Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c8800a5a-c6dc-4e4c-a5b1-2075bb27ccf6/bc6c5533eeb4931442b51d16a960b39509c8601c.roa
File:                     bc6c5533eeb4931442b51d16a960b39509c8601c.roa (raw, json)
Hash identifier:          ziKwk8+y4yAbVwdnXrPuExXA7mAkmgFahvpJ/AewRpE=
Subject key identifier:   20:3E:82:6D:30:94:41:7D:16:D6:34:4B:43:A8:DA:7C:E3:E5:87:C7
Certificate issuer:       /CN=6c5554005c92cb61f0d4f1fea13c41cb42dcc3ba
Certificate serial:       26FB69
Authority key identifier: 2D:25:1A:17:C5:E6:DB:70:86:E8:5B:F4:F5:72:7C:12:ED:23:B7:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c5554005c92cb61f0d4f1fea13c41cb42dcc3ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c8800a5a-c6dc-4e4c-a5b1-2075bb27ccf6/bc6c5533eeb4931442b51d16a960b39509c8601c.roa
Signing time:             Mon 08 Apr 2024 20:57:33 +0000
ROA not before:           Mon 08 Apr 2024 20:57:33 +0000
ROA not after:            Wed 08 Apr 2026 20:57:33 +0000
asID:                     6471
IP address blocks:        190.196.128.192/29 maxlen: 29
                          190.215.57.192/26 maxlen: 26

Validation:               Failed, certificate revoked on Thu 11 Apr 2024 21:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2554729 (0x26fb69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c5554005c92cb61f0d4f1fea13c41cb42dcc3ba
        Validity
            Not Before: Apr  8 20:57:33 2024 GMT
            Not After : Apr  8 20:57:33 2026 GMT
        Subject: CN=bc6c5533eeb4931442b51d16a960b39509c8601c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:ec:d2:3e:1d:8d:57:57:e5:94:e2:73:a0:
                    b7:29:c2:2d:ed:75:9f:04:c1:31:c5:8c:b4:1b:78:
                    ec:e9:24:a5:a8:9c:84:04:c2:1b:55:0a:5c:ec:78:
                    61:18:1c:28:0b:2a:11:76:35:53:d4:c0:e4:b3:74:
                    9a:5a:b3:89:7a:fe:cc:93:a7:8d:16:cf:a1:ba:dc:
                    c9:e3:47:c3:fa:ec:6c:0c:36:04:e8:b4:37:b3:a3:
                    e9:34:0a:c4:b9:7d:44:99:51:aa:b4:74:dd:f8:2b:
                    b7:92:21:9b:ae:70:04:e7:cd:13:c8:1e:88:f9:93:
                    cb:3b:21:25:f8:ea:c4:d2:78:d9:22:36:e1:27:82:
                    ef:d3:3a:93:8e:90:f2:f4:8a:10:72:c3:9a:10:c2:
                    bf:a1:c5:d5:36:ce:6b:11:b0:56:70:7b:c2:d8:bb:
                    63:be:83:7c:ea:c9:87:b4:4b:a6:83:81:a5:c9:98:
                    59:32:75:36:76:24:d4:b1:24:d7:16:fb:c0:2b:0c:
                    60:24:ea:79:1d:cf:2b:40:bd:08:e3:6a:60:83:5b:
                    92:5d:41:47:b3:bb:9c:53:4c:e3:51:59:2e:4e:13:
                    36:4e:67:47:82:cb:fe:17:40:50:cc:05:9d:7a:a3:
                    27:aa:57:5b:c2:74:44:17:36:96:63:d1:8f:0c:9e:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3E:82:6D:30:94:41:7D:16:D6:34:4B:43:A8:DA:7C:E3:E5:87:C7
            X509v3 Authority Key Identifier:
