Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/34e162278f6830d5a7540dc413f2408e297ad194.roa
File:                     34e162278f6830d5a7540dc413f2408e297ad194.roa (raw, json)
Hash identifier:          Gi0U+FMM4wXX1BEUkr5Kn6SZwVEpiFIzpd7tkM34wY8=
Subject key identifier:   EA:7C:18:F3:E9:EB:68:4F:92:29:C9:0C:57:8B:DB:88:C5:FB:F1:54
Certificate issuer:       /CN=324de8920173d39f7e57f07a22d818efa49b5475
Certificate serial:       0864
Authority key identifier: DB:87:53:92:F1:F6:36:60:C3:8D:0B:02:48:CF:61:31:D6:70:90:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/324de8920173d39f7e57f07a22d818efa49b5475.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/34e162278f6830d5a7540dc413f2408e297ad194.roa
Signing time:             Tue 18 May 2021 20:27:50 +0000
ROA not before:           Tue 18 May 2021 03:00:00 +0000
ROA not after:            Thu 18 May 2023 03:00:00 +0000
asID:                     262200
IP address blocks:        200.124.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2148 (0x864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324de8920173d39f7e57f07a22d818efa49b5475
        Validity
            Not Before: May 18 03:00:00 2021 GMT
            Not After : May 18 03:00:00 2023 GMT
        Subject: CN=34e162278f6830d5a7540dc413f2408e297ad194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:d7:4d:dd:0f:23:19:6b:f4:6f:27:48:3e:
                    95:04:f4:a4:39:97:4e:66:7b:e8:14:7b:33:94:e5:
                    42:7a:24:d1:bf:05:ad:b5:76:a5:1e:85:7c:6b:80:
                    11:8a:cf:dc:13:30:60:4f:54:69:b3:74:93:f0:c6:
                    52:11:62:f8:d0:08:74:6f:05:b2:23:26:2e:40:f7:
                    d0:87:c0:49:e6:ff:81:d9:a5:79:ad:9c:ac:01:86:
                    ec:7d:42:a6:84:50:eb:32:ae:a9:19:8f:3e:e5:63:
                    a5:95:86:9e:54:df:c0:ba:eb:10:2f:a7:b2:59:e3:
                    87:7e:09:6c:08:06:84:94:5f:6f:1d:fd:7b:25:a2:
                    7a:48:0b:89:00:e4:cd:d5:08:ec:51:ce:c1:3a:9a:
                    3e:bf:52:07:4b:65:32:26:ca:e9:5b:99:8b:86:4b:
                    d9:72:47:3b:9d:35:e7:05:44:f2:ff:87:af:20:f8:
                    2c:a2:db:e1:35:80:4d:0d:a5:9c:5e:68:05:99:4d:
                    90:8c:14:84:2f:dd:d3:34:d6:34:da:70:ae:3b:bb:
                    6f:09:fc:d3:7b:59:8f:e8:ef:3f:b5:a4:ef:c3:27:
                    7b:55:03:cf:39:60:d2:5d:7e:3b:66:c0:24:c4:86:
                    e8:a6:e3:78:05:a2:75:9c:bd:98:7b:d8:cc:e1:b3:
                    be:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7C:18:F3:E9:EB:68:4F:92:29:C9:0C:57:8B:DB:88:C5:FB:F1:54
            X509v3 Authority Key Identifier:
                keyid:DB:87:53:92:F1:F6:36:60:C3:8D:0B:02:48:CF:61:31:D6:70:90:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/324de8920173d39f7e57f07a22d818efa49b5475.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/34e162278f6830d5a7540dc413f2408e297ad194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/324de8920173d39f7e57f07a22d818efa49b5475.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:79:74:03:04:42:72:71:2c:fe:d4:32:c3:6b:dd:bb:11:fe:
         f9:1e:9d:b5:7f:88:e1:42:01:eb:1d:c4:6f:e6:62:0f:ad:85:
         57:df:85:df:2b:2c:80:5b:6f:89:00:88:e7:7d:ea:db:19:c7:
         54:38:c5:d2:01:28:ed:b0:39:03:4f:e5:8e:45:9b:01:1d:06:
         c2:c0:a2:e3:8b:9a:10:25:ac:de:c6:85:4d:82:ad:33:f4:a0:
         18:56:dc:ac:82:4b:1f:f9:bf:6a:c6:fd:8e:fb:59:73:27:67:
         36:a8:70:55:f0:b9:3c:6d:b1:31:a4:56:0c:6d:2c:a9:bd:92:
         7a:02:38:f4:ab:eb:18:d3:e7:e8:d0:53:24:23:26:07:1e:97:
         0d:b4:5c:14:2e:ca:bb:a0:60:25:b4:55:dd:12:d4:a9:e6:26:
         e4:de:eb:f0:67:6f:19:e3:2b:50:19:41:aa:b1:6c:07:2c:c2:
         4f:e3:65:d9:0b:ca:96:f1:4e:d6:34:0e:a1:ec:5e:d1:5b:5a:
         d5:74:36:0f:4c:f3:b2:fb:70:d7:41:5f:6c:ed:8e:61:87:34:
         f8:72:75:39:50:76:fe:87:a1:91:ee:4c:c9:85:35:21:ca:7d:
         61:dd:a9:80:a3:91:82:c3:55:7d:4c:86:9c:d2:be:f7:d5:68:
         84:dc:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:09 2023 by rpki-client on console-fra.rpki-client.org