Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/23cbb3036edcb5844b45012ba74e37c76ab91d53.roa
File:                     23cbb3036edcb5844b45012ba74e37c76ab91d53.roa (raw, json)
Hash identifier:          1/BEt5KBLVEpNnxINpk8PGBBqQlCQBy0FYuh/aa8zFs=
Subject key identifier:   2F:1C:E9:6B:C8:AB:69:13:09:96:13:46:EE:6A:E7:CA:E4:EB:F5:8B
Certificate issuer:       /CN=8977e71e589f7dff93910384f64766de5bd105bb
Certificate serial:       050731
Authority key identifier: 1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8977e71e589f7dff93910384f64766de5bd105bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/23cbb3036edcb5844b45012ba74e37c76ab91d53.roa
Signing time:             Tue 21 Sep 2021 22:56:33 +0000
ROA not before:           Tue 21 Sep 2021 03:00:00 +0000
ROA not after:            Thu 21 Sep 2023 03:00:00 +0000
asID:                     262191
IP address blocks:        191.102.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329521 (0x50731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8977e71e589f7dff93910384f64766de5bd105bb
        Validity
            Not Before: Sep 21 03:00:00 2021 GMT
            Not After : Sep 21 03:00:00 2023 GMT
        Subject: CN=23cbb3036edcb5844b45012ba74e37c76ab91d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fe:60:96:62:be:43:72:88:75:bf:16:09:07:
                    a4:6d:aa:89:ac:f2:60:9c:5c:4b:b7:e2:d8:f8:ab:
                    1c:cb:ed:d2:ef:16:05:be:da:44:ad:08:ea:74:93:
                    1d:cf:07:36:48:79:d0:14:fe:46:8d:2b:f2:87:a7:
                    68:87:ce:c3:95:2d:8c:ef:db:ab:01:5b:45:b9:ff:
                    84:5a:07:b7:13:95:6b:31:fb:92:0d:cd:4d:df:84:
                    78:9a:0e:d6:69:9d:4e:44:a6:b6:53:27:e6:50:c0:
                    36:8a:67:be:e2:85:6c:d6:cc:75:34:d5:c1:96:ed:
                    61:0d:b8:f0:9c:7a:27:e0:a5:0a:51:7d:c4:03:2d:
                    de:dc:5e:e2:51:8c:20:36:12:b4:eb:a3:59:c9:8a:
                    cd:00:e8:d5:c8:14:54:66:bb:b1:4e:33:30:7c:0c:
                    80:d8:ad:75:0d:ed:ac:83:d5:15:e7:64:79:0d:34:
                    24:74:3e:c6:a1:8d:2f:cb:ed:8e:40:51:ec:0c:97:
                    4e:27:8b:34:43:d8:69:2c:4a:e9:bb:54:fc:42:19:
                    ce:07:6d:34:67:0b:12:5a:f3:43:75:8b:22:8a:b5:
                    61:78:31:4f:30:68:9f:96:da:2e:df:54:fe:a2:66:
                    16:cb:0f:b7:95:65:16:e0:d7:82:57:95:a6:bc:37:
                    b2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1C:E9:6B:C8:AB:69:13:09:96:13:46:EE:6A:E7:CA:E4:EB:F5:8B
            X509v3 Authority Key Identifier:
                keyid:1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8977e71e589f7dff93910384f64766de5bd105bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/23cbb3036edcb5844b45012ba74e37c76ab91d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/8977e71e589f7dff93910384f64766de5bd105bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:fd:83:43:e0:21:37:e6:c1:17:27:c8:9f:b6:b4:c3:22:55:
