Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d574266b9efa38a3fd8376744c0f5012b8b7a562.roa
File:                     d574266b9efa38a3fd8376744c0f5012b8b7a562.roa (raw, json)
Hash identifier:          iPfJZLSz3V5Lit0bdLhUDTNgYAkyf1owqYu3JtlJpSY=
Subject key identifier:   16:90:A2:BD:77:C7:6C:18:E2:02:CE:0E:19:0B:C2:79:94:E6:F2:86
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2C2D9B
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d574266b9efa38a3fd8376744c0f5012b8b7a562.roa
Signing time:             Mon 08 Apr 2024 11:56:10 +0000
ROA not before:           Mon 08 Apr 2024 11:56:10 +0000
ROA not after:            Wed 08 Apr 2026 11:56:10 +0000
asID:                     834
IP address blocks:        190.93.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 09 Apr 2024 14:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2895259 (0x2c2d9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Apr  8 11:56:10 2024 GMT
            Not After : Apr  8 11:56:10 2026 GMT
        Subject: CN=d574266b9efa38a3fd8376744c0f5012b8b7a562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cb:13:e0:13:f7:cd:59:c6:e6:4a:3b:fd:19:
                    76:48:9d:14:19:8c:9d:0b:cb:b3:52:57:13:80:d6:
                    27:ee:3c:d4:f6:68:3a:c5:e3:3e:46:97:98:be:06:
                    d9:d2:92:8b:eb:28:1d:49:aa:e4:8b:ab:f4:2f:1e:
                    a1:3e:cf:6c:e8:65:be:9a:ab:cd:d6:55:65:1c:fd:
                    60:46:3e:4b:3a:5b:62:4f:3e:76:33:f7:4f:ed:7e:
                    3a:8e:14:8b:40:02:a8:08:6e:ac:cc:f4:22:e1:02:
                    c1:28:57:4e:dc:08:20:63:07:e3:ec:68:c7:81:dc:
                    c3:e2:ec:da:2a:e3:2c:34:2e:99:5f:ad:7d:2e:26:
                    eb:aa:52:a3:96:5c:bf:c6:3e:e8:8f:9f:72:b3:be:
                    f0:2f:50:a0:2f:92:86:27:50:8f:12:20:e7:59:75:
                    28:ef:48:35:96:43:e2:f3:14:6c:58:f6:28:c3:6d:
                    37:c8:52:96:d7:ff:dc:aa:af:09:03:91:71:af:23:
                    fa:da:15:30:5a:3f:eb:6a:45:bc:4e:d2:e9:74:39:
                    08:0a:e0:6b:ac:f4:31:e2:8e:46:fa:1a:33:32:4a:
                    3e:10:53:74:93:88:ab:9f:33:d0:be:89:a6:16:54:
                    a1:24:88:7f:e7:c4:e2:a8:e8:e1:9b:4b:39:d3:1c:
                    40:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:90:A2:BD:77:C7:6C:18:E2:02:CE:0E:19:0B:C2:79:94:E6:F2:86
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d574266b9efa38a3fd8376744c0f5012b8b7a562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:4c:43:2c:3e:1d:de:73:32:45:86:79:78:fd:09:75:30:53:
         8e:93:0e:3a:dd:74:9f:e3:b6:c3:9d:dc:8f:0b:2c:76:66:aa:
         98:bc:8d:1b:81:e1:67:d0:1d:f1:3c:37:6d:a9:6e:cd:60:71:
         4a:a9:e7:d5:de:d2:7a:7e:1d:71:6d:ea:90:bf:3d:e1:6c:56:
         0b:e2:d3:8e:80:89:39:6d:e4:2c:b0:87:d8:ff:54:ed:67:87:
         fc:8c:62:e7:83:cc:f4:c2:55:25:d4:23:d3:e5:4f:52:01:60:
         b1:b4:47:e7:5a:ca:b2:21:74:ee:50:95:5c:5d:49:74:de:1c:
         3a:d6:4b:99:e0:40:23:ba:bc:8f:85:aa:5e:81:bb:59:dc:1e:
         77:36:05:5f:39:55:df:dd:a5:5d:f8:8f:fe:17:0e:0a:6b:9f:
         c3:72:0e:79:b4:28:43:6b:e2:a3:6c:aa:35:04:9c:5f:5b:f4:
         38:47:0e:af:9a:7d:1c:5a:4b:28:95:00:7d:54:d6:3c:99:13:
         1d:66:38:af:81:8d:5d:2a:2a:4b:5c:ba:37:ee:57:fb:d1:00:
         9b:5c:5e:dc:50:69:2b:b6:01:55:e2:2e:4c:23:38:1f:54:88:
         0c:76:55:b2:3c:2e:ec:a9:d7:d4:28:f2:5b:cf:f8:8c:4a:1c:
         ec:20:7f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 18:16:41 2024 by rpki-client on console-ams.rpki-client.org