Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/d22d045933e4fcbc4951040ae346a238964704fb.roa
File:                     d22d045933e4fcbc4951040ae346a238964704fb.roa (raw, json)
Hash identifier:          83mTVh27knrmElYgtPMY5Bw1xjK2nFVm2SIWktzidoY=
Subject key identifier:   F4:8C:1A:5D:64:F0:26:0D:CA:7C:DD:FC:5B:D5:39:CC:EF:E2:4A:4A
Certificate issuer:       /CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7
Certificate serial:       2212DC
Authority key identifier: 5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/d22d045933e4fcbc4951040ae346a238964704fb.roa
Signing time:             Sun 17 Sep 2023 21:14:02 +0000
ROA not before:           Sat 16 Sep 2023 21:14:02 +0000
ROA not after:            Wed 17 Sep 2025 21:14:02 +0000
asID:                     20454
IP address blocks:        190.112.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2233052 (0x2212dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7
        Validity
            Not Before: Sep 16 21:14:02 2023 GMT
            Not After : Sep 17 21:14:02 2025 GMT
        Subject: CN=d22d045933e4fcbc4951040ae346a238964704fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:60:ef:d4:77:de:f9:af:f7:bb:86:3d:a3:
                    99:f8:19:97:4f:a5:67:86:00:a0:bf:a7:b1:94:4a:
                    d7:bc:f0:59:c6:2e:7e:22:94:a8:2b:7e:1b:9f:77:
                    88:d7:1f:27:d0:32:c4:c6:3d:8f:a4:78:60:97:85:
                    b7:dd:29:7f:e8:b6:87:ee:55:c5:0c:a1:57:2e:51:
                    a1:c3:9b:ca:be:65:6e:3a:3d:fd:d4:48:d1:58:b7:
                    34:07:a0:15:52:f2:e4:bb:eb:33:fc:43:ee:f9:a4:
                    b4:84:0c:d9:47:7b:35:78:a6:f5:59:49:66:54:b9:
                    c6:f2:74:ce:32:9b:a6:5e:37:53:16:1c:e6:a5:5e:
                    d5:fa:28:5c:39:05:3c:8f:28:1e:e5:3b:85:3a:c2:
                    32:c1:3f:34:c9:5b:ef:31:24:97:dc:3d:90:2c:a5:
                    6d:8a:b3:2f:f6:a0:59:71:07:a6:a8:1e:8d:aa:a9:
                    aa:1b:c2:13:48:9e:ff:23:d3:96:b8:07:dc:9f:51:
                    0b:c9:b7:94:1b:c0:22:e8:aa:d0:6d:ae:64:26:29:
                    86:99:36:34:39:aa:39:60:7a:d3:05:50:3d:2c:23:
                    b6:a0:ef:6e:b3:b0:b2:47:07:8d:78:38:ff:19:bf:
                    2f:2f:bb:7a:3c:e5:56:10:79:2a:4f:37:ce:02:1d:
                    18:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8C:1A:5D:64:F0:26:0D:CA:7C:DD:FC:5B:D5:39:CC:EF:E2:4A:4A
            X509v3 Authority Key Identifier:
                keyid:5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/d22d045933e4fcbc4951040ae346a238964704fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:fc:35:b1:3f:42:5e:a9:15:b0:54:a7:07:35:42:14:79:0d:
         05:59:46:82:4c:9c:45:9c:6f:35:2a:df:84:43:40:97:73:6c:
         93:cc:77:fe:47:98:02:a4:da:0e:96:e4:b0:f7:58:f2:14:58:
         26:99:0f:77:ea:4b:f8:2a:9b:37:4f:e6:25:9c:21:38:3b:80:
         b3:47:7e:74:f2:bb:75:6d:fd:a4:4e:7e:de:b1:98:ee:8a:13:
         26:11:08:5d:87:e5:e0:61:0a:ea:1e:16:e7:64:40:91:bc:e5:
         e6:32:6a:c7:e5:e6:67:48:97:78:f8:9f:67:32:bf:87:1d:3f:
         06:5e:8c:88:2f:99:3b:87:82:29:6c:ee:12:fc:0e:de:95:78:
         95:07:33:54:48:bd:10:11:d6:65:22:2f:45:e1:f1:b8:3b:f5:
         61:b7:66:75:78:70:52:08:10:71:a3:d1:7c:50:27:99:93:dc:
         0b:90:9a:1f:50:4e:d0:33:ea:76:dd:3e:c3:11:83:3c:9c:fd:
         ea:ff:c7:0b:38:f6:15:03:d5:4a:78:ac:30:1a:a1:2f:39:88:
         77:5d:be:89:e5:e2:b0:4f:1c:f7:33:45:87:8a:73:e1:e6:7a:
         0c:28:36:af:04:f8:72:43:55:02:c8:5a:fb:56:db:03:a4:89:
         91:77:22:3f
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 17 22:08:47 2023 by rpki-client on console-ams.rpki-client.org