Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/7ea8b3e9803bc4a00084089c7e261acf7a800f79.roa
File:                     7ea8b3e9803bc4a00084089c7e261acf7a800f79.roa (raw, json)
Hash identifier:          VM2T38TDaivoyx+odkMkKtunyzNol6fr9YZhn+hAUz4=
Subject key identifier:   9C:60:63:60:65:8E:45:00:D0:DF:AA:03:B6:04:FC:AC:33:12:A7:9C
Certificate issuer:       /CN=07a3e63d1966870c34f83b79e6705d8dc3f9b809
Certificate serial:       24FC78
Authority key identifier: E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/7ea8b3e9803bc4a00084089c7e261acf7a800f79.roa
Signing time:             Sat 26 Aug 2023 08:30:01 +0000
ROA not before:           Fri 25 Aug 2023 08:30:01 +0000
ROA not after:            Sun 24 Aug 2025 08:30:01 +0000
asID:                     7049
IP address blocks:        200.59.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2423928 (0x24fc78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a3e63d1966870c34f83b79e6705d8dc3f9b809
        Validity
            Not Before: Aug 25 08:30:01 2023 GMT
            Not After : Aug 24 08:30:01 2025 GMT
        Subject: CN=7ea8b3e9803bc4a00084089c7e261acf7a800f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5f:19:4c:63:1d:e0:fe:cf:f2:14:c6:3c:87:
                    b7:e6:77:8b:2c:5d:68:d9:39:47:7e:f4:48:83:86:
                    2a:ca:70:31:d2:87:3c:0a:be:48:e0:7d:32:a8:dd:
                    35:41:85:05:44:8a:20:bf:b2:50:2b:b4:b1:93:ca:
                    06:fe:96:e9:49:2d:46:22:86:c4:7b:6d:c4:31:90:
                    4d:8a:d4:38:1b:2b:2d:b3:61:ed:8c:66:94:78:ee:
                    86:d8:2f:b3:e5:54:74:b8:e0:48:85:ab:13:af:27:
                    8a:fa:ce:16:04:8c:a4:b1:6d:15:6f:6a:43:46:dc:
                    8e:14:d9:85:cd:91:aa:81:28:d1:8c:fc:5b:d9:96:
                    0a:b2:c4:df:a5:bc:c8:3d:49:0c:a8:21:36:df:49:
                    1e:37:06:19:f7:df:e8:f5:e2:67:ad:9f:80:6d:63:
                    8d:a6:9c:0e:be:86:6f:e4:6d:8b:e9:95:b5:82:d2:
                    24:0d:4a:ad:ff:61:77:ed:15:c1:ca:72:d1:36:de:
                    c8:63:6e:eb:66:da:7d:f5:66:03:a0:9c:55:6b:c3:
                    2a:42:8b:6c:8d:86:c3:32:5b:3e:f7:6c:39:60:dd:
                    64:39:99:71:02:b8:f3:f3:03:23:74:33:a7:26:14:
                    80:74:40:da:01:3f:a6:7a:ae:74:b3:35:b9:da:61:
                    87:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:60:63:60:65:8E:45:00:D0:DF:AA:03:B6:04:FC:AC:33:12:A7:9C
            X509v3 Authority Key Identifier:
                keyid:E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/7ea8b3e9803bc4a00084089c7e261acf7a800f79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/07a3e63d1966870c34f83b79e6705d8dc3f9b809.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:fb:c1:dd:16:4d:51:f8:64:9b:a1:c6:8a:77:8b:64:9e:1a:
