Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/c34f64ce2c096d5e392bcff549a9761436a721d6.roa
File:                     c34f64ce2c096d5e392bcff549a9761436a721d6.roa (raw, json)
Hash identifier:          fZd7KI9mRGcb/pqFBw07XQ3C2IIRG4wkxlPoPEwNgos=
Subject key identifier:   E8:5F:04:44:5A:4F:F2:26:77:EF:CC:73:27:9D:B2:4C:25:68:21:FF
Certificate issuer:       /CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
Certificate serial:       21739A
Authority key identifier: 76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/c34f64ce2c096d5e392bcff549a9761436a721d6.roa
Signing time:             Mon 12 Jun 2023 23:46:47 +0000
ROA not before:           Sun 11 Jun 2023 23:46:39 +0000
ROA not after:            Thu 12 Jun 2025 23:46:39 +0000
asID:                     27742
IP address blocks:        190.53.32.0/21 maxlen: 24
                          190.53.40.0/24 maxlen: 24
                          190.53.42.0/23 maxlen: 24
                          190.53.44.0/23 maxlen: 24
                          190.53.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2192282 (0x21739a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
        Validity
            Not Before: Jun 11 23:46:39 2023 GMT
            Not After : Jun 12 23:46:39 2025 GMT
        Subject: CN=c34f64ce2c096d5e392bcff549a9761436a721d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:56:84:66:a1:fe:e6:44:bc:7e:26:3e:05:57:
                    65:44:76:98:34:78:8c:93:1d:61:b7:24:54:23:1c:
                    24:6a:c9:07:58:5c:0b:6c:4e:3e:f7:9b:69:54:d3:
                    0f:e1:58:9c:5c:cf:69:0c:24:cc:d2:f0:47:97:32:
                    31:b4:5e:c8:82:d3:62:f9:a7:e5:d8:3e:c1:9c:ff:
                    79:8a:fe:e8:fc:c2:cf:54:f6:cf:0f:e7:00:1e:a7:
                    9c:e5:b8:e0:b2:bb:6f:fd:19:40:48:d4:c6:d3:f0:
                    f4:ed:be:65:2b:fb:e6:cf:12:51:ed:76:3b:c0:1b:
                    99:cf:5f:9e:ba:ce:f4:3d:07:cd:68:0b:f9:b8:22:
                    10:bd:60:b7:83:a5:0f:be:da:81:2e:12:79:44:a3:
                    84:02:0d:84:30:4b:3f:72:52:0c:cb:af:bc:9d:f5:
                    d9:bc:8c:15:57:c0:66:82:9f:d4:96:05:68:e3:f5:
                    42:6b:0c:d8:f7:c7:05:48:6b:ea:45:fe:9c:b6:88:
                    da:2f:9b:1d:dd:30:33:44:c4:68:44:af:d1:90:6f:
                    aa:7d:8d:ba:35:df:45:1d:65:8c:34:6a:2c:a1:b0:
                    03:59:95:36:fd:0e:6e:c6:44:ba:a0:e3:b1:bb:59:
                    10:1c:3e:77:c5:68:b7:09:22:b9:52:95:45:b1:62:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5F:04:44:5A:4F:F2:26:77:EF:CC:73:27:9D:B2:4C:25:68:21:FF
            X509v3 Authority Key Identifier:
                keyid:76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/c34f64ce2c096d5e392bcff549a9761436a721d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/eb6de066f1c70b82f75b54d19209c0e03f1f0279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.32.0-190.53.40.255
                  190.53.42.0-190.53.46.255

    Signature Algorithm: sha256WithRSAEncryption
         66:65:79:c7:f6:61:00:95:50:7a:7b:cc:4a:86:6f:02:83:7f:
         9d:2c:a8:72:40:29:c7:ec:bc:37:d4:71:af:bf:50:6c:40:67:
         84:59:82:18:62:3d:e5:fb:62:56:07:99:f8:7c:93:a9:04:57:
         79:94:15:e8:15:69:7f:e2:7f:11:cd:30:28:d6:76:32:e8:d1:
         8b:71:5b:11:1d:c4:07:45:0b:09:10:1f:d9:28:41:8e:02:c5:
         72:25:49:bc:42:6d:a7:2c:6c:87:d9:1b:e3:ec:50:0d:a9:76:
         45:e8:99:72:d8:17:6b:58:23:03:19:bb:17:12:cf:f8:b7:6b:
         62:2d:6a:47:e2:d1:81:78:1a:79:c7:f3:22:91:cb:5b:4c:0a:
         04:ec:99:3b:68:4b:41:0c:55:7d:2f:d1:b9:35:3e:f2:3d:bb:
         72:f1:5d:a7:d9:ea:41:4c:3c:50:c3:f5:b0:d9:9d:34:6f:ae:
         26:8d:f4:49:75:35:10:a8:84:1f:d2:6e:05:c5:c8:d7:08:a1:
         0c:1b:6d:aa:2c:d8:7d:3a:2f:47:d3:b9:54:83:57:90:f3:90:
         fd:f9:d4:37:63:fb:01:c9:53:dc:53:a6:41:60:85:d7:39:20:
         71:17:0e:ad:d0:7a:13:3a:b0:d4:0c:d3:86:64:23:2d:66:bf:
         94:e8:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org