Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/d042cb8817bb644fe0b6e307d6eb30e0e6f9e145.roa
File:                     d042cb8817bb644fe0b6e307d6eb30e0e6f9e145.roa (raw, json)
Hash identifier:          Zu3lHcU+2XmnvMHriFBTAKdBi1DGGC/MM6p5usumd68=
Subject key identifier:   9E:9D:8B:18:B3:92:34:24:48:4E:57:67:B1:1E:49:83:9D:68:E0:AD
Certificate issuer:       /CN=16b44d2a0bda515371a4ded869185f017218c9f2
Certificate serial:       0D8F0E
Authority key identifier: 8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/d042cb8817bb644fe0b6e307d6eb30e0e6f9e145.roa
Signing time:             Wed 24 Mar 2021 14:30:25 +0000
ROA not before:           Wed 24 Mar 2021 14:30:25 +0000
ROA not after:            Tue 24 Mar 2026 14:30:25 +0000
asID:                     263766
IP address blocks:        190.103.84.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888590 (0xd8f0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b44d2a0bda515371a4ded869185f017218c9f2
        Validity
            Not Before: Mar 24 14:30:25 2021 GMT
            Not After : Mar 24 14:30:25 2026 GMT
        Subject: CN=d042cb8817bb644fe0b6e307d6eb30e0e6f9e145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:34:9b:78:3e:1a:e8:b1:6d:fa:b4:ed:15:
                    46:34:59:9f:91:e3:10:9a:cb:b0:8e:c5:20:5a:d4:
                    cc:bb:b0:f7:41:ef:6e:f6:49:29:b2:4f:e2:a0:29:
                    6c:68:bf:f6:ea:98:89:f9:f8:a3:6d:81:ed:62:9a:
                    9c:06:6d:7c:a3:1c:2e:54:a9:cd:86:05:c1:67:9c:
                    48:52:03:85:e2:f2:c4:9f:9f:7d:60:f7:15:be:e3:
                    fb:7c:e7:18:96:86:b7:b2:66:08:ec:9d:a6:a2:a2:
                    4e:fb:57:20:e2:7a:ec:85:d5:ee:d3:f0:64:3a:a4:
                    64:35:50:f8:79:e3:fc:08:2b:03:ea:5c:56:91:a4:
                    94:30:f3:da:90:91:ea:05:54:85:0e:d8:3d:4f:77:
                    f5:d3:cb:05:cc:6b:d3:b0:67:b2:0a:c9:46:fe:6c:
                    4b:1a:38:61:1b:95:c6:a0:68:ba:ab:29:9e:95:6b:
                    a9:39:22:83:a5:30:6a:44:d8:c1:c6:80:6b:68:5f:
                    94:fe:c2:ec:c8:76:6a:9d:f2:c2:2a:1e:81:ae:45:
                    80:14:65:84:f9:75:e9:14:25:f2:78:0b:4b:c4:38:
                    80:0e:24:9a:2a:42:2f:d8:cb:72:05:53:b7:82:70:
                    22:3e:e9:29:b5:5b:b0:0f:4b:8b:91:9d:3f:3d:16:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9D:8B:18:B3:92:34:24:48:4E:57:67:B1:1E:49:83:9D:68:E0:AD
            X509v3 Authority Key Identifier:
                keyid:8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/d042cb8817bb644fe0b6e307d6eb30e0e6f9e145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/16b44d2a0bda515371a4ded869185f017218c9f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:28:69:8d:6c:fe:81:24:f9:16:35:55:e9:e2:a1:93:b8:84:
