:86:61:06:5d:0a:73:3a:88:f4:
         2c:7e:08:90:fb:99:bf:66:60:9e:e4:48:9f:5d:8e:9d:c1:ee:
         2d:77:a0:99:eb:8f:74:57:d5:86:52:d7:11:72:60:1d:d5:15:
         9c:3d:30:1a:55:8d:8c:3e:52:10:36:10:1d:45:66:5d:77:a2:
         39:38:32:46:6d:42:1b:c6:27:c0:70:0c:97:74:2c:87:e7:54:
         cc:05:7b:d1:18:98:c4:77:4a:26:7a:6b:e0:51:6b:2a:e0:da:
         21:32:88:52:af:75:91:07:c8:c6:b6:6c:4d:e8:5d:70:b0:f5:
         7c:ac:a5:c3:18:6d:df:35:8a:3e:96:60:1e:aa:e4:96:f6:77:
         50:3f:49:b8:17:56:3a:fe:d6:43:e4:89:75:b5:c2:2c:ed:57:
         a1:b7:cc:47:f4:43:b5:c6:4a:1a:ba:30:13:00:6d:28:e6:e2:
         66:1f:8e:16:b4:a0:9a:c3:a6:09:2a:cf:8b:d0:74:92:38:a2:
         58:29:77:ec:8a:a8:05:0d:52:bd:b9:79:d9:50:5a:3c:f3:b7:
         0e:b7:98:3f:00:e1:1c:63:a1:c3:a8:83:d8:05:f6:1e:c7:de:
         80:e1:86:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 17:54:15 2023 by rpki-client on console-fra.rpki-client.org