Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/83085e6d9290e495bd918aec6e9e4aa8c34a8976.roa
File:                     83085e6d9290e495bd918aec6e9e4aa8c34a8976.roa (raw, json)
Hash identifier:          5d6xsqMRIVv7bG8Y4QKWrpkGOMJf+giRQhn/ues93UQ=
Subject key identifier:   4C:31:DF:69:C9:B6:E2:6C:CA:A3:29:FE:FE:11:02:4F:D8:6B:DD:80
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       1BCC45
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/83085e6d9290e495bd918aec6e9e4aa8c34a8976.roa
Signing time:             Thu 01 Sep 2022 15:06:01 +0000
ROA not before:           Tue 14 Jun 2022 03:00:00 +0000
ROA not after:            Wed 31 Dec 2025 03:00:00 +0000
asID:                     198198
IP address blocks:        190.98.154.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1821765 (0x1bcc45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Jun 14 03:00:00 2022 GMT
            Not After : Dec 31 03:00:00 2025 GMT
        Subject: CN=83085e6d9290e495bd918aec6e9e4aa8c34a8976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:8f:4e:68:1b:03:e7:8d:91:87:a3:44:58:
                    de:71:41:8e:7c:bb:7c:83:a2:aa:3c:db:59:d5:c9:
                    54:91:f1:67:d6:34:b8:03:5b:fc:1d:7b:14:20:94:
                    08:3e:26:ca:85:59:10:cb:b8:34:1e:15:94:cc:b2:
                    fe:90:cc:95:f2:64:58:c9:a2:01:9c:d4:5d:25:4d:
                    25:3b:fa:01:a2:9c:e6:04:d2:16:da:1b:94:2f:d3:
                    54:f9:24:c4:4b:4e:49:1f:12:d6:ed:5f:14:c0:f7:
                    cb:9e:0a:5f:01:e6:66:91:b3:16:e8:d9:23:81:0d:
                    77:bf:87:2e:3c:1d:95:e5:06:14:29:15:ca:d2:50:
                    63:0f:30:03:69:d7:77:b1:4c:f7:d2:05:bb:ba:98:
                    7a:97:6e:e5:65:f3:28:57:6b:41:e4:8c:b6:fe:54:
                    a6:b8:eb:af:67:d9:d5:76:08:4e:46:07:79:d9:c4:
                    55:bf:d1:04:6e:4f:84:d6:e4:d1:8b:db:fc:05:f7:
                    a9:30:d5:75:f3:6a:ba:88:93:15:26:8a:72:62:1b:
                    e1:22:05:83:a5:5d:35:65:09:d2:64:e0:26:c6:df:
                    a1:6d:44:a8:7f:fe:3f:e4:21:73:b5:bc:36:34:e9:
                    7b:bb:d4:54:ba:66:c5:45:e2:a0:95:7c:ba:02:7c:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:31:DF:69:C9:B6:E2:6C:CA:A3:29:FE:FE:11:02:4F:D8:6B:DD:80
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/83085e6d9290e495bd918aec6e9e4aa8c34a8976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:c7:48:8d:95:6f:dc:48:aa:27:d0:b4:6b:1b:4b:42:1e:ee:
         82:0c:3a:b9:a2:3e:91:76:4b:1a:3c:b8:87:4a:d6:c3:de:6d:
