Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/fa6f90097428775c15a4e761ccea60863a97d729.roa
File:                     fa6f90097428775c15a4e761ccea60863a97d729.roa (raw, json)
Hash identifier:          wK66+WUl6yLMAJ9xbJ56pES33jBfuuvVC6ckVD3ta0U=
Subject key identifier:   11:AD:8B:4E:24:4B:2B:21:D0:2A:CF:17:61:26:9A:D3:AD:53:39:C2
Certificate issuer:       /CN=6ad6db935edff4c1f2be54056c36a0c9320b83cb
Certificate serial:       128976
Authority key identifier: 1D:EE:72:03:4D:B4:85:4A:BC:28:94:F2:44:48:08:37:78:2A:07:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ad6db935edff4c1f2be54056c36a0c9320b83cb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/fa6f90097428775c15a4e761ccea60863a97d729.roa
Signing time:             Tue 09 Aug 2022 14:15:43 +0000
ROA not before:           Tue 09 Aug 2022 14:15:42 +0000
ROA not after:            Mon 09 Aug 2027 14:15:42 +0000
asID:                     270075
IP address blocks:        200.10.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214838 (0x128976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad6db935edff4c1f2be54056c36a0c9320b83cb
        Validity
            Not Before: Aug  9 14:15:42 2022 GMT
            Not After : Aug  9 14:15:42 2027 GMT
        Subject: CN=fa6f90097428775c15a4e761ccea60863a97d729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:a0:48:b4:94:69:d1:59:43:7e:bc:70:b1:
                    89:45:d7:bf:e5:1c:31:2e:c4:13:6c:24:4a:0b:55:
                    51:53:00:f5:3d:5d:41:5d:78:c0:fa:26:7d:5e:1b:
                    5e:52:eb:e1:cd:83:85:12:ef:18:67:9a:87:0e:0a:
                    9b:35:56:ba:81:07:60:d1:4b:1e:b6:1f:d6:71:ea:
                    8d:6a:60:f4:37:9e:64:b7:85:50:3e:61:57:94:fa:
                    2f:be:9d:b2:59:5a:8f:37:28:bf:e4:9f:eb:08:c6:
                    82:8c:30:fa:af:a4:42:00:ab:2a:91:ae:54:0a:43:
                    38:64:1a:9e:4f:b4:cb:08:99:16:16:91:8e:7a:e0:
                    75:61:c4:2d:78:a8:88:91:0c:73:d4:a1:74:bb:61:
                    58:90:f6:ee:84:fb:14:70:ed:b1:5e:d9:fc:0b:d0:
                    73:23:a9:09:1d:63:6a:4b:af:6f:6f:7f:80:fe:4e:
                    87:84:ab:ee:83:d6:6e:19:42:5c:f8:f3:02:c5:fc:
                    20:62:58:3b:19:9b:31:e4:2b:3a:40:8d:b2:14:8b:
                    6a:fa:fb:37:70:d2:94:e9:c4:b9:9d:9c:84:30:a5:
                    ea:46:c9:de:e9:f7:ad:35:55:fe:b7:39:fd:6b:6f:
                    cf:57:64:32:8c:1c:16:11:c3:c6:50:5f:cb:1e:fd:
                    02:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AD:8B:4E:24:4B:2B:21:D0:2A:CF:17:61:26:9A:D3:AD:53:39:C2
            X509v3 Authority Key Identifier:
                keyid:1D:EE:72:03:4D:B4:85:4A:BC:28:94:F2:44:48:08:37:78:2A:07:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ad6db935edff4c1f2be54056c36a0c9320b83cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/fa6f90097428775c15a4e761ccea60863a97d729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/6ad6db935edff4c1f2be54056c36a0c9320b83cb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:95:81:2e:1a:8d:73:af:74:88:85:35:8f:8a:db:b7:44:c0:
         3f:da:fa:d8:c5:93:8f:a3:97:3f:f7:9e:13:81:57:7a:db:6a:
         3d:1e:8b:dd:99:2d:51:44:4c:b4:87:24:27:6f:e0:90:92:89:
         4c:7a:80:95:0e:ff:7c:5d:92:06:00:9c:10:b1:09:1c:fa:14:
         22:f7:46:be:b6:e7:05:1a:ba:0e:c7:82:f8:8c:59:8b:4e:cc:
         46:87:05:f8:3d:9a:dd:16:0d:8e:61:2a:99:44:8e:83:44:8b:
         f7:20:ed:c0:2b:88:09:39:c8:e8:4d:c4:09:e1:c4:b8:53:fd:
         d1:fe:23:2b:27:c1:9f:24:8d:ec:14:a4:9a:a4:6c:9c:fc:a7:
         11:13:eb:02:8f:7a:c4:fe:9a:20:37:5d:36:ae:3b:c4:e8:c9:
         54:ca:f4:eb:fc:4a:dd:2b:ec:f4:ed:08:ed:71:5f:e2:d1:47:
         e7:cc:da:44:61:fb:81:cd:d3:ec:82:94:b9:38:b3:16:89:54:
         40:10:7f:e0:82:f0:0b:ed:8d:3e:76:65:68:a7:3c:bd:29:77:
         72:55:a1:f6:04:08:37:42:a4:ed:bf:2e:ad:2d:e1:5f:e8:b7:
         13:d7:b2:f0:fc:b7:57:1e:7a:cf:3f:e7:fd:df:cd:78:e3:b3:
         df:d7:1c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org