Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/208a400de5a91d9148a97917c4a4520f0454d7bc.roa
File:                     208a400de5a91d9148a97917c4a4520f0454d7bc.roa (raw, json)
Hash identifier:          GImHn6KkMnmUZTLowbRFf6TxEAZVAxKyjMtUXJnkcmU=
Subject key identifier:   35:9E:69:BF:65:52:45:E9:A7:17:DB:CE:E6:5B:80:3D:C0:C2:0F:42
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       1964CE
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/208a400de5a91d9148a97917c4a4520f0454d7bc.roa
Signing time:             Tue 31 May 2022 14:47:03 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Sat 31 Dec 2022 03:00:00 +0000
asID:                     262202
IP address blocks:        190.98.182.0/23 maxlen: 24
                          190.98.184.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664206 (0x1964ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Dec 31 03:00:00 2022 GMT
        Subject: CN=208a400de5a91d9148a97917c4a4520f0454d7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6b:f2:25:80:2d:9d:1c:e8:14:d5:93:08:4f:
                    74:77:f3:66:07:d2:5b:59:85:4b:c2:34:17:9c:d4:
                    e2:22:e7:36:6d:3a:f7:b8:cf:39:71:13:39:58:e9:
                    db:70:04:ce:8d:19:21:9a:fe:df:42:d0:67:15:36:
                    a9:8c:aa:fe:22:c5:0c:85:d9:63:7d:a1:69:69:71:
                    33:69:24:fe:4d:37:7d:e6:a7:bb:c4:31:45:2c:50:
                    63:04:95:ac:ca:67:90:4d:ab:4a:a2:15:b1:14:01:
                    4d:50:c9:df:54:a4:48:44:d0:fb:43:e5:90:62:ce:
                    32:68:41:48:af:85:de:78:09:6a:e9:0b:e8:08:b7:
                    a5:05:f7:f0:17:59:e0:6b:e0:8c:df:a9:d2:fb:71:
                    ae:23:60:3d:fb:c9:e3:e9:77:46:cd:98:30:84:ff:
                    7e:c7:1f:d2:b7:f8:97:ab:bb:c0:b4:b9:8c:67:97:
                    70:f2:c4:24:10:a9:01:93:33:a3:cb:a8:45:4f:32:
                    56:03:26:dc:c4:f5:1f:5c:47:34:63:44:1b:78:57:
                    76:42:3f:6a:aa:84:55:b4:f1:c9:37:ed:cf:38:b1:
                    9e:be:67:11:73:b8:bd:25:1b:a8:94:7a:b9:6e:12:
                    1c:b5:0e:af:4b:b1:dc:f7:9d:7c:d0:1d:e4:43:a0:
                    2a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9E:69:BF:65:52:45:E9:A7:17:DB:CE:E6:5B:80:3D:C0:C2:0F:42
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/208a400de5a91d9148a97917c4a4520f0454d7bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.182.0-190.98.191.255

    Signature Algorithm: sha256WithRSAEncryption
         3c:f7:67:4b:69:50:f0:8a:7d:30:78:2b:b5:8c:f3:69:b9:a5:
         4d:22:01:e3:32:9e:4d:94:46:82:55:1d:f8:04:09:70:de:6b:
         aa:7a:56:2b:22:b6:b5:e7:c9:89:ba:0b:ec:c5:cc:ee:c0:11:
         75:b9:1a:7c:ee:5e:8b:e0:54:2c:38:b9:8b:6e:b8:c9:14:7b:
         bf:ef:b0:8a:39:ad:55:f8:76:2c:16:86:ec:ff:ef:f1:b7:4a:
         b4:c2:dc:09:33:df:a6:c9:c6:3e:ac:fb:e0:5e:40:a6:1b:61:
         0c:35:bd:6e:ec:8f:20:de:bd:60:de:cf:ec:8f:ae:b9:d2:77:
         de:37:54:6d:31:73:4a:bb:33:48:ac:ad:dc:de:e0:9e:22:ae:
         62:b4:fa:72:a6:55:02:a5:ff:af:3a:04:2b:d9:1c:b8:ac:d2:
         df:e6:91:c9:5e:13:be:62:44:06:12:6a:11:39:1b:94:d8:70:
         bf:4c:81:b5:f1:1b:f0:bd:ae:d0:1b:c4:1b:e6:d2:ac:c8:3c:
         db:2f:84:b5:26:a1:66:fd:81:25:87:23:9e:98:c5:63:7c:cb:
         00:e6:d9:6a:24:f9:8d:5a:2b:0c:46:17:23:fd:35:7c:f6:0c:
         b1:41:44:8d:6a:03:e3:8f:d6:c3:31:cd:17:2c:e9:a4:01:c7:
         15:73:6a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:54 2023 by rpki-client on console-ams.rpki-client.org