Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/182323c9-0e6a-49ae-9873-3a0460bb1b16/318b564703d3a0d1f5a9b8c09064f0ec5a920be7.roa
File:                     318b564703d3a0d1f5a9b8c09064f0ec5a920be7.roa (raw, json)
Hash identifier:          i1XuPFhYlXbXFGCoH5x3VbOYHZNwgJnTEI155795248=
Subject key identifier:   59:B7:EC:C0:3D:9A:AA:60:83:98:75:EC:68:4B:F3:56:05:0E:55:6B
Certificate issuer:       /CN=643083949234b7f46a60f067fefdeb0e758ea956
Certificate serial:       0E97
Authority key identifier: 9E:65:D1:1B:86:3C:44:18:14:79:A7:3D:3F:FE:3C:EE:A4:68:B4:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/643083949234b7f46a60f067fefdeb0e758ea956.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/182323c9-0e6a-49ae-9873-3a0460bb1b16/318b564703d3a0d1f5a9b8c09064f0ec5a920be7.roa
Signing time:             Thu 07 Oct 2021 18:37:53 +0000
ROA not before:           Thu 07 Oct 2021 03:00:00 +0000
ROA not after:            Sat 07 Oct 2023 03:00:00 +0000
asID:                     263219
IP address blocks:        191.98.216.0/21 maxlen: 24
                          2803:8a80::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3735 (0xe97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643083949234b7f46a60f067fefdeb0e758ea956
        Validity
            Not Before: Oct  7 03:00:00 2021 GMT
            Not After : Oct  7 03:00:00 2023 GMT
        Subject: CN=318b564703d3a0d1f5a9b8c09064f0ec5a920be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:36:0c:a0:e0:c1:26:4d:ce:79:8b:f0:05:1a:
                    63:bb:d1:00:24:82:13:86:52:03:34:15:43:cc:13:
                    dc:b4:ac:3b:00:d0:19:89:02:ba:d4:ee:f5:b5:27:
                    db:05:37:f5:25:d6:89:2e:33:1b:17:14:c3:81:71:
                    b9:38:d5:f3:02:4e:9d:bc:73:42:d4:1c:53:29:d7:
                    fd:dd:c1:d6:cd:c3:e6:32:40:96:46:5e:07:c6:d0:
                    4a:bf:0e:20:78:f2:74:b0:ca:9e:c1:75:34:88:94:
                    6f:b6:1c:05:20:5f:70:96:ac:5b:64:f3:72:27:19:
                    e0:00:54:14:f2:21:f6:1b:dc:a1:78:cc:60:0d:7d:
                    1c:6c:a5:dd:e1:f9:e7:2f:f6:1e:4c:19:13:8f:63:
                    71:ca:28:4e:8b:87:28:8e:14:56:8a:3d:02:f9:d9:
                    65:81:e6:28:a1:47:ff:84:cd:3d:88:36:d4:89:9b:
                    b7:08:d4:b5:14:ee:76:a4:e1:3f:e1:84:64:25:e8:
                    f5:cb:64:ad:ad:e4:d4:1f:00:fa:65:16:43:2a:8e:
                    b6:20:c8:c8:16:c1:c4:cf:55:d7:20:de:21:a5:5f:
                    fe:27:08:34:a3:75:05:9d:e8:ec:e2:8f:c2:c6:85:
                    5c:8f:ee:a1:3f:97:ef:9d:06:b6:40:8e:04:cd:a3:
                    12:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B7:EC:C0:3D:9A:AA:60:83:98:75:EC:68:4B:F3:56:05:0E:55:6B
            X509v3 Authority Key Identifier:
                keyid:9E:65:D1:1B:86:3C:44:18:14:79:A7:3D:3F:FE:3C:EE:A4:68:B4:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/643083949234b7f46a60f067fefdeb0e758ea956.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/182323c9-0e6a-49ae-9873-3a0460bb1b16/318b564703d3a0d1f5a9b8c09064f0ec5a920be7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/182323c9-0e6a-49ae-9873-3a0460bb1b16/643083949234b7f46a60f067fefdeb0e758ea956.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.216.0/21
