Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/4549f669c79bb3dbdcd56b996d3035d2b17c78ba.roa
File:                     4549f669c79bb3dbdcd56b996d3035d2b17c78ba.roa (raw, json)
Hash identifier:          jBXvxExmNRY7Eo3fhd1D9lo5xSIEaWS6epVAS2cznJY=
Subject key identifier:   25:1A:C1:54:B6:21:BC:73:FA:C2:84:AD:E6:D4:CA:80:08:A4:46:E6
Certificate issuer:       /CN=4e26de49cdf671c8caceba8adf635148030505f5
Certificate serial:       10B567
Authority key identifier: B6:10:37:DE:0E:94:04:7D:4A:C0:0B:7B:97:FC:4B:D0:84:AE:ED:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e26de49cdf671c8caceba8adf635148030505f5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/4549f669c79bb3dbdcd56b996d3035d2b17c78ba.roa
Signing time:             Mon 18 Jul 2022 17:26:41 +0000
ROA not before:           Mon 18 Jul 2022 03:00:00 +0000
ROA not after:            Thu 18 Jul 2024 03:00:00 +0000
asID:                     265703
IP address blocks:        200.63.96.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095015 (0x10b567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e26de49cdf671c8caceba8adf635148030505f5
        Validity
            Not Before: Jul 18 03:00:00 2022 GMT
            Not After : Jul 18 03:00:00 2024 GMT
        Subject: CN=4549f669c79bb3dbdcd56b996d3035d2b17c78ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:50:83:26:e5:da:e5:8f:23:96:3f:70:e7:41:
                    00:1c:8a:ad:d2:e0:e1:dc:08:a0:62:b4:62:bd:0f:
                    ab:18:db:c3:5e:6f:ea:e9:5f:a0:b2:2b:f0:fa:88:
                    0d:9b:ae:9d:ff:50:3d:20:ad:e0:c9:5f:6a:a0:8d:
                    17:71:da:e7:57:ca:01:c6:43:39:8e:36:a0:89:03:
                    54:19:c4:5a:9a:4f:d2:65:67:8c:02:14:05:c6:68:
                    e2:88:05:de:7e:7c:7f:35:70:1b:31:40:51:2c:04:
                    3a:43:69:a1:ab:5e:f9:33:85:77:03:8f:3e:12:87:
                    45:d6:c5:a9:a5:47:21:38:60:5a:c8:2f:72:b0:76:
                    e9:7d:7b:5b:f8:88:cb:38:1f:9e:b3:c7:2b:ac:07:
                    84:1a:7e:0a:a8:fe:ec:94:72:6f:a5:82:5e:16:e5:
                    4b:bb:4c:2b:c5:5d:9b:00:d5:d0:bb:75:08:73:91:
                    33:b0:76:74:bf:0a:8c:0f:0a:af:95:9c:48:a1:ad:
                    9f:7b:e7:29:c8:66:14:42:17:c1:d2:19:3c:9d:d8:
                    f1:8f:fc:ca:cb:91:a3:e0:ea:ec:38:cb:4f:e2:7b:
                    a4:67:94:df:e4:6d:91:1e:6f:03:40:2c:50:90:7a:
                    a4:7d:f4:55:03:2e:49:61:17:b9:8b:1a:c7:cd:9f:
                    23:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1A:C1:54:B6:21:BC:73:FA:C2:84:AD:E6:D4:CA:80:08:A4:46:E6
            X509v3 Authority Key Identifier:
                keyid:B6:10:37:DE:0E:94:04:7D:4A:C0:0B:7B:97:FC:4B:D0:84:AE:ED:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e26de49cdf671c8caceba8adf635148030505f5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/4549f669c79bb3dbdcd56b996d3035d2b17c78ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/4e26de49cdf671c8caceba8adf635148030505f5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:20:b8:33:24:27:75:29:21:f1:7d:4d:61:88:63:bd:c5:f3:
         20:0e:87:62:4f:da:2d:36:1b:bb:80:a3:60:a9:d9:e1:40:9f:
         d5:a7:56:b7:5e:cd:02:c4:2d:85:79:47:2c:96:d5:08:69:f9:
         04:75:59:bc:59:d4:c1:ae:01:a7:38:6a:00:a7:a3:ca:88:10:
         e1:aa:51:45:11:ee:87:e9:fa:8f:3c:ff:ef:65:3c:f3:ff:c1:
         e9:67:16:a4:04:08:c9:d4:27:cb:3d:b5:30:d4:7e:c8:a9:ce:
         d0:3f:2e:b0:39:8d:be:8c:6d:ac:65:6a:fb:e6:37:91:9f:98:
         ec:8c:bd:d0:fa:cf:b3:19:d0:8e:da:70:80:1c:9c:76:e4:04:
         bf:34:d0:fb:2c:fe:97:37:11:d7:ad:65:3a:8c:78:00:ee:1b:
         e2:57:a0:6c:35:b6:bc:c7:20:03:a3:b1:af:c2:b8:82:be:ae:
         9e:18:a6:e9:b6:e5:7f:51:6e:8f:f3:5e:3d:62:2a:d3:1f:39:
         0d:ad:4a:78:d0:76:02:f1:97:13:41:b2:55:aa:90:a8:5f:c8:
         bc:0c:bf:5b:0e:8f:32:3d:82:da:a1:57:d9:ce:de:f8:58:df:
         3d:37:94:88:47:33:69:e9:13:d9:15:05:0f:8b:c0:28:3f:d2:
         9a:1b:a7:26
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDELVnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRl
MjZkZTQ5Y2RmNjcxYzhjYWNlYmE4YWRmNjM1MTQ4MDMwNTA1ZjUwHhcNMjIwNzE4
MDMwMDAwWhcNMjQwNzE4MDMwMDAwWjAzMTEwLwYDVQQDEyg0NTQ5ZjY2OWM3OWJi
M2RiZGNkNTZiOTk2ZDMwMzVkMmIxN2M3OGJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlFCDJuXa5Y8jlj9w50EAHIqt0uDh3AigYrRivQ+rGNvDXm/q
6V+gsivw+ogNm66d/1A9IK3gyV9qoI0XcdrnV8oBxkM5jjagiQNUGcRamk/SZWeM
AhQFxmjiiAXefnx/NXAbMUBRLAQ6Q2mhq175M4V3A48+EodF1sWppUchOGBayC9y
sHbpfXtb+IjLOB+es8crrAeEGn4KqP7slHJvpYJeFuVLu0wrxV2bANXQu3UIc5Ez
sHZ0vwqMDwqvlZxIoa2fe+cpyGYUQhfB0hk8ndjxj/zKy5Gj4OrsOMtP4nukZ5Tf
5G2RHm8DQCxQkHqkffRVAy5JYRe5ixrHzZ8jgQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCUawVS2Ibxz+sKErebUyoAIpEbmMB8GA1UdIwQYMBaAFLYQN94OlAR9SsAL
e5f8S9CEru1WMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGUyNmRl
NDljZGY2NzFjOGNhY2ViYThhZGY2MzUxNDgwMzA1MDVmNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGNjM2I0NzctYzU0Mi00NDNlLWEwYzAtZWFkYjU0
OGMzNjFjLzQ1NDlmNjY5Yzc5YmIzZGJkY2Q1NmI5OTZkMzAzNWQyYjE3Yzc4YmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wY2MzYjQ3Ny1jNTQyLTQ0M2UtYTBjMC1lYWRi
NTQ4YzM2MWMvNGUyNmRlNDljZGY2NzFjOGNhY2ViYThhZGY2MzUxNDgwMzA1MDVm
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8g/YDANBgkqhkiG9w0BAQsFAAOCAQEAYyC4MyQndSkh8X1N
YYhjvcXzIA6HYk/aLTYbu4CjYKnZ4UCf1adWt17NAsQthXlHLJbVCGn5BHVZvFnU
wa4BpzhqAKejyogQ4apRRRHuh+n6jzz/72U88//B6WcWpAQIydQnyz21MNR+yKnO
0D8usDmNvoxtrGVq++Y3kZ+Y7Iy90PrPsxnQjtpwgBycduQEvzTQ+yz+lzcR161l
Oox4AO4b4legbDW2vMcgA6Oxr8K4gr6unhim6bblf1Fuj/NePWIq0x85Da1KeNB2
AvGXE0GyVaqQqF/IvAy/Ww6PMj2C2qFX2c7e+FjfPTeUiEczaekT2RUFD4vAKD/S
mhunJg==
-----END CERTIFICATE-----
Generated at Fri Sep 15 05:31:38 2023 by rpki-client on console-ams.rpki-client.org