Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/dee40d3ef4c2d22f95a5a87df0185d831e782260.roa
File:                     dee40d3ef4c2d22f95a5a87df0185d831e782260.roa (raw, json)
Hash identifier:          KflE9B2dIBVgaAvnsl758DPYtJuIgoLp1091vIaHrpc=
Subject key identifier:   98:A8:A5:8B:A2:C2:AB:56:94:07:97:03:7F:A6:F8:58:3E:33:F7:36
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       2499F8
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/dee40d3ef4c2d22f95a5a87df0185d831e782260.roa
Signing time:             Fri 01 Sep 2023 19:31:30 +0000
ROA not before:           Thu 31 Aug 2023 19:30:43 +0000
ROA not after:            Fri 01 Sep 2028 19:30:43 +0000
asID:                     200113
IP address blocks:        190.93.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 12:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2398712 (0x2499f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Aug 31 19:30:43 2023 GMT
            Not After : Sep  1 19:30:43 2028 GMT
        Subject: CN=dee40d3ef4c2d22f95a5a87df0185d831e782260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0c:e4:6b:b8:06:54:d6:91:3d:5b:f0:fb:66:
                    5f:f7:ab:30:57:a1:fe:86:fc:f0:56:45:81:a0:49:
                    7e:9d:b5:dd:6b:dc:97:e4:7f:e2:65:71:ff:0b:29:
                    83:36:c9:3f:93:47:ba:3a:b7:d6:34:9d:d6:69:6b:
                    11:23:73:00:79:ff:de:82:d0:dc:0a:fe:5e:c2:90:
                    18:96:ba:d6:00:60:14:20:e8:03:c6:03:c1:8a:70:
                    76:d8:51:2d:cf:28:ce:95:83:40:dd:16:d4:b1:1a:
                    7b:b8:c5:51:34:11:6a:2a:d5:80:51:98:b7:00:84:
                    f6:bb:86:ba:88:93:4b:59:0f:dd:51:9d:50:1c:d4:
                    93:15:0a:fc:cc:d8:df:c1:77:4f:16:16:b4:70:3d:
                    bd:98:cf:e8:27:a3:8f:32:80:3d:52:f6:92:06:1a:
                    54:b2:63:2d:e9:cd:e1:e1:6b:ca:47:c0:74:2f:5c:
                    5c:32:0d:6e:be:db:2b:db:5e:b4:41:76:d8:0a:d7:
                    0e:3f:3b:59:e6:8f:74:70:00:bb:9e:9f:22:b4:e1:
                    4a:86:e2:5c:d4:5f:c8:db:a1:9d:c4:54:be:de:3b:
                    45:85:17:8c:6e:c8:e8:9e:da:40:32:21:00:f4:a7:
                    e5:7c:87:5d:8a:0e:4b:54:a1:ad:75:d6:9a:a5:36:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A8:A5:8B:A2:C2:AB:56:94:07:97:03:7F:A6:F8:58:3E:33:F7:36
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/dee40d3ef4c2d22f95a5a87df0185d831e782260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:e8:7d:88:64:c2:3e:87:17:e3:1e:ea:a1:0c:e3:07:81:d1:
         0c:e7:de:67:e9:db:11:15:fa:0b:d7:67:42:74:ba:67:62:3c:
         93:e4:b0:f7:24:48:e8:68:ec:2e:59:4e:07:70:25:3f:c0:f0:
         12:1c:28:24:8a:00:dd:30:0e:53:c5:0d:16:94:ca:07:05:c2:
         24:e0:d7:00:fe:c2:16:c1:a9:9b:c7:72:b7:b2:7e:41:5a:3a:
         5e:ec:11:5b:a4:59:75:30:82:be:6a:13:06:c8:1c:f2:e7:2b:
         ef:22:b8:0a:5f:af:a1:34:53:10:42:55:2f:9a:fc:a6:83:e1:
         0b:cc:05:11:57:e6:8a:14:9d:8e:ef:f0:78:dd:b8:ee:d0:2b:
         c6:7f:aa:0f:13:e5:32:cf:f2:5a:3d:b6:42:57:58:f5:11:42:
         ee:04:34:4f:ab:72:44:b7:69:98:c5:98:1d:83:e3:f4:6e:a4:
         be:b1:3c:13:de:2e:f2:86:ba:aa:52:e6:94:62:97:bd:92:b6:
         2a:bb:a6:61:b8:64:48:9b:a6:73:68:46:9a:e9:18:d3:10:f4:
         ec:95:24:b9:b1:07:b4:15:00:48:cd:0e:68:00:1d:50:f5:d9:
         ef:07:a1:0d:59:1a:f3:93:08:d9:7f:e8:df:1a:5a:76:23:4e:
         9d:aa:34:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 15:20:13 2024 by rpki-client on console-ams.rpki-client.org