Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/f8c50e73888ba6517f4af02ca65cba2c497c2d4c.roa
File:                     f8c50e73888ba6517f4af02ca65cba2c497c2d4c.roa (raw, json)
Hash identifier:          RIjrB3A9Z0S37c2Et9UOfY0N0Zdsq1RqS372tyiigv0=
Subject key identifier:   FC:72:1D:C1:C4:26:6F:6C:E3:EE:FD:8B:E6:C8:99:24:37:9B:8B:49
Certificate issuer:       /CN=513674dcb37b91021affeddf80ef34c924423627
Certificate serial:       1FE2FD
Authority key identifier: 9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/f8c50e73888ba6517f4af02ca65cba2c497c2d4c.roa
Signing time:             Thu 11 May 2023 19:24:21 +0000
ROA not before:           Wed 10 May 2023 19:24:21 +0000
ROA not after:            Sun 11 May 2025 19:24:21 +0000
asID:                     52392
IP address blocks:        190.99.120.0/24 maxlen: 24
                          190.99.121.0/24 maxlen: 24
                          190.99.122.0/24 maxlen: 24
                          190.99.123.0/24 maxlen: 24
                          190.99.124.0/24 maxlen: 24
                          190.99.125.0/24 maxlen: 24
                          190.99.126.0/24 maxlen: 24
                          190.99.127.0/24 maxlen: 24
                          2803:b100:9::/48 maxlen: 48
                          2803:b100:b::/48 maxlen: 48
                          2803:b100:a::/48 maxlen: 48
                          2803:b100:8::/48 maxlen: 48
                          2803:b100:1::/48 maxlen: 48
                          2803:b100::/48 maxlen: 48
                          2803:b100:3::/48 maxlen: 48
                          2803:b100:2::/48 maxlen: 48
                          2803:b100:6::/48 maxlen: 48
                          2803:b100:e::/48 maxlen: 48
                          2803:b100:7::/48 maxlen: 48
                          2803:b100:c::/48 maxlen: 48
                          2803:b100:f::/48 maxlen: 48
                          2803:b100:4::/48 maxlen: 48
                          2803:b100:d::/48 maxlen: 48
                          2803:b100:5::/48 maxlen: 48
                          2803:b100:10::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2089725 (0x1fe2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513674dcb37b91021affeddf80ef34c924423627
        Validity
            Not Before: May 10 19:24:21 2023 GMT
            Not After : May 11 19:24:21 2025 GMT
        Subject: CN=f8c50e73888ba6517f4af02ca65cba2c497c2d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:26:be:17:00:05:d2:cd:58:c2:6f:69:4e:38:
                    db:ba:4f:88:21:67:4f:cc:42:c3:08:7c:ca:df:f1:
                    4a:e2:5a:e1:74:a9:76:25:16:66:63:8d:47:fd:10:
                    13:8c:75:d9:5e:b7:fb:b8:b7:b5:69:1e:b8:a7:d9:
                    cb:b6:96:20:3e:e3:9c:c7:08:84:e7:12:60:ff:e6:
                    25:65:1a:34:5c:5f:75:dc:62:38:63:42:60:f4:29:
                    1c:75:8d:3e:55:97:5b:aa:71:d3:a4:df:6b:3a:be:
                    3c:51:ee:8c:af:19:40:28:0f:fb:b4:29:b3:9d:95:
                    94:7e:55:e5:58:20:76:df:73:08:1d:a6:39:60:64:
                    25:79:e8:35:27:a4:98:b9:7d:db:e1:96:9d:3b:3b:
                    f4:c6:07:cb:a3:bd:ad:9a:6c:f2:48:26:95:ba:46:
                    86:d4:37:57:37:59:55:a5:ca:b6:bc:ff:1a:6c:cb:
                    fe:99:b2:a6:fc:f9:0e:9b:27:4f:36:a3:c7:ff:0f:
                    29:a7:eb:49:0d:bd:eb:36:fc:15:ef:42:48:f7:f1:
                    e1:e0:2a:04:43:c9:fd:47:0b:c4:5a:ad:53:4b:71:
                    6d:a9:79:b5:4e:7e:54:25:ac:3a:b1:93:22:7a:d3:
                    3f:71:cf:85:2d:76:64:18:d2:a5:56:bc:a4:a4:38:
                    06:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:72:1D:C1:C4:26:6F:6C:E3:EE:FD:8B:E6:C8:99:24:37:9B:8B:49
            X509v3 Authority Key Identifier:
                keyid:9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/f8c50e73888ba6517f4af02ca65cba2c497c2d4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.120.0/21
                IPv6:
                  2803:b100::/43

    Signature Algorithm: sha256WithRSAEncryption
         8b:fb:40:64:a6:1d:21:93:9b:0a:f7:01:1a:0b:5e:16:6b:99:
         9a:b2:9f:29:80:87:96:37:46:91:73:db:59:ec:12:a6:de:e9:
         f1:12:ec:5a:aa:27:2a:28:83:1f:a6:ba:c5:c3:47:24:a1:a1:
         b7:2c:c7:60:d6:b9:b3:80:3d:77:74:3e:d5:84:81:2c:57:11:
         35:e6:9e:12:75:6d:2f:71:ed:28:91:7c:1e:c1:5d:8a:db:ac:
         8b:18:04:35:7c:7f:94:3f:7c:dd:29:1a:ba:7e:cb:bd:54:c9:
         75:63:03:70:13:e1:67:5d:21:17:f2:73:8f:fa:a8:16:5e:59:
         13:31:b3:96:e5:3e:cc:aa:9d:3a:2b:28:bf:dc:30:f1:57:73:
         7c:ac:f5:37:67:74:15:9f:73:f0:d9:91:1c:11:34:b3:24:d3:
         cd:43:c6:dd:9b:e9:68:f9:a5:73:aa:50:0a:65:2e:c7:c8:09:
         65:2e:b8:a0:8d:3f:85:f5:6d:41:ab:88:01:b2:cd:22:71:be:
         0a:00:62:35:30:76:55:48:1b:9f:a2:46:58:68:a0:32:04:e9:
         59:df:5f:10:f2:75:4d:24:2a:d8:50:52:ab:d6:d4:55:69:5c:
         70:6d:8a:22:3a:5a:77:fe:b0:fe:e1:8e:b2:0b:db:58:ef:e8:
         db:ea:40:2b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDH+L9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
MzY3NGRjYjM3YjkxMDIxYWZmZWRkZjgwZWYzNGM5MjQ0MjM2MjcwHhcNMjMwNTEw
MTkyNDIxWhcNMjUwNTExMTkyNDIxWjAzMTEwLwYDVQQDEyhmOGM1MGU3Mzg4OGJh
NjUxN2Y0YWYwMmNhNjVjYmEyYzQ5N2MyZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhya+FwAF0s1Ywm9pTjjbuk+IIWdPzELDCHzK3/FK4lrhdKl2
JRZmY41H/RATjHXZXrf7uLe1aR64p9nLtpYgPuOcxwiE5xJg/+YlZRo0XF913GI4
Y0Jg9CkcdY0+VZdbqnHTpN9rOr48Ue6MrxlAKA/7tCmznZWUflXlWCB233MIHaY5
YGQleeg1J6SYuX3b4ZadOzv0xgfLo72tmmzySCaVukaG1DdXN1lVpcq2vP8abMv+
mbKm/PkOmydPNqPH/w8pp+tJDb3rNvwV70JI9/Hh4CoEQ8n9RwvEWq1TS3FtqXm1
Tn5UJaw6sZMietM/cc+FLXZkGNKlVrykpDgGDwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFPxyHcHEJm9s4+79i+bImSQ3m4tJMB8GA1UdIwQYMBaAFJ/mwOD42sLEHIxL
66NQ5S8YJXBAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzNjc0
ZGNiMzdiOTEwMjFhZmZlZGRmODBlZjM0YzkyNDQyMzYyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjljY2RjMmItMDZmZC00YTI0LWJkMzYtOTU0NTZm
ODA5NTFjL2Y4YzUwZTczODg4YmE2NTE3ZjRhZjAyY2E2NWNiYTJjNDk3YzJkNGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOWNjZGMyYi0wNmZkLTRhMjQtYmQzNi05NTQ1
NmY4MDk1MWMvNTEzNjc0ZGNiMzdiOTEwMjFhZmZlZGRmODBlZjM0YzkyNDQyMzYy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEA75jeDAPBAIAAjAJAwcFKAOxAAAAMA0GCSqGSIb3DQEBCwUA
A4IBAQCL+0Bkph0hk5sK9wEaC14Wa5masp8pgIeWN0aRc9tZ7BKm3unxEuxaqicq
KIMfprrFw0ckoaG3LMdg1rmzgD13dD7VhIEsVxE15p4SdW0vce0okXwewV2K26yL
GAQ1fH+UP3zdKRq6fsu9VMl1YwNwE+FnXSEX8nOP+qgWXlkTMbOW5T7Mqp06Kyi/
3DDxV3N8rPU3Z3QVn3Pw2ZEcETSzJNPNQ8bdm+lo+aVzqlAKZS7HyAllLrigjT+F
9W1Bq4gBss0icb4KAGI1MHZVSBufokZYaKAyBOlZ318Q8nVNJCrYUFKr1tRVaVxw
bYoiOlp3/rD+4Y6yC9tY7+jb6kAr
-----END CERTIFICATE-----
Generated at Tue Sep 12 15:29:39 2023 by rpki-client on console-fra.rpki-client.org