Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/f276735263c0c689813b4e18ad7d4a4a0456c472.roa
File:                     f276735263c0c689813b4e18ad7d4a4a0456c472.roa (raw, json)
Hash identifier:          2WKDsriBIhUi0hmkAxPWUXQTZ/LQmLM82zqldpHDbs8=
Subject key identifier:   5F:4F:B9:DF:74:22:E6:30:5F:53:03:D1:B2:DF:BA:BA:E7:A7:F2:00
Certificate issuer:       /CN=07a3e63d1966870c34f83b79e6705d8dc3f9b809
Certificate serial:       12FE0D
Authority key identifier: E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/f276735263c0c689813b4e18ad7d4a4a0456c472.roa
Signing time:             Fri 03 Sep 2021 23:45:27 +0000
ROA not before:           Fri 27 Aug 2021 03:00:00 +0000
ROA not after:            Sun 27 Aug 2023 03:00:00 +0000
asID:                     7049
IP address blocks:        200.59.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244685 (0x12fe0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a3e63d1966870c34f83b79e6705d8dc3f9b809
        Validity
            Not Before: Aug 27 03:00:00 2021 GMT
            Not After : Aug 27 03:00:00 2023 GMT
        Subject: CN=f276735263c0c689813b4e18ad7d4a4a0456c472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:eb:a4:4e:f5:55:1c:50:8f:f5:2b:ed:54:13:
                    ce:cc:64:95:fe:56:b6:48:6d:6c:db:b6:a8:f8:1e:
                    b2:49:c7:8e:0b:21:1e:21:bd:bd:d7:13:fd:d7:12:
                    2c:d5:99:cd:19:85:0b:38:e0:db:22:1d:17:b5:66:
                    65:f8:69:db:ce:6b:8f:6b:ed:d1:0e:ef:6b:63:9b:
                    da:d0:17:74:7f:86:75:28:3d:d0:f6:40:9e:b0:c2:
                    9b:6e:18:ed:87:1e:19:b9:9a:75:f6:c2:d5:76:25:
                    10:52:a5:24:c4:de:7a:84:c9:2f:7a:d9:14:c7:e5:
                    7d:31:c8:79:18:7d:84:96:cc:28:fc:7c:19:de:eb:
                    c1:8d:4b:2d:72:fe:8f:a4:ee:03:f3:50:c6:a8:91:
                    66:e1:60:8a:7d:1d:0b:cb:37:89:43:42:a1:87:6b:
                    cd:90:43:b0:f4:96:8f:91:24:91:84:28:3f:fb:82:
                    77:7f:dd:e6:7a:aa:43:34:00:0f:d3:2c:2f:4a:b2:
                    c3:54:70:d1:d3:6d:9c:72:19:9d:40:ce:e0:a8:de:
                    99:2a:ba:ae:23:0e:c5:f9:34:ce:d6:e3:58:5a:61:
                    8b:b7:42:36:07:9c:6f:40:d0:71:86:e0:91:0f:a0:
                    8b:8a:b3:46:ea:b3:94:66:b0:41:c0:a8:0b:35:41:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4F:B9:DF:74:22:E6:30:5F:53:03:D1:B2:DF:BA:BA:E7:A7:F2:00
            X509v3 Authority Key Identifier:
                keyid:E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/f276735263c0c689813b4e18ad7d4a4a0456c472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/07a3e63d1966870c34f83b79e6705d8dc3f9b809.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:91:c1:e2:0f:88:23:98:80:e3:55:20:7e:7c:0a:99:c4:52:
         25:5e:88:30:60:98:b0:e7:dd:b5:5e:e1:c3:f4:dd:d3:28:ba:
         ef:17:79:df:50:f0:9d:e2:00:3f:43:a0:f9:1b:f6:84:61:e2:
         0d:a4:6f:e7:29:66:78:ba:dd:af:fe:f7:67:1d:8d:79:1c:20:
         5e:09:b8:58:21:f3:fd:4a:20:83:1d:bb:64:5e:b6:56:01:03:
         67:0c:d9:dd:a5:d5:af:f3:ee:7d:27:ea:28:0f:80:ed:3e:b7:
         ba:f1:26:8b:5f:84:85:a6:84:89:5f:ee:74:bf:74:4c:7c:b0:
         ce:46:9d:b1:94:c7:34:04:73:0d:76:85:02:da:c6:26:be:4e:
         5e:e2:c5:89:a8:82:c9:9c:9b:95:6a:f8:2d:10:41:a8:31:ad:
         6d:33:ec:63:8c:94:70:50:c7:84:3f:58:4b:45:59:d5:be:46:
         01:09:63:09:4a:5e:a3:d4:9e:a6:a3:6e:c5:ec:6d:78:b2:5f:
         94:9a:d0:ee:44:27:f2:2d:04:09:5e:81:85:46:66:f4:58:45:
         da:b8:fa:34:28:d2:11:11:65:ad:4a:35:c9:e7:7f:4d:c8:2b:
         7a:ef:a5:85:74:a1:ef:35:ca:dc:47:4a:18:8a:2f:2d:ba:73:
         c0:aa:8e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 09:00:06 2023 by rpki-client on console-fra.rpki-client.org