Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/07915c7aaa25e2148cda3068872e028b48f87cf2.roa
File:                     07915c7aaa25e2148cda3068872e028b48f87cf2.roa (raw, json)
Hash identifier:          OOxudCocICwf/4euzHswP5c9gdG5FySgV1BOCC0IhqQ=
Subject key identifier:   6C:70:18:E8:1E:BD:5E:E9:D8:3D:C4:CA:4F:29:D2:72:72:D2:06:E6
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       143998
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/07915c7aaa25e2148cda3068872e028b48f87cf2.roa
Signing time:             Tue 16 Nov 2021 19:20:28 +0000
ROA not before:           Tue 16 Nov 2021 03:00:00 +0000
ROA not after:            Thu 16 Nov 2023 03:00:00 +0000
asID:                     28075
IP address blocks:        190.113.173.0/24 maxlen: 24
                          190.113.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1325464 (0x143998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Nov 16 03:00:00 2021 GMT
            Not After : Nov 16 03:00:00 2023 GMT
        Subject: CN=07915c7aaa25e2148cda3068872e028b48f87cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:db:5a:60:22:66:5d:de:74:97:74:68:44:d9:
                    42:ff:71:2e:73:a0:99:89:4a:4b:f6:78:66:de:05:
                    ba:2e:1d:af:44:de:24:f6:e3:b0:ec:e3:0c:c1:8a:
                    8b:55:31:56:2b:e8:6d:78:bb:14:80:99:08:e4:2d:
                    3a:6f:b3:27:20:eb:20:b3:e2:ba:63:30:dc:44:95:
                    10:f8:4b:fa:0c:b9:b5:36:eb:12:05:7e:00:9f:f9:
                    d6:28:7f:d4:b0:f5:a7:cd:3c:3c:05:e9:f9:4f:11:
                    33:3e:f2:cb:dd:a0:fc:b2:f2:ce:52:ff:4b:15:a4:
                    4d:bb:9d:9c:18:fc:7d:ba:a9:27:0a:10:f1:05:98:
                    09:be:54:03:b0:89:c2:73:2c:36:7e:65:a5:a4:2c:
                    e6:84:71:a7:9a:4b:ed:65:b4:93:34:a9:4d:98:c7:
                    4c:f8:95:9c:51:4b:99:de:ae:73:33:aa:16:2c:07:
                    8c:d7:b3:3c:3a:f6:f4:83:32:95:6b:82:bb:4a:07:
                    3d:cf:b3:51:18:e3:1d:b2:e2:fe:57:23:21:04:56:
                    a0:03:fc:f7:a9:84:bc:75:a6:8b:98:37:a7:31:12:
                    9a:bc:c0:6d:35:cd:73:3a:84:2f:d8:1c:e3:66:94:
                    88:4b:8b:20:55:0d:bf:e2:91:b6:77:b1:dd:c5:02:
                    da:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:70:18:E8:1E:BD:5E:E9:D8:3D:C4:CA:4F:29:D2:72:72:D2:06:E6
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/07915c7aaa25e2148cda3068872e028b48f87cf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.173.0-190.113.174.255

    Signature Algorithm: sha256WithRSAEncryption
         54:b1:ea:43:67:f0:4e:39:51:e0:08:df:62:b5:56:e2:48:5f:
         99:e3:79:3e:13:68:f2:2e:6b:0c:01:ac:13:12:1f:c9:1d:9d:
         06:27:90:94:b7:56:45:2a:d8:21:47:a6:07:56:7c:e6:c9:f2:
         d1:9e:cf:17:63:18:14:e2:e3:d3:90:86:09:83:4d:4b:e5:0f:
         7a:70:6b:dd:ef:53:46:67:85:4e:b8:06:0c:78:0a:ab:e1:71:
         50:78:54:45:ce:6a:0f:2f:a1:4a:1c:f1:66:c6:0c:6c:5f:10:
         de:7f:0d:5e:3f:7b:7e:36:18:85:b2:27:ae:4c:06:44:44:cf:
         c6:a0:d1:e3:db:e4:d6:89:50:80:3b:fb:02:60:7a:e2:b5:de:
         65:83:37:35:bd:e2:41:fa:2c:79:da:c3:a0:3c:12:af:8d:a9:
         43:9b:82:17:5c:79:9f:d0:23:ab:2e:8b:9f:dd:aa:dc:d7:e5:
         07:31:98:bd:03:37:d2:60:76:8b:22:b4:c7:e5:c9:5c:8e:c8:
         07:41:03:9c:a6:80:fc:d5:a0:e9:aa:3f:1b:7f:6e:9f:13:2c:
         76:76:bd:1c:f3:1e:7b:ed:cb:3d:60:76:6a:a1:8b:c9:d0:4c:
         03:b0:ac:3e:70:38:f1:4a:54:41:2c:64:cd:c0:3a:e3:5b:fc:
         b6:1c:ed:f6
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDFDmYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4
ZDNiMzhmYjliZmNlZDU3YzZhZDVlYjE2MGMxMzBhY2YzMjY0MWMwHhcNMjExMTE2
MDMwMDAwWhcNMjMxMTE2MDMwMDAwWjAzMTEwLwYDVQQDEygwNzkxNWM3YWFhMjVl
MjE0OGNkYTMwNjg4NzJlMDI4YjQ4Zjg3Y2YyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnNtaYCJmXd50l3RoRNlC/3Euc6CZiUpL9nhm3gW6Lh2vRN4k
9uOw7OMMwYqLVTFWK+hteLsUgJkI5C06b7MnIOsgs+K6YzDcRJUQ+Ev6DLm1NusS
BX4An/nWKH/UsPWnzTw8Ben5TxEzPvLL3aD8svLOUv9LFaRNu52cGPx9uqknChDx
BZgJvlQDsInCcyw2fmWlpCzmhHGnmkvtZbSTNKlNmMdM+JWcUUuZ3q5zM6oWLAeM
17M8Ovb0gzKVa4K7Sgc9z7NRGOMdsuL+VyMhBFagA/z3qYS8daaLmDenMRKavMBt
Nc1zOoQv2BzjZpSIS4sgVQ2/4pG2d7HdxQLa/wIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFGxwGOgevV7p2D3Eyk8p0nJy0gbmMB8GA1UdIwQYMBaAFPsbKsFJ3WU0RJWG
NPmzt6e3aen4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODhkM2Iz
OGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQxYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjAxNWM0NmItMTU0MC00OWViLWI5NjktMGYzYzQw
ZTAwMTQwLzA3OTE1YzdhYWEyNWUyMTQ4Y2RhMzA2ODg3MmUwMjhiNDhmODdjZjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMDE1YzQ2Yi0xNTQwLTQ5ZWItYjk2OS0wZjNj
NDBlMDAxNDAvODhkM2IzOGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQx
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAvnGtAwQAvnGuMA0GCSqGSIb3DQEBCwUAA4IBAQBUsepD
Z/BOOVHgCN9itVbiSF+Z43k+E2jyLmsMAawTEh/JHZ0GJ5CUt1ZFKtghR6YHVnzm
yfLRns8XYxgU4uPTkIYJg01L5Q96cGvd71NGZ4VOuAYMeAqr4XFQeFRFzmoPL6FK
HPFmxgxsXxDefw1eP3t+NhiFsieuTAZERM/GoNHj2+TWiVCAO/sCYHritd5lgzc1
veJB+ix52sOgPBKvjalDm4IXXHmf0COrLouf3arc1+UHMZi9AzfSYHaLIrTH5clc
jsgHQQOcpoD81aDpqj8bf26fEyx2dr0c8x577cs9YHZqoYvJ0EwDsKw+cDjxSlRB
LGTNwDrjW/y2HO32
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:58 2023 by rpki-client on console-ams.rpki-client.org