         c7:77:2e:93:05:93:56:b7:a1:61:8f:61:5d:1d:2d:83:69:07:
         e1:06:74:d0:73:25:a7:46:b4:c2:0c:0c:b1:61:3a:19:c0:d5:
         09:ad:ca:c8:da:be:5d:a0:13:a5:2e:0f:d4:48:bc:ba:54:96:
         ee:e0:a2:26:30:e3:0f:0e:95:ad:13:a4:9c:0d:5d:72:c2:64:
         3c:d0:9c:41:30:60:29:16:3d:bd:7e:83:f3:01:12:da:af:10:
         0a:f4:20:61:2f:1d:5f:d7:cd:ac:f0:c6:14:14:d0:b9:c0:8e:
         3e:d4:8d:dc:99:1c:cb:7e:56:42:1a:91:5c:45:f1:fb:f3:2e:
         16:e6:00:16:55:c4:d0:43:14:f6:bb:7e:46:4e:f3:57:1f:5b:
         34:52:32:2e:b6:4d:0e:93:98:5c:4e:6f:aa:eb:c5:e7:91:c7:
         14:10:46:75:d5:7b:81:17:83:a5:57:b1:04:fa:92:b1:93:13:
         12:41:f0:19:35:d6:67:4e:67:45:6f:1b:b8:36:a3:32:2d:04:
         ef:cb:a5:7c:b9:e1:de:1f:75:e8:9e:b2:ca:c0:5a:74:c7:65:
         87:14:77:11:31:78:ef:e0:7a:ff:45:0c:53:42:03:f4:6a:be:
         89:84:10:8a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJPx4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA3
YTNlNjNkMTk2Njg3MGMzNGY4M2I3OWU2NzA1ZDhkYzNmOWI4MDkwHhcNMjMwODI1
MDgzMDAxWhcNMjUwODI0MDgzMDAxWjAzMTEwLwYDVQQDEyg3ZWE4YjNlOTgwM2Jj
NGEwMDA4NDA4OWM3ZTI2MWFjZjdhODAwZjc5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk18ZTGMd4P7P8hTGPIe35neLLF1o2TlHfvRIg4YqynAx0oc8
Cr5I4H0yqN01QYUFRIogv7JQK7Sxk8oG/pbpSS1GIobEe23EMZBNitQ4Gysts2Ht
jGaUeO6G2C+z5VR0uOBIhasTryeK+s4WBIyksW0Vb2pDRtyOFNmFzZGqgSjRjPxb
2ZYKssTfpbzIPUkMqCE230keNwYZ99/o9eJnrZ+AbWONppwOvoZv5G2L6ZW1gtIk
DUqt/2F37RXBynLRNt7IY27rZtp99WYDoJxVa8MqQotsjYbDMls+92w5YN1kOZlx
Arjz8wMjdDOnJhSAdEDaAT+meq50szW52mGHDQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJxgY2BljkUA0N+qA7YE/KwzEqecMB8GA1UdIwQYMBaAFOdPS0wIeE4aTiJM
lXq1t1+B2SSVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDdhM2U2
M2QxOTY2ODcwYzM0ZjgzYjc5ZTY3MDVkOGRjM2Y5YjgwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGNhYzNiODItZjQ4OC00ZGY3LWJjNjctYWQ4NTZh
MTJhYTQzLzdlYThiM2U5ODAzYmM0YTAwMDg0MDg5YzdlMjYxYWNmN2E4MDBmNzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wY2FjM2I4Mi1mNDg4LTRkZjctYmM2Ny1hZDg1
NmExMmFhNDMvMDdhM2U2M2QxOTY2ODcwYzM0ZjgzYjc5ZTY3MDVkOGRjM2Y5Yjgw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMg7NjANBgkqhkiG9w0BAQsFAAOCAQEAHvvB3RZNUfhkm6HG
ineLZJ4ax3cukwWTVrehYY9hXR0tg2kH4QZ00HMlp0a0wgwMsWE6GcDVCa3KyNq+
XaATpS4P1Ei8ulSW7uCiJjDjDw6VrROknA1dcsJkPNCcQTBgKRY9vX6D8wES2q8Q
CvQgYS8dX9fNrPDGFBTQucCOPtSN3Jkcy35WQhqRXEXx+/MuFuYAFlXE0EMU9rt+
Rk7zVx9bNFIyLrZNDpOYXE5vquvF55HHFBBGddV7gReDpVexBPqSsZMTEkHwGTXW
Z05nRW8buDajMi0E78ulfLnh3h916J6yysBadMdlhxR3ETF47+B6/0UMU0ID9Gq+
iYQQig==
-----END CERTIFICATE-----
Generated at Thu Nov 9 19:10:51 2023 by rpki-client on console-ams.rpki-client.org