Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/b1b2bfe250c861639456e871324b67d26fec1b48.roa
File:                     b1b2bfe250c861639456e871324b67d26fec1b48.roa (raw, json)
Hash identifier:          X3lwBxxOOB6vU0ElgONlUW3c5Z+1Y8f86HZw5lNOQ9s=
Subject key identifier:   D7:79:E4:EA:63:8C:AB:91:88:D7:D7:5F:32:69:91:9A:3E:45:53:79
Certificate issuer:       /CN=74b184780ab11522108afea08bba6483c8a4038c
Certificate serial:       2B83
Authority key identifier: 55:25:D9:C8:3C:B5:EC:05:1E:0B:45:87:46:F1:59:28:93:13:ED:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74b184780ab11522108afea08bba6483c8a4038c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/b1b2bfe250c861639456e871324b67d26fec1b48.roa
Signing time:             Wed 02 Mar 2022 20:05:47 +0000
ROA not before:           Wed 02 Mar 2022 03:00:00 +0000
ROA not after:            Sat 02 Mar 2024 03:00:00 +0000
asID:                     28024
IP address blocks:        161.22.128.0/17 maxlen: 17
                          161.22.128.0/19 maxlen: 19
                          161.22.160.0/19 maxlen: 19
                          161.22.192.0/19 maxlen: 19
                          161.22.224.0/19 maxlen: 19
                          161.56.0.0/16 maxlen: 16
                          161.56.0.0/18 maxlen: 18
                          161.56.64.0/18 maxlen: 18
                          161.56.128.0/18 maxlen: 18
                          161.56.192.0/18 maxlen: 18
                          161.138.0.0/16 maxlen: 16
                          161.138.0.0/18 maxlen: 18
                          161.138.64.0/18 maxlen: 18
                          161.138.128.0/18 maxlen: 18
                          161.138.192.0/18 maxlen: 18
                          179.58.0.0/16 maxlen: 16
                          179.58.0.0/18 maxlen: 18
                          179.58.64.0/18 maxlen: 18
                          179.58.128.0/18 maxlen: 18
                          179.58.192.0/18 maxlen: 18
                          179.59.0.0/16 maxlen: 16
                          179.59.0.0/18 maxlen: 18
                          179.59.64.0/18 maxlen: 18
                          179.59.128.0/18 maxlen: 18
                          179.59.192.0/18 maxlen: 18
                          181.227.0.0/16 maxlen: 16
                          181.227.0.0/18 maxlen: 18
                          181.227.64.0/18 maxlen: 18
                          181.227.128.0/18 maxlen: 18
                          181.227.192.0/18 maxlen: 18
                          186.2.0.0/17 maxlen: 17
                          186.2.0.0/19 maxlen: 19
                          186.2.32.0/19 maxlen: 19
                          186.2.64.0/19 maxlen: 19
                          186.2.96.0/19 maxlen: 19
                          186.27.0.0/17 maxlen: 17
                          186.27.0.0/19 maxlen: 19
                          186.27.32.0/19 maxlen: 19
                          186.27.64.0/19 maxlen: 19
                          186.27.96.0/19 maxlen: 19
                          200.85.144.0/21 maxlen: 21
                          200.85.144.0/24 maxlen: 24
                          200.85.145.0/24 maxlen: 24
                          200.85.146.0/24 maxlen: 24
                          200.85.147.0/24 maxlen: 24
                          200.85.148.0/24 maxlen: 24
                          200.85.149.0/24 maxlen: 24
                          200.85.150.0/24 maxlen: 24
