Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/dac3dcd51e3c88b5771bb2d57da63f2b63f701e4.roa
File:                     dac3dcd51e3c88b5771bb2d57da63f2b63f701e4.roa (raw, json)
Hash identifier:          LGo1ZAHRWE52FnnQn+qMUs6Wovk21RnRLNxYCxBPVFw=
Subject key identifier:   6B:F0:8E:4C:04:D4:58:1D:AB:5D:6E:A3:9F:35:28:63:3E:85:43:01
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       25728B
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/dac3dcd51e3c88b5771bb2d57da63f2b63f701e4.roa
Signing time:             Sat 16 Sep 2023 13:13:44 +0000
ROA not before:           Fri 15 Sep 2023 13:13:44 +0000
ROA not after:            Tue 16 Sep 2025 13:13:44 +0000
asID:                     7018
IP address blocks:        190.93.77.0/24 maxlen: 24
                          190.93.76.0/24 maxlen: 24
                          190.93.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 14 Jan 2024 13:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2454155 (0x25728b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Sep 15 13:13:44 2023 GMT
            Not After : Sep 16 13:13:44 2025 GMT
        Subject: CN=dac3dcd51e3c88b5771bb2d57da63f2b63f701e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:d0:64:19:47:78:99:c0:87:e6:dc:2d:40:
                    f0:ba:de:33:fe:4b:6d:e5:ab:17:1c:71:56:16:de:
                    a7:94:a2:3a:65:dd:fd:24:67:54:69:30:92:35:c1:
                    65:8d:e0:38:12:8b:64:0b:ec:78:4b:8e:1b:85:70:
                    a8:34:d4:9b:96:a0:6a:db:df:62:87:eb:3f:dd:83:
                    e0:b8:f5:64:0a:97:64:88:dc:ac:06:f3:5b:6d:18:
                    ff:17:fe:e6:07:6c:c8:db:e7:6c:c5:dc:3a:3f:07:
                    6b:1f:37:d6:12:25:f7:5d:3c:d5:02:04:a0:b1:56:
                    7c:bf:bd:5a:61:72:05:2f:70:eb:45:6a:4a:39:60:
                    28:3f:5a:81:ba:ae:72:00:11:f5:2c:65:9d:cb:56:
                    5d:76:07:2d:96:d8:a1:ef:34:4a:84:ff:f8:1b:f0:
                    2d:3b:f3:d9:28:b5:05:5f:90:12:29:7e:3e:05:2e:
                    9c:00:b9:e1:66:19:67:f4:fd:35:54:54:1f:d0:99:
                    5d:7d:dc:3c:c2:a8:ef:7a:90:ce:19:81:b4:cd:1b:
                    03:84:df:9d:04:9a:6d:26:d4:68:09:d5:db:b7:dc:
                    b4:2f:76:14:0f:d5:0a:db:e1:de:8f:cc:db:cd:f1:
                    9a:54:03:2b:4c:16:2f:47:58:7f:5d:a6:e0:bb:3c:
                    5e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F0:8E:4C:04:D4:58:1D:AB:5D:6E:A3:9F:35:28:63:3E:85:43:01
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/dac3dcd51e3c88b5771bb2d57da63f2b63f701e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.76.0/23
                  190.93.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:71:7b:15:7b:a7:5e:36:73:a2:4d:39:a8:f6:38:0d:48:52:
         a8:bc:02:9b:8f:ee:30:0f:f4:e1:b1:f0:fa:b3:ed:81:8e:ac:
         cd:a0:80:f8:2f:ab:03:aa:8f:36:d8:3e:c5:0a:80:8e:02:2b:
         c5:79:12:4f:4a:d9:dc:08:bd:d4:62:15:85:06:2a:9a:e3:12:
         f7:3b:5a:66:10:b5:a8:54:0d:fd:2c:b4:aa:c8:9a:4f:69:4a:
         4f:5b:01:d2:13:7e:d3:6f:86:e7:e8:9a:5b:7c:f4:c7:0d:0b:
         f9:e7:dc:ba:86:4a:69:d9:b4:87:0f:7a:f7:07:36:78:55:25:
         dc:ab:48:47:2b:06:42:fe:3a:05:0d:0a:08:15:ff:f3:5a:a5:
         d8:42:aa:fb:89:f7:f1:f9:31:04:11:4b:36:d3:93:b8:42:60:
         8a:4c:4f:9d:97:87:f3:bc:84:34:73:76:55:11:2e:5d:f8:c8:
         8a:53:29:04:2a:e6:c9:fb:2a:56:27:21:0b:18:64:11:0b:46:
         aa:fc:1e:b3:80:27:86:ad:4b:33:ee:d9:73:45:d7:bc:aa:77:
         5c:ee:2e:b3:bb:5f:6e:f1:5e:9e:2d:07:0b:e1:c7:25:48:9e:
         be:63:01:89:86:a8:80:a0:5a:09:30:b6:07:d3:f1:e7:9f:be:
         c5:67:5b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 14 16:39:05 2024 by rpki-client on console-ams.rpki-client.org