Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/373a5073b78bb20aacbfb7f502d90c47485313b2.roa
File:                     373a5073b78bb20aacbfb7f502d90c47485313b2.roa (raw, json)
Hash identifier:          A7tzZlirWuQ2oxrN0HGzvW8FhvAi7wbidRfw+Q6z/ew=
Subject key identifier:   FF:89:D6:F7:3C:17:3F:A4:21:89:71:BA:4E:13:E2:73:76:96:6C:C1
Certificate issuer:       /CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
Certificate serial:       0D74F1
Authority key identifier: 40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/373a5073b78bb20aacbfb7f502d90c47485313b2.roa
Signing time:             Wed 24 Mar 2021 22:49:38 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     28114
IP address blocks:        186.183.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881905 (0xd74f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=373a5073b78bb20aacbfb7f502d90c47485313b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:65:7f:6d:ed:6e:63:bf:d7:d9:5e:fc:b9:2f:
                    de:2a:93:f5:b2:f4:e6:52:b6:fe:ab:40:7f:7c:bc:
                    63:a1:6b:9d:78:0a:b0:02:68:24:bf:b8:d6:13:32:
                    47:bc:8c:52:9c:81:ae:1b:88:67:d5:84:17:85:4e:
                    93:36:bb:61:65:03:df:d7:c4:8f:a0:fe:e0:eb:cd:
                    2a:d5:a9:38:a1:a7:76:d0:80:5e:2b:18:57:ac:c0:
                    27:0a:60:75:80:ab:8a:94:aa:b8:fc:bd:c1:1b:88:
                    53:07:35:d2:04:8f:58:1f:89:b7:89:97:a4:c7:fa:
                    42:76:ff:3a:9b:19:a5:58:e5:20:12:ce:45:92:10:
                    d5:fc:16:6e:a8:9c:9d:7b:93:84:0b:c9:e0:6d:e1:
                    f3:1e:de:92:e0:37:b5:02:68:c3:db:d4:e0:6a:af:
                    22:30:4a:13:26:dd:e1:6c:ae:36:a3:ce:58:a3:9c:
                    b3:a6:80:e8:f5:38:2d:b9:6d:ab:55:24:73:49:d4:
                    b3:f3:3e:15:c7:fa:50:fd:b2:71:29:b2:54:52:59:
                    03:54:b0:e0:87:3f:ea:14:0e:0e:28:ce:98:60:72:
                    38:25:04:d7:cf:fc:f6:51:54:d8:6f:8b:ce:fb:de:
                    11:a0:98:35:8e:ca:79:56:90:35:22:07:ae:5d:e0:
                    5b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:89:D6:F7:3C:17:3F:A4:21:89:71:BA:4E:13:E2:73:76:96:6C:C1
            X509v3 Authority Key Identifier:
                keyid:40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/373a5073b78bb20aacbfb7f502d90c47485313b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:42:df:98:fb:8d:a0:9c:a3:0c:36:b9:aa:00:17:64:95:c9:
         32:e4:0a:c1:d9:80:47:48:e4:ac:81:87:fa:fc:57:db:35:51:
         01:c9:0b:a2:49:15:16:33:b0:de:1a:96:41:38:4d:2a:43:ba:
         1e:40:0b:70:6d:c1:2c:66:00:23:98:71:7d:c7:be:4c:49:f4:
         9d:e6:e8:1c:c9:06:07:c7:4a:ec:8c:f8:35:fb:5a:a0:ed:25:
         26:e5:a3:fe:8d:4e:00:f2:cd:d6:54:c5:20:8c:41:50:3e:5b:
         ed:f3:f0:9f:d0:0f:8e:60:8c:9c:ca:cc:80:07:8e:63:7c:d7:
         c8:ce:f5:d4:ea:11:d9:65:92:8c:2b:0b:44:ed:ec:99:95:b9:
         16:f8:06:42:8f:f2:21:7d:0f:44:14:7e:89:70:58:bf:80:0a:
         7a:2b:a3:82:45:76:00:d6:3c:fe:ca:3f:cd:80:d3:65:45:eb:
         84:69:da:c7:36:5c:9b:e6:7e:f4:69:74:3e:e4:ec:cd:ac:9e:
         b2:6e:32:33:52:7a:fa:e5:c7:e0:ff:fe:cd:0d:39:4c:93:0c:
         2b:06:1d:b7:c6:15:51:15:9a:75:a4:1d:69:93:b9:63:c3:8f:
         bb:49:de:b3:9f:0c:5f:68:7b:9b:5f:1b:18:b4:48:b1:e5:5e:
         cd:7e:cb:bf
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDXTxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
Y2IxODVkYzJiNjdmZWE0ZThmY2M5MzAzZGU3NmIyZTZiM2U3NjUwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEygzNzNhNTA3M2I3OGJi
MjBhYWNiZmI3ZjUwMmQ5MGM0NzQ4NTMxM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhGV/be1uY7/X2V78uS/eKpP1svTmUrb+q0B/fLxjoWudeAqw
Amgkv7jWEzJHvIxSnIGuG4hn1YQXhU6TNrthZQPf18SPoP7g680q1ak4oad20IBe
KxhXrMAnCmB1gKuKlKq4/L3BG4hTBzXSBI9YH4m3iZekx/pCdv86mxmlWOUgEs5F
khDV/BZuqJyde5OEC8ngbeHzHt6S4De1AmjD29Tgaq8iMEoTJt3hbK42o85Yo5yz
poDo9TgtuW2rVSRzSdSz8z4Vx/pQ/bJxKbJUUlkDVLDghz/qFA4OKM6YYHI4JQTX
z/z2UVTYb4vO+94RoJg1jsp5VpA1IgeuXeBbUwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFP+J1vc8Fz+kIYlxuk4T4nN2lmzBMB8GA1UdIwQYMBaAFEA3K4qkZDF+pWHm
xGPL9wTNlKBjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDhjYjE4
NWRjMmI2N2ZlYTRlOGZjYzkzMDNkZTc2YjJlNmIzZTc2NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2ZmNzZlYzAtN2Q0YS00OWMzLWI0YWUtM2U2YTkx
YjcyM2NiLzM3M2E1MDczYjc4YmIyMGFhY2JmYjdmNTAyZDkwYzQ3NDg1MzEzYjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZmY3NmVjMC03ZDRhLTQ5YzMtYjRhZS0zZTZh
OTFiNzIzY2IvZDhjYjE4NWRjMmI2N2ZlYTRlOGZjYzkzMDNkZTc2YjJlNmIzZTc2
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALq3WDANBgkqhkiG9w0BAQsFAAOCAQEAZ0LfmPuNoJyjDDa5
qgAXZJXJMuQKwdmAR0jkrIGH+vxX2zVRAckLokkVFjOw3hqWQThNKkO6HkALcG3B
LGYAI5hxfce+TEn0neboHMkGB8dK7Iz4NftaoO0lJuWj/o1OAPLN1lTFIIxBUD5b
7fPwn9APjmCMnMrMgAeOY3zXyM711OoR2WWSjCsLRO3smZW5FvgGQo/yIX0PRBR+
iXBYv4AKeiujgkV2ANY8/so/zYDTZUXrhGnaxzZcm+Z+9Gl0PuTszayesm4yM1J6
+uXH4P/+zQ05TJMMKwYdt8YVURWadaQdaZO5Y8OPu0nes58MX2h7m18bGLRIseVe
zX7Lvw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org