                IPv6:
                  2803:8a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:f0:92:70:cc:08:b3:52:48:bc:ae:46:e4:35:d9:cf:c4:05:
         61:c0:11:94:88:5b:37:0d:61:a6:dd:26:b2:59:0f:7e:2e:28:
         63:a3:4d:ff:13:19:59:c5:6a:27:48:d0:7e:1c:38:34:5d:27:
         23:0b:dc:66:18:9e:3f:ad:3c:6f:72:c3:88:f6:3f:fe:8b:1a:
         9a:e7:d3:41:b0:1e:fd:da:f3:ec:14:fb:17:73:81:f3:0a:e0:
         90:fe:b3:8b:1e:70:d0:dd:ee:6b:31:84:68:0c:09:e4:57:e3:
         53:49:00:8a:c3:a3:fd:52:0b:3f:37:24:ec:74:ff:eb:b1:93:
         34:3e:58:45:6e:93:b7:d8:a5:44:23:8c:7c:72:d7:bc:7b:23:
         43:d3:8a:30:fd:02:25:7f:c5:64:d6:8b:ce:1e:22:da:98:a8:
         45:78:06:79:3b:7e:b7:1b:dc:ae:a6:ef:92:4e:ab:2d:55:a3:
         8c:3a:bd:f5:ce:a2:bc:c7:39:ff:8f:23:b9:bc:05:35:0e:57:
         6c:22:d5:d6:f4:a4:dd:44:a9:89:b1:e6:a6:f2:0f:0f:9d:3b:
         07:1c:7b:6c:36:d4:f7:d5:75:cd:f0:49:8e:2f:27:9f:64:f4:
         93:a4:4f:80:06:0e:1d:86:74:34:9d:97:14:08:3b:af:53:ac:
         04:d4:7b:b6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICDpcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjQz
MDgzOTQ5MjM0YjdmNDZhNjBmMDY3ZmVmZGViMGU3NThlYTk1NjAeFw0yMTEwMDcw
MzAwMDBaFw0yMzEwMDcwMzAwMDBaMDMxMTAvBgNVBAMTKDMxOGI1NjQ3MDNkM2Ew
ZDFmNWE5YjhjMDkwNjRmMGVjNWE5MjBiZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCWNgyg4MEmTc55i/AFGmO70QAkghOGUgM0FUPME9y0rDsA0BmJ
ArrU7vW1J9sFN/Ul1okuMxsXFMOBcbk41fMCTp28c0LUHFMp1/3dwdbNw+YyQJZG
XgfG0Eq/DiB48nSwyp7BdTSIlG+2HAUgX3CWrFtk83InGeAAVBTyIfYb3KF4zGAN
fRxspd3h+ecv9h5MGROPY3HKKE6LhyiOFFaKPQL52WWB5iihR/+EzT2INtSJm7cI
1LUU7nak4T/hhGQl6PXLZK2t5NQfAPplFkMqjrYgyMgWwcTPVdcg3iGlX/4nCDSj
dQWd6Ozij8LGhVyP7qE/l++dBrZAjgTNoxK3AgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUWbfswD2aqmCDmHXsaEvzVgUOVWswHwYDVR0jBBgwFoAUnmXRG4Y8RBgUeac9
P/487qRotP4wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS82NDMwODM5
NDkyMzRiN2Y0NmE2MGYwNjdmZWZkZWIwZTc1OGVhOTU2LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8xODIzMjNjOS0wZTZhLTQ5YWUtOTg3My0zYTA0NjBi
YjFiMTYvMzE4YjU2NDcwM2QzYTBkMWY1YTliOGMwOTA2NGYwZWM1YTkyMGJlNy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzE4MjMyM2M5LTBlNmEtNDlhZS05ODczLTNhMDQ2
MGJiMWIxNi82NDMwODM5NDkyMzRiN2Y0NmE2MGYwNjdmZWZkZWIwZTc1OGVhOTU2
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQDv2LYMA0EAgACMAcDBQAoA4qAMA0GCSqGSIb3DQEBCwUAA4IB
AQB/8JJwzAizUki8rkbkNdnPxAVhwBGUiFs3DWGm3SayWQ9+Lihjo03/ExlZxWon
SNB+HDg0XScjC9xmGJ4/rTxvcsOI9j/+ixqa59NBsB792vPsFPsXc4HzCuCQ/rOL
HnDQ3e5rMYRoDAnkV+NTSQCKw6P9Ugs/NyTsdP/rsZM0PlhFbpO32KVEI4x8cte8
eyND04ow/QIlf8Vk1ovOHiLamKhFeAZ5O363G9yupu+STqstVaOMOr31zqK8xzn/
jyO5vAU1DldsItXW9KTdRKmJseam8g8PnTsHHHtsNtT31XXN8EmOLyefZPSTpE+A
Bg4dhnQ0nZcUCDuvU6wE1Hu2
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:44:44 2023 by rpki-client on console-fra.rpki-client.org