Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/51eea0ed6bce2138fc3537f9c01b32cccedd11fb.roa
File:                     51eea0ed6bce2138fc3537f9c01b32cccedd11fb.roa (raw, json)
Hash identifier:          2u7LxfhtqE8Yx7f8+MeyWk1aLBFMiilxv7jAlLiz1z0=
Subject key identifier:   41:C4:67:00:AF:9C:3D:E2:BA:85:E7:3F:E4:26:99:02:7A:D7:03:55
Certificate issuer:       /CN=a5265fc51b7f5a9f0ec142aa30846e06015ca4ff
Certificate serial:       2159E4
Authority key identifier: 7B:81:30:97:3D:07:EE:38:1D:BC:1C:6C:C9:D0:90:B0:10:92:A6:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/51eea0ed6bce2138fc3537f9c01b32cccedd11fb.roa
Signing time:             Fri 02 Jun 2023 14:46:39 +0000
ROA not before:           Thu 01 Jun 2023 14:46:39 +0000
ROA not after:            Mon 02 Jun 2025 14:46:39 +0000
asID:                     52361
IP address blocks:        186.33.192.0/18 maxlen: 24
                          181.209.0.0/17 maxlen: 24
                          2800:c30::/32 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185700 (0x2159e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5265fc51b7f5a9f0ec142aa30846e06015ca4ff
        Validity
            Not Before: Jun  1 14:46:39 2023 GMT
            Not After : Jun  2 14:46:39 2025 GMT
        Subject: CN=51eea0ed6bce2138fc3537f9c01b32cccedd11fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f6:6f:c9:a2:0c:b8:e7:29:71:07:1d:27:1a:
                    4a:91:f5:bc:42:6c:2b:8c:d5:89:cd:a3:bc:5a:34:
                    9b:27:9e:de:74:06:bc:48:f7:c4:09:10:77:6b:df:
                    ce:29:8e:a7:08:33:17:26:50:d1:dd:6d:c9:01:be:
                    03:32:c9:6b:c2:ac:cc:44:98:23:c6:4f:7e:76:92:
                    be:8a:0c:81:c0:d6:a1:5a:00:56:16:de:12:b3:29:
                    61:ce:a9:92:9e:7b:db:e6:5c:e5:41:37:e2:0a:14:
                    78:ed:8b:67:33:e1:4f:48:6b:af:0b:f7:7b:cf:86:
                    12:5c:78:5c:84:ff:2b:50:42:70:fb:f3:6c:56:83:
                    b7:22:82:c1:09:60:f8:76:e5:7a:82:06:98:0b:5d:
                    6b:7a:60:0c:af:de:7e:aa:dd:42:2c:0f:4d:ed:f1:
                    9e:b7:ca:43:ad:e5:ce:fd:f1:9f:05:cc:16:97:a4:
                    e3:3c:3f:0e:57:61:bf:96:e1:83:42:96:70:fa:ef:
                    69:38:03:95:77:26:83:87:da:78:13:bf:be:98:61:
                    ec:9d:f8:24:1d:8c:46:66:4c:86:15:41:0b:c9:6a:
                    91:6f:99:f8:9a:e0:ec:70:bc:ac:72:e0:ea:bc:e8:
                    12:0f:d7:59:a8:d3:6f:1c:e6:6d:4c:a8:f7:65:bd:
                    ff:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C4:67:00:AF:9C:3D:E2:BA:85:E7:3F:E4:26:99:02:7A:D7:03:55
            X509v3 Authority Key Identifier:
                keyid:7B:81:30:97:3D:07:EE:38:1D:BC:1C:6C:C9:D0:90:B0:10:92:A6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/51eea0ed6bce2138fc3537f9c01b32cccedd11fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.0.0/17
                  186.33.192.0/18
                IPv6:
                  2800:c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:00:4d:40:cd:9e:44:c0:0d:6f:06:e7:b3:08:b2:28:87:12:
         19:d6:ea:32:e6:ee:40:f9:31:bb:dd:a9:15:14:ef:07:d3:c5:
         e1:27:7f:19:d8:ee:a9:fc:d7:23:da:4c:82:7b:78:04:c2:ba:
         6a:5c:39:a2:0b:93:4d:7a:76:b4:96:ab:c8:0b:d2:7b:54:ed:
         94:fb:bf:b2:3a:a7:e3:18:cb:17:75:da:5a:82:34:a2:d3:62:
         d2:84:b1:ef:32:9a:b5:14:59:14:db:35:91:29:49:cb:a1:d1:
         b0:f2:10:38:2a:48:75:2c:b9:92:e0:d3:9c:c5:34:68:1f:19:
         55:ee:a4:70:ea:94:f3:5b:6b:32:51:aa:22:08:e7:46:27:3e:
         2b:70:d5:ab:50:d7:38:fb:ea:84:d1:a2:4e:2b:19:26:7a:22:
         45:14:32:7d:db:31:30:4e:07:22:aa:2f:58:69:f1:0b:8d:a2:
         f0:d7:7b:81:b2:ff:1b:35:36:0a:3b:73:ec:b6:a4:5a:45:b8:
         89:ca:3f:4a:7e:f1:c5:48:65:3d:f9:d5:4a:08:8a:cb:d8:a8:
         be:b1:05:19:44:a3:ec:60:06:4c:a5:a9:64:61:23:6d:96:77:
         80:c7:9d:2f:93:b1:43:d1:2b:c4:f5:a7:2e:51:72:79:fe:e5:
         6e:dd:a6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:55 2023 by rpki-client on console-ams.rpki-client.org