Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/410f7c393e98f17435b8e8d70a28467c3610eed3.roa
File:                     410f7c393e98f17435b8e8d70a28467c3610eed3.roa (raw, json)
Hash identifier:          qfIcckvRctDluizp/rlX5XjpmprPor05yGHhtSCBs7I=
Subject key identifier:   65:3C:8F:7A:2C:26:26:7E:8F:AF:2D:A1:6E:CA:E6:94:72:EA:C1:48
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       013BDB
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/410f7c393e98f17435b8e8d70a28467c3610eed3.roa
Signing time:             Sun 14 Nov 2021 14:46:32 +0000
ROA not before:           Sun 14 Nov 2021 03:00:00 +0000
ROA not after:            Tue 14 Nov 2023 03:00:00 +0000
asID:                     27866
IP address blocks:        190.23.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80859 (0x13bdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 14 03:00:00 2021 GMT
            Not After : Nov 14 03:00:00 2023 GMT
        Subject: CN=410f7c393e98f17435b8e8d70a28467c3610eed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e3:dc:ac:4a:79:77:56:b4:16:fd:ea:23:d4:
                    a2:d2:99:e4:2e:85:00:4d:5a:65:e0:53:bd:95:ab:
                    ad:9a:7e:b4:31:ed:56:36:aa:dc:3c:c6:08:4b:06:
                    05:e7:3b:ed:ab:6b:f5:41:90:8c:ab:3d:e0:4e:0b:
                    9a:7b:b2:89:86:80:e7:7d:ba:a3:fa:5e:fc:f3:71:
                    23:f3:65:ff:4d:1e:21:17:ca:66:52:4d:0a:41:01:
                    72:10:15:6a:2a:7e:71:6c:00:56:76:3b:8c:3a:69:
                    3c:59:87:61:31:95:2f:18:f6:f9:27:d1:a4:df:36:
                    bb:a1:55:b0:39:38:f9:6a:e9:5f:34:b1:1b:21:d4:
                    28:c6:17:86:e5:60:c3:f7:7e:e2:2a:65:4e:68:29:
                    92:62:e0:49:3e:5e:24:f1:ca:02:33:2c:88:ac:0f:
                    5c:99:2d:5e:c1:cc:69:b4:6a:d4:7a:e3:61:2d:9c:
                    4e:fb:4f:50:78:37:0b:3e:17:1f:96:d6:5e:2e:22:
                    0e:90:18:ce:df:34:3d:85:41:b9:cd:89:12:c8:7b:
                    6d:a3:01:b9:db:e5:5a:9c:5f:1c:71:bd:17:77:e1:
                    3f:ba:1a:09:07:9f:0a:01:e8:c4:de:f4:88:ae:c6:
                    bb:f9:37:35:29:7b:32:ae:bc:b8:f1:1f:be:c0:55:
                    36:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3C:8F:7A:2C:26:26:7E:8F:AF:2D:A1:6E:CA:E6:94:72:EA:C1:48
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/410f7c393e98f17435b8e8d70a28467c3610eed3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.23.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:cb:28:97:b1:67:ab:99:66:ac:70:c1:91:79:8f:1e:a0:a5:
         e7:b7:0e:95:e2:86:d8:dc:50:fa:35:9c:9b:33:9f:89:17:f7:
         e6:34:92:af:26:e2:5a:35:06:6c:23:45:bd:61:85:af:b7:68:
         d0:40:51:d9:b0:51:b3:44:c0:e5:77:df:aa:81:f2:20:83:01:
         1f:d0:cb:8b:98:a1:fa:ae:df:c2:a0:7e:c6:b1:ea:8f:0c:f6:
         e8:31:b5:cd:a3:78:88:90:84:98:83:a5:58:b1:a4:ff:dc:a1:
         d4:4a:7b:ce:f0:fc:3e:8a:e2:66:20:c9:ec:7d:bd:3e:8d:17:
         fe:57:cd:0d:9f:9f:09:9b:51:d3:b7:da:df:10:c4:d2:39:82:
         58:ff:df:98:4a:07:df:dd:f0:18:57:a5:ed:18:f1:5c:8a:2a:
         d3:48:a2:fc:3c:44:9b:c2:49:e8:81:15:13:66:b6:8e:97:52:
         bf:93:9f:9f:c4:35:bc:67:8c:d6:a3:3e:0e:47:6f:9b:96:10:
         50:67:38:14:a3:47:f3:df:4c:55:04:7f:13:b1:ff:6a:08:cb:
         72:b4:6a:57:71:b9:46:90:95:db:f1:27:8e:39:5b:f5:2b:f6:
         95:62:8b:69:ee:c4:47:9f:93:63:8a:2b:10:31:88:7b:74:af:
         d3:87:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org