                          2803:5700::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11139 (0x2b83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b184780ab11522108afea08bba6483c8a4038c
        Validity
            Not Before: Mar  2 03:00:00 2022 GMT
            Not After : Mar  2 03:00:00 2024 GMT
        Subject: CN=b1b2bfe250c861639456e871324b67d26fec1b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a3:63:39:ce:92:c7:14:ef:79:11:32:f4:f7:
                    b0:34:3d:ed:15:bf:bb:0d:34:4c:f6:b5:ba:ea:b7:
                    13:d9:b2:60:d4:c2:15:ea:cd:eb:b1:ee:3e:73:63:
                    6d:f5:e3:a7:e8:5a:fb:1d:01:c0:b1:60:53:53:65:
                    97:34:95:ca:0a:c1:18:4e:e7:b8:cb:2d:f6:10:db:
                    1d:6a:ad:96:9e:c8:af:b0:14:cd:ab:00:40:60:4a:
                    6c:5d:f6:66:44:5c:d5:24:8a:fe:18:8b:3d:96:8f:
                    67:9a:d9:40:0b:8a:4f:45:1a:51:a1:1f:e4:e2:12:
                    90:1e:8f:9f:f4:73:f4:0a:c0:77:61:0c:1b:63:23:
                    0f:3c:67:6d:06:80:57:38:64:1c:ed:da:f6:cd:58:
                    ef:01:df:a0:8e:1a:52:67:33:8f:98:bf:c5:83:62:
                    7c:38:2f:5e:54:65:db:01:f0:21:ca:d0:09:9e:6d:
                    61:15:5c:4d:47:2b:4e:7d:d6:2e:53:2f:ab:16:de:
                    f2:cb:21:34:55:b1:5c:59:29:53:61:7e:e9:31:91:
                    4d:98:f1:a6:6f:5b:f8:81:75:68:cf:0f:2b:e4:de:
                    76:af:92:c3:78:11:1b:7d:5a:29:6b:26:db:c1:09:
                    59:6a:ff:41:84:6d:66:2b:5e:fd:26:fb:32:5b:f8:
                    21:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:79:E4:EA:63:8C:AB:91:88:D7:D7:5F:32:69:91:9A:3E:45:53:79
            X509v3 Authority Key Identifier:
                keyid:55:25:D9:C8:3C:B5:EC:05:1E:0B:45:87:46:F1:59:28:93:13:ED:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74b184780ab11522108afea08bba6483c8a4038c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/b1b2bfe250c861639456e871324b67d26fec1b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/74b184780ab11522108afea08bba6483c8a4038c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.128.0/17
                  161.56.0.0/16
                  161.138.0.0/16
                  179.58.0.0/15
                  181.227.0.0/16
                  186.2.0.0/17
                  186.27.0.0/17
                  200.85.144.0/21
                IPv6:
                  2803:5700::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:04:34:0c:ab:8b:86:29:80:df:57:13:82:99:19:95:a2:5b:
         6d:bc:fd:03:e2:83:ea:d0:1d:0b:75:93:62:6c:55:6d:94:09:
         2e:f8:c4:30:3d:b0:b8:f9:8f:58:c8:62:17:15:4f:a7:56:6a:
         d0:85:6c:f5:20:ce:aa:f5:6b:de:4c:a0:16:dc:51:7f:d6:34:
         fc:33:b5:5f:3d:90:dd:38:2e:f0:3a:ac:dc:a0:fa:68:e8:76:
         18:13:8d:ac:5a:ca:59:cd:60:6e:db:4c:37:9e:4a:0e:46:ef:
         5a:6b:b6:b4:2f:ff:6f:30:30:29:93:f3:48:0f:13:8b:4a:64:
         47:be:1b:86:90:d8:95:cb:82:dc:2a:b3:a2:ee:6c:8e:63:5f:
         58:32:39:68:c9:3c:b1:fa:ae:33:c1:72:4a:75:23:dd:13:5d:
         43:b3:b2:ac:aa:81:3f:91:5d:7f:2d:95:ea:70:10:22:e6:6e:
         93:ed:7a:8e:1a:52:3e:d4:5d:46:93:04:a3:e1:92:c6:62:d6:
         43:6d:15:55:28:1a:52:04:77:9b:37:f9:88:30:b8:8f:a8:e3:
         2a:99:3b:49:38:60:96:3e:33:cf:90:26:e3:8f:0e:6a:a8:e5:
         b0:27:60:fd:03:54:d1:42:56:06:68:12:5a:af:67:70:02:65:
         48:6c:54:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:57 2023 by rpki-client on console-ams.rpki-client.org