Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/7db7bb2a714c5a322e94123671b8469ea260041c.roa
File:                     7db7bb2a714c5a322e94123671b8469ea260041c.roa (raw, json)
Hash identifier:          RH+muSxzDAc79UMsoy9hrPwfdnmGsiUzcIwv6+xide8=
Subject key identifier:   2F:89:36:D4:13:8A:9C:D7:A1:2E:57:2A:ED:4C:E5:6B:69:E8:A6:3A
Certificate issuer:       /CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
Certificate serial:       10428D
Authority key identifier: EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/7db7bb2a714c5a322e94123671b8469ea260041c.roa
Signing time:             Fri 04 Nov 2022 14:30:07 +0000
ROA not before:           Wed 23 Jun 2021 03:00:00 +0000
ROA not after:            Thu 29 Jun 2023 03:00:00 +0000
asID:                     27775
IP address blocks:        186.179.128.0/17 maxlen: 24
                          190.98.0.0/17 maxlen: 24
                          190.98.0.0/19 maxlen: 24
                          190.98.32.0/19 maxlen: 24
                          190.98.64.0/19 maxlen: 24
                          190.98.96.0/19 maxlen: 24
                          200.1.156.0/22 maxlen: 24
                          200.2.160.0/20 maxlen: 24
                          200.2.176.0/20 maxlen: 24
                          2803:a200::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1065613 (0x10428d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
        Validity
            Not Before: Jun 23 03:00:00 2021 GMT
            Not After : Jun 29 03:00:00 2023 GMT
        Subject: CN=7db7bb2a714c5a322e94123671b8469ea260041c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b5:78:31:c6:7a:2a:b6:d9:19:55:10:72:06:
                    ee:37:66:a2:4e:86:63:fd:10:8d:d5:b6:f8:e0:04:
                    66:a8:95:37:ff:f6:da:e7:ec:b9:3e:37:44:4b:44:
                    32:bb:03:9c:a0:89:de:cf:f2:4c:94:6e:52:97:3f:
                    a3:c7:61:66:9b:49:c4:26:ea:44:25:ef:03:f7:e0:
                    96:f0:82:dc:0f:df:bc:ca:49:7e:f8:37:a0:e0:c3:
                    0d:27:12:5d:a8:9c:12:e2:25:27:c7:56:0b:9c:5f:
                    78:b9:7e:a2:b0:83:d2:48:ff:10:f8:d4:01:d1:a7:
                    2b:95:95:33:13:ed:bd:ec:18:ee:8c:1b:98:78:4f:
                    c5:8e:16:db:97:04:27:95:f0:87:d7:81:d4:9f:6b:
                    ca:ea:0c:13:e7:99:09:ca:33:89:3e:3d:08:0e:5a:
                    2c:f8:47:e0:82:c0:d8:a3:74:0d:d4:eb:88:47:ac:
                    ff:be:93:bb:fd:7b:b9:88:84:d9:34:c3:b1:1a:9b:
                    66:51:96:26:99:fa:62:ff:3d:90:92:e0:03:7d:48:
                    42:5d:7c:59:f6:40:cf:f3:65:a7:4d:37:bd:16:7e:
                    60:df:6c:53:ee:91:d7:8c:44:05:6a:bf:b8:83:c8:
                    38:6a:c7:69:8c:6a:c5:12:85:d8:53:f7:0d:23:fe:
                    e8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:89:36:D4:13:8A:9C:D7:A1:2E:57:2A:ED:4C:E5:6B:69:E8:A6:3A
            X509v3 Authority Key Identifier:
                keyid:EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/7db7bb2a714c5a322e94123671b8469ea260041c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/5f073dc50d388f5e4b8416173329e5c9fb55bacc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.128.0/17
                  190.98.0.0/17
                  200.1.156.0/22
                  200.2.160.0/19
                IPv6:
                  2803:a200::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:5b:ba:ff:85:c9:85:82:06:2d:e3:90:58:d6:cc:e9:d1:eb:
         7d:2d:a8:ef:a4:28:e1:6d:fa:e9:9a:ec:47:7c:ec:d7:e5:33:
         1a:ed:17:00:f7:ee:0d:fc:77:50:f3:0e:54:5f:a2:c1:f5:eb:
         80:4c:a1:d8:ee:c8:47:f7:8e:6b:0b:25:e1:3e:59:6b:b7:11:
         ba:55:c9:51:6c:ec:95:ee:d8:9a:7f:ff:dd:19:6c:57:21:5e:
         2c:14:6f:4d:85:5e:2d:51:55:df:d1:4f:98:58:6b:84:ce:50:
         36:6a:50:0d:45:89:51:fe:5c:53:c5:b2:3d:35:e0:3a:ed:83:
         cf:3d:e9:1e:d4:f8:ea:69:36:53:65:59:75:64:8d:6c:5a:80:
         6e:22:60:5e:48:18:ff:a1:da:db:38:ca:af:70:ae:cd:1e:63:
         e8:f9:aa:dc:85:6a:05:88:9e:6b:06:11:19:43:b9:8b:46:ef:
         d9:df:1b:f5:dc:11:5b:d7:54:60:de:86:61:b0:b0:21:ea:c1:
         b7:9f:a1:1f:9c:0a:45:09:2e:82:b4:22:81:19:55:e6:a2:aa:
         ff:14:67:8b:72:98:6c:7c:f6:6d:78:e9:72:91:f0:be:7a:74:
         e0:dc:fe:aa:72:44:53:4f:b0:9b:1f:ec:b1:a6:8e:85:43:83:
         33:ef:3e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-fra.rpki-client.org