Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/f419a1512109c87e5939cb2e49fdfe9e6b4eec85.roa
File:                     f419a1512109c87e5939cb2e49fdfe9e6b4eec85.roa (raw, json)
Hash identifier:          L/J7Cm5LwiUevcpGu8o9L9cmDbwk2nf98J6La8y5c6E=
Subject key identifier:   1A:8F:4D:3C:38:F3:8C:BE:06:28:DF:0E:AF:0E:8F:11:E1:F6:97:BB
Certificate issuer:       /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial:       03DEAF
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/f419a1512109c87e5939cb2e49fdfe9e6b4eec85.roa
Signing time:             Wed 24 Mar 2021 14:47:12 +0000
ROA not before:           Wed 24 Mar 2021 14:47:12 +0000
ROA not after:            Tue 24 Mar 2026 14:47:12 +0000
asID:                     30133
IP address blocks:        200.93.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253615 (0x3deaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
        Validity
            Not Before: Mar 24 14:47:12 2021 GMT
            Not After : Mar 24 14:47:12 2026 GMT
        Subject: CN=f419a1512109c87e5939cb2e49fdfe9e6b4eec85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5d:06:fd:ac:5e:11:96:f0:90:93:fd:20:a6:
                    64:3b:88:3b:11:f0:99:18:d0:12:bc:85:3c:3f:e8:
                    5f:20:7b:bc:1c:eb:c5:76:dc:e8:e7:2f:61:49:1a:
                    71:e8:dd:49:42:15:23:ee:27:e2:cd:47:33:6d:61:
                    e6:b5:d0:5a:2a:9b:be:34:6c:23:9d:8d:b8:f8:03:
                    b1:de:77:2e:ba:16:06:56:57:09:80:6a:a9:b0:be:
                    51:3d:8d:60:31:3f:8e:f6:59:60:84:9a:43:d9:af:
                    88:c0:3c:ee:f4:bd:48:d5:46:4e:9b:7c:73:e8:8a:
                    11:b3:92:d3:03:c9:22:63:43:67:7c:ec:28:e6:1b:
                    a5:da:40:e0:bf:44:8f:c8:5d:0c:46:e1:7c:8a:ef:
                    0b:1a:46:33:35:f0:c7:a2:30:d6:ba:a8:1c:dd:7f:
                    2b:24:e0:e0:e1:c9:6e:a1:92:41:b8:f6:7e:f1:f4:
                    56:19:ce:f1:41:46:02:5d:d7:c7:20:9c:b8:d6:9f:
                    04:90:50:19:85:4e:dd:b9:1a:67:16:bb:52:6f:5f:
                    c3:ec:15:71:82:11:18:68:c0:1a:24:51:df:e7:0f:
                    be:66:9f:fe:d5:0f:83:aa:da:ea:d3:41:f1:d4:bb:
                    0b:76:67:d4:0e:c2:5c:d3:42:96:55:de:6f:ec:da:
                    10:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8F:4D:3C:38:F3:8C:BE:06:28:DF:0E:AF:0E:8F:11:E1:F6:97:BB
            X509v3 Authority Key Identifier:
                keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/f419a1512109c87e5939cb2e49fdfe9e6b4eec85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:33:77:59:7e:5c:78:e7:d2:4b:33:a2:00:c1:52:d9:05:81:
         cc:2b:db:55:e4:e0:eb:39:b8:34:1d:b1:b1:5e:c0:d2:ff:f7:
         60:86:da:ab:07:66:ed:2c:2f:e7:2d:11:d1:7b:81:08:96:0c:
         89:81:68:44:a5:15:fe:52:c9:a6:90:09:63:e4:48:22:55:fc:
         e6:b7:f9:84:45:32:d8:01:68:80:ea:8a:21:e3:3d:ba:e8:cd:
         6c:0d:43:a2:63:33:cc:f0:33:7b:15:16:65:7f:c0:f3:f0:78:
         c9:61:b4:e2:68:1d:b6:eb:3e:1a:ad:e0:40:49:23:eb:05:30:
         1b:c9:ce:a4:d6:68:f9:43:1f:9f:b5:bf:ce:ff:cd:6a:d8:50:
         5e:70:7f:c0:6f:8f:ff:ef:19:c1:58:ec:dd:9f:95:4d:ba:a9:
         17:0b:84:c7:a9:96:41:dd:3b:63:53:da:42:aa:7f:9d:fb:07:
         64:72:d0:53:db:d4:a9:d6:ef:7e:d1:30:f9:a3:9f:e1:6d:b0:
         8f:23:1f:e8:5b:9c:45:64:fd:10:2b:c4:43:32:35:a1:63:39:
         80:64:8d:0b:4d:f8:2e:74:41:47:51:ae:44:d3:c8:21:8b:98:
         bc:eb:19:46:42:87:55:ac:38:e1:a0:9d:11:50:8e:3d:00:cc:
         28:61:00:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org