         e7:1b:3c:dc:01:63:f7:4d:4f:fa:8f:dc:b6:bd:c3:77:ab:bc:
         58:ae:6c:42:80:a8:c5:30:cc:19:5b:7d:92:9c:bd:be:9e:4c:
         1b:1f:fa:31:96:69:37:01:fa:43:54:9c:c9:7a:a7:5c:19:1a:
         00:60:16:7f:63:3c:3a:51:1b:a5:b4:5d:a3:89:24:43:40:92:
         72:63:c7:e4:4a:a8:ea:11:0b:e2:fb:cb:9b:6e:f9:77:e7:dc:
         e6:fe:8d:6b:2f:03:fd:1d:74:b2:52:b5:ac:15:1c:e8:92:73:
         ea:ec:10:47:5c:3d:15:7f:39:bd:af:ff:9a:6e:2e:7a:a9:36:
         d1:87:df:8f:6d:9b:f1:17:8c:ea:f4:0f:c0:a9:74:be:a1:8d:
         21:b7:a6:7b:42:d4:48:98:65:f4:27:c4:ae:9f:3a:a4:3b:7b:
         1d:0a:d5:5f:f9:27:2a:05:79:6d:34:b2:d9:6b:9c:a6:0d:7d:
         d0:24:33:59:b2:6a:67:d8:c6:37:5e:67:cf:1f:23:06:4f:13:
         5a:90:b4:25:5f:2c:36:a2:57:07:ba:f4:1c:03:90:cc:cc:1b:
         01:fc:a9:68:aa:ed:7c:3a:2b:89:f6:56:aa:c6:03:d0:88:60:
         99:70:98:38
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBQcxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg5
NzdlNzFlNTg5ZjdkZmY5MzkxMDM4NGY2NDc2NmRlNWJkMTA1YmIwHhcNMjEwOTIx
MDMwMDAwWhcNMjMwOTIxMDMwMDAwWjAzMTEwLwYDVQQDEygyM2NiYjMwMzZlZGNi
NTg0NGI0NTAxMmJhNzRlMzdjNzZhYjkxZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh/5glmK+Q3KIdb8WCQekbaqJrPJgnFxLt+LY+Kscy+3S7xYF
vtpErQjqdJMdzwc2SHnQFP5GjSvyh6doh87DlS2M79urAVtFuf+EWge3E5VrMfuS
Dc1N34R4mg7WaZ1ORKa2UyfmUMA2ime+4oVs1sx1NNXBlu1hDbjwnHon4KUKUX3E
Ay3e3F7iUYwgNhK066NZyYrNAOjVyBRUZruxTjMwfAyA2K11De2sg9UV52R5DTQk
dD7GoY0vy+2OQFHsDJdOJ4s0Q9hpLErpu1T8QhnOB200ZwsSWvNDdYsiirVheDFP
MGifltou31T+omYWyw+3lWUW4NeCV5WmvDeyPwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFC8c6WvIq2kTCZYTRu5q58rk6/WLMB8GA1UdIwQYMBaAFBtJKMZJokmmvkck
y1Stj19K97PqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODk3N2U3
MWU1ODlmN2RmZjkzOTEwMzg0ZjY0NzY2ZGU1YmQxMDViYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVjMWJkNTgtOTE2Ni00N2Y3LTlhYWQtMjRlNDNm
OWUyODM4LzIzY2JiMzAzNmVkY2I1ODQ0YjQ1MDEyYmE3NGUzN2M3NmFiOTFkNTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWMxYmQ1OC05MTY2LTQ3ZjctOWFhZC0yNGU0
M2Y5ZTI4MzgvODk3N2U3MWU1ODlmN2RmZjkzOTEwMzg0ZjY0NzY2ZGU1YmQxMDVi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL9mPDANBgkqhkiG9w0BAQsFAAOCAQEACf2DQ+AhN+bBFyfI
n7a0wyJV5xs83AFj901P+o/ctr3Dd6u8WK5sQoCoxTDMGVt9kpy9vp5MGx/6MZZp
NwH6Q1ScyXqnXBkaAGAWf2M8OlEbpbRdo4kkQ0CScmPH5Eqo6hEL4vvLm275d+fc
5v6Nay8D/R10slK1rBUc6JJz6uwQR1w9FX85va//mm4ueqk20Yffj22b8ReM6vQP
wKl0vqGNIbeme0LUSJhl9CfErp86pDt7HQrVX/knKgV5bTSy2Wucpg190CQzWbJq
Z9jGN15nzx8jBk8TWpC0JV8sNqJXB7r0HAOQzMwbAfypaKrtfDorifZWqsYD0Ihg
mXCYOA==
-----END CERTIFICATE-----
Generated at Wed Sep 20 09:21:20 2023 by rpki-client on console-ams.rpki-client.org