                keyid:2D:25:1A:17:C5:E6:DB:70:86:E8:5B:F4:F5:72:7C:12:ED:23:B7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c5554005c92cb61f0d4f1fea13c41cb42dcc3ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c8800a5a-c6dc-4e4c-a5b1-2075bb27ccf6/bc6c5533eeb4931442b51d16a960b39509c8601c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c8800a5a-c6dc-4e4c-a5b1-2075bb27ccf6/6c5554005c92cb61f0d4f1fea13c41cb42dcc3ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.128.192/29
                  190.215.57.192/26

    Signature Algorithm: sha256WithRSAEncryption
         91:d9:ce:e2:df:5b:36:a4:df:68:a3:4e:cd:4c:dc:ff:5c:c3:
         d9:59:34:d2:7b:5c:e7:29:48:c7:46:69:1b:a4:f4:01:64:1d:
         20:b7:b1:ea:0d:34:d9:0c:94:d3:87:f2:43:23:66:01:2c:8d:
         50:71:b8:68:d3:2c:33:0c:92:b8:ba:b8:48:96:49:11:55:d0:
         6f:b1:69:bd:6c:e6:f6:c0:62:f2:c0:38:e5:bd:60:d8:2a:f3:
         ac:61:01:bb:25:ff:9b:34:b7:33:80:4c:bd:73:4b:32:d5:51:
         e5:ba:ea:70:64:7e:e6:37:a9:13:e8:3a:bd:00:5d:53:0a:db:
         8e:35:97:be:95:0a:d1:b5:1f:12:53:51:ce:e1:00:c0:75:44:
         5d:1c:60:b0:e6:1f:3f:8a:6c:92:e2:f0:f1:0d:df:6f:66:18:
         9c:6e:53:11:37:e7:96:25:8f:22:31:f8:1a:80:dd:2a:aa:89:
         7b:9f:07:65:2d:00:4b:e1:4e:47:ac:5e:cc:cd:79:ea:13:7e:
         ef:10:29:9a:51:fe:7f:ae:a4:72:32:6e:bc:d2:0c:7d:04:59:
         12:d0:8a:a5:24:2e:b5:c5:af:ea:de:bc:f5:32:64:28:d8:2a:
         70:e3:c6:12:63:7a:d1:b3:72:42:9c:db:26:9d:61:b0:91:25:
         47:f0:6c:36
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDJvtpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
NTU1NDAwNWM5MmNiNjFmMGQ0ZjFmZWExM2M0MWNiNDJkY2MzYmEwHhcNMjQwNDA4
MjA1NzMzWhcNMjYwNDA4MjA1NzMzWjAzMTEwLwYDVQQDEyhiYzZjNTUzM2VlYjQ5
MzE0NDJiNTFkMTZhOTYwYjM5NTA5Yzg2MDFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApWvs0j4djVdX5ZTic6C3KcIt7XWfBMExxYy0G3js6SSlqJyE
BMIbVQpc7HhhGBwoCyoRdjVT1MDks3SaWrOJev7Mk6eNFs+hutzJ40fD+uxsDDYE
6LQ3s6PpNArEuX1EmVGqtHTd+Cu3kiGbrnAE580TyB6I+ZPLOyEl+OrE0njZIjbh
J4Lv0zqTjpDy9IoQcsOaEMK/ocXVNs5rEbBWcHvC2LtjvoN86smHtEumg4GlyZhZ
MnU2diTUsSTXFvvAKwxgJOp5Hc8rQL0I42pgg1uSXUFHs7ucU0zjUVkuThM2TmdH
gsv+F0BQzAWdeqMnqldbwnREFzaWY9GPDJ6+RwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFCA+gm0wlEF9FtY0S0Oo2nzj5YfHMB8GA1UdIwQYMBaAFC0lGhfF5ttwhuhb
9PVyfBLtI7dfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmM1NTU0
MDA1YzkyY2I2MWYwZDRmMWZlYTEzYzQxY2I0MmRjYzNiYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzg4MDBhNWEtYzZkYy00ZTRjLWE1YjEtMjA3NWJi
MjdjY2Y2L2JjNmM1NTMzZWViNDkzMTQ0MmI1MWQxNmE5NjBiMzk1MDljODYwMWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jODgwMGE1YS1jNmRjLTRlNGMtYTViMS0yMDc1
YmIyN2NjZjYvNmM1NTU0MDA1YzkyY2I2MWYwZDRmMWZlYTEzYzQxY2I0MmRjYzNi
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDgMFA77EgMADBQa+1znAMA0GCSqGSIb3DQEBCwUAA4IBAQCR2c7i
31s2pN9oo07NTNz/XMPZWTTSe1znKUjHRmkbpPQBZB0gt7HqDTTZDJTTh/JDI2YB
LI1Qcbho0ywzDJK4urhIlkkRVdBvsWm9bOb2wGLywDjlvWDYKvOsYQG7Jf+bNLcz
gEy9c0sy1VHluupwZH7mN6kT6Dq9AF1TCtuONZe+lQrRtR8SU1HO4QDAdURdHGCw
5h8/imyS4vDxDd9vZhicblMRN+eWJY8iMfgagN0qqol7nwdlLQBL4U5HrF7MzXnq
E37vECmaUf5/rqRyMm680gx9BFkS0IqlJC61xa/q3rz1MmQo2Cpw48YSY3rRs3JC
nNsmnWGwkSVH8Gw2
-----END CERTIFICATE-----
Generated at Fri Apr 12 01:07:39 2024 by rpki-client on console-ams.rpki-client.org