Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/f2fd92807a509e76e4fb0ad4c300ac257d165523.roa
File:                     f2fd92807a509e76e4fb0ad4c300ac257d165523.roa (raw, json)
Hash identifier:          Co6OkjqNAlibIDKkAIsXkZwxZ7g/nlTXLA9wa7nZPaA=
Subject key identifier:   E2:77:5F:B5:DC:E3:B7:13:A9:B5:81:DC:D6:58:9D:25:CC:C3:EA:8B
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       260D6A
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/f2fd92807a509e76e4fb0ad4c300ac257d165523.roa
Signing time:             Thu 05 Oct 2023 13:43:28 +0000
ROA not before:           Wed 04 Oct 2023 13:43:28 +0000
ROA not after:            Sun 05 Oct 2025 13:43:28 +0000
asID:                     197842
IP address blocks:        190.93.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2493802 (0x260d6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Oct  4 13:43:28 2023 GMT
            Not After : Oct  5 13:43:28 2025 GMT
        Subject: CN=f2fd92807a509e76e4fb0ad4c300ac257d165523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:bf:37:c2:39:4f:cb:cb:4d:9d:11:90:7c:
                    df:8d:17:e9:4a:29:2d:f7:e5:29:ec:fd:93:a1:69:
                    c9:4d:a9:e0:b1:bb:3e:b7:75:e6:f8:ea:a0:a1:9e:
                    51:8b:b6:ed:22:f7:bd:d7:9b:e5:04:2d:7a:37:98:
                    98:ae:48:40:58:00:8b:5c:b3:a1:0d:37:03:74:ab:
                    7e:2b:29:1d:ae:2d:13:c1:2f:68:ad:ce:a7:aa:44:
                    5f:84:04:1d:33:ff:6f:71:fd:38:80:fd:ff:a7:b7:
                    0f:c3:91:d1:39:82:f9:2a:61:c2:bf:65:25:8b:c9:
                    95:2b:a6:7d:a0:5b:da:86:fe:c7:df:e3:ad:d1:54:
                    37:61:97:7e:62:43:ec:ed:b8:f1:b7:cc:70:da:6e:
                    41:ec:c9:a3:1b:e5:8a:7d:91:0d:84:9d:29:68:c4:
                    65:78:78:ad:26:56:09:e6:b4:dd:65:9e:08:eb:60:
                    5d:95:40:d5:d9:2e:90:c2:bf:32:62:ae:6e:10:ae:
                    81:5d:f8:bf:2d:68:f3:79:0c:48:b3:a4:f6:d6:fb:
                    f8:a7:9c:16:70:91:6a:32:26:7d:9a:64:46:0f:43:
                    f3:8d:30:6a:29:10:0f:63:c2:de:e6:2d:70:52:90:
                    6a:68:d9:14:77:02:4f:f7:6c:18:d4:64:02:82:fd:
                    d7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:77:5F:B5:DC:E3:B7:13:A9:B5:81:DC:D6:58:9D:25:CC:C3:EA:8B
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/f2fd92807a509e76e4fb0ad4c300ac257d165523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:75:94:29:ff:47:57:7a:35:cf:c6:98:fe:ce:18:a1:05:45:
         46:d5:1e:c5:3c:37:ce:1e:3c:47:9a:b0:79:f6:d1:ec:f6:eb:
         3a:38:39:02:ca:3a:16:6f:13:43:39:23:7f:46:ed:fa:b3:84:
         0a:cf:f4:85:dc:ea:08:e5:d4:57:80:18:09:94:c2:74:5f:c2:
         f8:12:51:ad:9a:25:ab:48:08:8f:3a:0b:73:ca:12:c2:d1:da:
         b5:7d:b0:99:66:db:aa:aa:5f:cd:5c:56:c6:2d:63:f8:a6:9d:
         1b:21:ec:4e:82:95:a3:22:1e:d0:49:f6:13:64:a9:c7:bb:13:
         36:29:ee:93:2e:bf:e8:2b:0d:11:9a:fb:d2:a1:a5:12:66:6a:
         c9:e5:a9:71:55:cd:af:da:9d:50:23:a9:4b:3c:e4:29:50:d1:
         38:91:81:44:88:37:8e:fd:f4:50:7f:19:01:66:d9:1b:53:e1:
         e3:60:8e:7f:93:3f:20:ba:08:8e:e4:19:28:81:11:21:ea:ad:
         2c:0d:28:89:d2:66:13:df:d0:61:fb:a7:d5:99:ab:16:f4:3b:
         ed:95:b2:d2:32:cb:ba:63:94:a8:9c:a8:d8:9e:33:82:3d:4a:
         63:db:c0:b5:67:d3:d0:79:b7:c5:5f:65:a9:8e:de:3c:11:60:
         9c:f7:cc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 7 20:31:02 2023 by rpki-client on console-ams.rpki-client.org