Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/1c89e957470de84c4115cc8d00009f8adbab258f.roa
File:                     1c89e957470de84c4115cc8d00009f8adbab258f.roa (raw, json)
Hash identifier:          NG6rVFAw8dy+hNC+TdxMzyIF90WDLH65KHgOLnbmXXg=
Subject key identifier:   93:6A:E4:57:C5:74:78:09:AD:99:FB:9E:07:D1:5A:44:B0:1E:5B:A2
Certificate issuer:       /CN=1076b178dfcc599f8de3d8db587bc6a97166efe6
Certificate serial:       1AC478
Authority key identifier: 62:54:C0:88:69:DE:40:D1:4C:A6:E1:4A:A3:7F:49:06:2A:3B:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1076b178dfcc599f8de3d8db587bc6a97166efe6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/1c89e957470de84c4115cc8d00009f8adbab258f.roa
Signing time:             Wed 31 Aug 2022 19:57:38 +0000
ROA not before:           Wed 31 Aug 2022 19:54:40 +0000
ROA not after:            Sat 31 Aug 2024 19:54:40 +0000
asID:                     262187
IP address blocks:        131.100.180.0/24 maxlen: 24
                          131.100.181.0/24 maxlen: 24
                          131.100.182.0/24 maxlen: 24
                          131.100.183.0/24 maxlen: 24
                          190.211.80.0/24 maxlen: 24
                          190.211.81.0/24 maxlen: 24
                          190.211.82.0/24 maxlen: 24
                          190.211.83.0/24 maxlen: 24
                          190.211.84.0/24 maxlen: 24
                          190.211.85.0/24 maxlen: 24
                          190.211.86.0/24 maxlen: 24
                          190.211.87.0/24 maxlen: 24
                          190.211.88.0/24 maxlen: 24
                          190.211.89.0/24 maxlen: 24
                          190.211.90.0/24 maxlen: 24
                          190.211.91.0/24 maxlen: 24
                          2800:a30:6a5::/48 maxlen: 48
                          2800:a30:1708::/48 maxlen: 48
                          2800:a30:220a::/48 maxlen: 48
                          2800:a30:7ade::/48 maxlen: 48
                          2800:a30:ed30::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1754232 (0x1ac478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1076b178dfcc599f8de3d8db587bc6a97166efe6
        Validity
            Not Before: Aug 31 19:54:40 2022 GMT
            Not After : Aug 31 19:54:40 2024 GMT
        Subject: CN=1c89e957470de84c4115cc8d00009f8adbab258f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a0:a9:81:b9:8a:cd:d2:95:b9:93:6f:36:06:
                    26:dc:81:b8:b6:0f:a6:02:29:2a:88:a7:b3:a3:7e:
                    30:90:5c:d4:bb:b8:0e:48:ff:de:5f:b8:89:a4:ff:
                    c4:82:ff:59:80:21:21:f2:44:0a:fc:b4:bb:c6:e3:
                    d6:89:cb:12:b2:6d:15:c3:b3:0e:38:db:29:b2:c4:
                    8e:3d:83:13:da:72:18:2f:cd:a1:7b:31:bc:7b:93:
                    e2:90:7c:22:30:be:1b:65:ee:0a:8e:c3:85:df:62:
                    e6:14:3d:f3:21:cd:25:3a:5e:1c:70:69:52:24:02:
                    50:53:02:b9:eb:8e:a0:d7:b0:50:75:6b:17:21:09:
                    c2:44:f9:5e:0b:c7:c2:fc:a6:20:77:29:33:ef:c3:
                    47:fd:e9:e9:d8:f5:5c:f9:a2:fa:fd:a5:ba:81:21:
                    c3:6e:30:e1:07:fe:a7:e6:d8:56:9a:b2:f7:59:c2:
                    0d:f7:d0:53:38:39:f6:6d:74:74:e3:8f:51:bf:3a:
                    60:39:ab:ed:92:68:66:6b:19:21:a4:56:0e:03:2b:
                    b9:87:75:f8:90:7b:4f:2c:90:ab:1c:3e:77:ec:ba:
                    ff:aa:2d:23:9f:d1:43:5e:85:c8:19:cc:96:7d:de:
                    54:06:3d:36:ac:18:d9:57:41:18:43:d8:9f:f4:7d:
                    5d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6A:E4:57:C5:74:78:09:AD:99:FB:9E:07:D1:5A:44:B0:1E:5B:A2
            X509v3 Authority Key Identifier:
                keyid:62:54:C0:88:69:DE:40:D1:4C:A6:E1:4A:A3:7F:49:06:2A:3B:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1076b178dfcc599f8de3d8db587bc6a97166efe6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/1c89e957470de84c4115cc8d00009f8adbab258f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/1076b178dfcc599f8de3d8db587bc6a97166efe6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.180.0/22
                  190.211.80.0-190.211.91.255
                IPv6:
                  2800:a30:6a5::/48
                  2800:a30:1708::/48
                  2800:a30:220a::/48
                  2800:a30:7ade::/48
                  2800:a30:ed30::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:6c:49:1f:7f:cb:64:a2:a8:2a:1b:2a:6d:33:5b:64:cd:c4:
         7e:1a:a0:e3:2d:9a:bb:27:ec:15:b5:f3:72:29:77:fd:89:20:
         0b:6a:9e:0a:e1:23:bf:81:59:f2:a1:1b:1f:ce:03:ed:68:28:
         c6:f4:60:ce:3f:a9:7c:05:ce:48:3d:51:40:34:11:65:9f:b6:
         3d:82:56:74:1c:9f:52:4f:c0:7d:c5:8e:b4:97:40:ce:bf:74:
         b3:11:62:7a:ee:86:3d:55:79:ab:02:1b:7a:d8:a8:00:0f:a9:
         52:18:79:ff:36:0a:3a:0f:d0:49:53:98:8b:1a:c2:48:ad:20:
         aa:3d:02:be:c8:1e:a7:99:f2:76:89:d9:88:1d:20:91:d1:40:
         bf:5f:cc:f3:99:10:70:0b:f6:bc:ca:9d:49:06:c3:34:b7:70:
         8f:fe:86:75:47:96:a5:2e:28:64:35:70:50:9a:2a:e7:2a:b6:
         9b:e4:56:68:41:f9:0d:f3:8f:b7:7a:f0:d1:7d:9b:43:af:44:
         b6:8b:a6:ad:45:a4:93:fe:d4:53:22:98:87:d5:91:fb:5c:ab:
         34:bb:21:ff:8a:c2:ed:1d:ab:18:25:42:59:8f:d2:df:1b:39:
         94:ab:ae:11:5f:8f:1f:11:26:82:cf:c2:11:53:8c:88:8e:4d:
         f9:2a:de:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 18:03:12 2023 by rpki-client on console-ams.rpki-client.org