         f4:e4:54:dc:a6:b5:53:0c:4c:cb:aa:72:ca:f2:b5:89:31:b2:
         58:8c:06:7f:ed:c9:00:e4:9f:29:c6:4f:1f:a3:96:79:3f:ed:
         96:65:a5:7f:97:04:a7:a6:a1:da:4b:8f:96:8c:be:4c:18:d7:
         c8:74:d2:e6:29:33:3f:78:20:86:d7:69:9c:c8:91:c6:69:fd:
         59:15:d9:4f:00:ec:7a:53:88:6d:75:b5:6b:8d:52:8c:d5:26:
         87:0a:cd:ef:27:f0:25:23:e9:ca:7d:99:a0:b0:bf:29:81:9e:
         29:8b:46:04:da:a7:dd:ac:6e:e6:49:bf:0f:9a:64:70:ca:f9:
         5c:26:3d:c0:7d:bb:58:1c:c9:8e:51:32:60:dd:e8:59:de:94:
         d4:ea:3c:af:b5:19:36:50:9f:4e:6f:58:94:a2:3d:21:86:23:
         f4:ca:0f:c2:3e:82:c3:89:03:70:75:fe:2f:c4:ef:54:c7:c3:
         4f:b8:42:46:6d:87:f5:0a:40:3f:9e:9a:df:32:b4:67:0e:57:
         7a:f6:b9:43:44:39:7e:a6:b9:7a:32:b2:ee:97:46:fc:d3:69:
         2f:5f:20:6f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDG8xFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
Mjg1M2NjODVjMWU1NWM2NWU3NjMyOTliYTA4ODk0ZjhjZThkNTEwHhcNMjIwNjE0
MDMwMDAwWhcNMjUxMjMxMDMwMDAwWjAzMTEwLwYDVQQDEyg4MzA4NWU2ZDkyOTBl
NDk1YmQ5MThhZWM2ZTllNGFhOGMzNGE4OTc2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq0aPTmgbA+eNkYejRFjecUGOfLt8g6KqPNtZ1clUkfFn1jS4
A1v8HXsUIJQIPibKhVkQy7g0HhWUzLL+kMyV8mRYyaIBnNRdJU0lO/oBopzmBNIW
2huUL9NU+STES05JHxLW7V8UwPfLngpfAeZmkbMW6NkjgQ13v4cuPB2V5QYUKRXK
0lBjDzADadd3sUz30gW7uph6l27lZfMoV2tB5Iy2/lSmuOuvZ9nVdghORgd52cRV
v9EEbk+E1uTRi9v8BfepMNV182q6iJMVJopyYhvhIgWDpV01ZQnSZOAmxt+hbUSo
f/4/5CFztbw2NOl7u9RUumbFReKglXy6Any6mwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEwx32nJtuJsyqMp/v4RAk/Ya92AMB8GA1UdIwQYMBaAFI1zxHehMa1tUWdm
3vRyzC5gSH+tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2YyODUz
Y2M4NWMxZTU1YzY1ZTc2MzI5OWJhMDg4OTRmOGNlOGQ1MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDZmMjFhOGMtM2E3MS00N2E3LTlmNmUtYzliNDQx
NDI3ZmNkLzgzMDg1ZTZkOTI5MGU0OTViZDkxOGFlYzZlOWU0YWE4YzM0YTg5NzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNmYyMWE4Yy0zYTcxLTQ3YTctOWY2ZS1jOWI0
NDE0MjdmY2QvY2YyODUzY2M4NWMxZTU1YzY1ZTc2MzI5OWJhMDg4OTRmOGNlOGQ1
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAb5imjANBgkqhkiG9w0BAQsFAAOCAQEAkMdIjZVv3EiqJ9C0
axtLQh7uggw6uaI+kXZLGjy4h0rWw95t9ORU3Ka1UwxMy6pyyvK1iTGyWIwGf+3J
AOSfKcZPH6OWeT/tlmWlf5cEp6ah2kuPloy+TBjXyHTS5ikzP3gghtdpnMiRxmn9
WRXZTwDselOIbXW1a41SjNUmhwrN7yfwJSPpyn2ZoLC/KYGeKYtGBNqn3axu5km/
D5pkcMr5XCY9wH27WBzJjlEyYN3oWd6U1Oo8r7UZNlCfTm9YlKI9IYYj9MoPwj6C
w4kDcHX+L8TvVMfDT7hCRm2H9QpAP56a3zK0Zw5Xeva5Q0Q5fqa5ejKy7pdG/NNp
L18gbw==
-----END CERTIFICATE-----
Generated at Mon Sep 18 11:24:46 2023 by rpki-client on console-fra.rpki-client.org