         78:6f:1c:c9:9c:8f:5e:46:df:55:58:d9:4a:b5:94:0b:d6:93:
         3f:d9:e1:40:0e:58:a1:61:dd:2d:ec:65:f1:14:2b:ef:c1:67:
         3e:3b:34:05:7a:fb:42:25:5e:79:f0:d5:b8:66:6c:79:94:f0:
         bc:ce:d0:1f:62:b5:49:26:8b:b4:38:24:44:b2:09:73:4b:a4:
         ed:bf:7f:58:d1:77:ba:68:38:ba:77:50:ad:f4:9e:18:85:1d:
         12:0b:61:68:14:5e:96:a4:91:8b:f4:14:4e:ec:cc:ae:7e:68:
         cf:2f:46:ba:80:db:b8:ea:d6:b9:bb:96:6f:b5:2b:fe:c4:b7:
         85:32:1e:c5:b5:8c:17:cd:8e:1c:96:91:5e:0e:93:88:59:09:
         0d:25:0f:23:61:be:3a:91:f0:b7:fa:cb:65:b0:8e:26:a7:71:
         91:dc:e6:d7:d0:59:ef:3c:35:46:b7:16:c6:01:9c:56:fa:5b:
         12:97:91:c9:80:51:55:60:2c:b7:48:ac:15:a7:4e:f8:d4:d6:
         91:bb:30:3d:95:25:da:e8:ba:4c:aa:41:16:61:98:a4:b1:c0:
         06:46:d7:f1:75:ab:0f:fd:a7:84:4e:47:74:29:3e:d8:db:fa:
         67:91:3c:95
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDY8OMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE2
YjQ0ZDJhMGJkYTUxNTM3MWE0ZGVkODY5MTg1ZjAxNzIxOGM5ZjIwHhcNMjEwMzI0
MTQzMDI1WhcNMjYwMzI0MTQzMDI1WjAzMTEwLwYDVQQDEyhkMDQyY2I4ODE3YmI2
NDRmZTBiNmUzMDdkNmViMzBlMGU2ZjllMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAooU0m3g+Guixbfq07RVGNFmfkeMQmsuwjsUgWtTMu7D3Qe9u
9kkpsk/ioClsaL/26piJ+fijbYHtYpqcBm18oxwuVKnNhgXBZ5xIUgOF4vLEn599
YPcVvuP7fOcYloa3smYI7J2moqJO+1cg4nrshdXu0/BkOqRkNVD4eeP8CCsD6lxW
kaSUMPPakJHqBVSFDtg9T3f108sFzGvTsGeyCslG/mxLGjhhG5XGoGi6qymelWup
OSKDpTBqRNjBxoBraF+U/sLsyHZqnfLCKh6BrkWAFGWE+XXpFCXyeAtLxDiADiSa
KkIv2MtyBVO3gnAiPukptVuwD0uLkZ0/PRaLHQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ6dixizkjQkSE5XZ7EeSYOdaOCtMB8GA1UdIwQYMBaAFIvUoyfHIG6r4kOD
a0NxxNHxX6EkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTZiNDRk
MmEwYmRhNTE1MzcxYTRkZWQ4NjkxODVmMDE3MjE4YzlmMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmFhOGE1MWQtZjllYy00ZDEwLWFmNmEtOTM0YmU0
NTU2ZTVlL2QwNDJjYjg4MTdiYjY0NGZlMGI2ZTMwN2Q2ZWIzMGUwZTZmOWUxNDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mYWE4YTUxZC1mOWVjLTRkMTAtYWY2YS05MzRi
ZTQ1NTZlNWUvMTZiNDRkMmEwYmRhNTE1MzcxYTRkZWQ4NjkxODVmMDE3MjE4Yzlm
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr5nVDANBgkqhkiG9w0BAQsFAAOCAQEAiyhpjWz+gST5FjVV
6eKhk7iEeG8cyZyPXkbfVVjZSrWUC9aTP9nhQA5YoWHdLexl8RQr78FnPjs0BXr7
QiVeefDVuGZseZTwvM7QH2K1SSaLtDgkRLIJc0uk7b9/WNF3umg4undQrfSeGIUd
EgthaBRelqSRi/QUTuzMrn5ozy9GuoDbuOrWubuWb7Ur/sS3hTIexbWMF82OHJaR
Xg6TiFkJDSUPI2G+OpHwt/rLZbCOJqdxkdzm19BZ7zw1RrcWxgGcVvpbEpeRyYBR
VWAst0isFadO+NTWkbswPZUl2ui6TKpBFmGYpLHABkbX8XWrD/2nhE5HdCk+2Nv6
Z5E8lQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:59 2023 by rpki-client on console-ams.rpki-client.org