Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/25fd12251eaa97ccb00f111217d7fd1a0922669d.roa
File:                     25fd12251eaa97ccb00f111217d7fd1a0922669d.roa (raw, json)
Hash identifier:          HEIulyL8mIDA2iU8XcCVZevpg80Bc7d1RhHyub2TF3Q=
Subject key identifier:   BC:C8:00:81:09:DC:04:63:F4:ED:F7:F3:0F:74:FB:5A:37:69:65:E8
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E49B2
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/25fd12251eaa97ccb00f111217d7fd1a0922669d.roa
Signing time:             Wed 24 Mar 2021 14:45:12 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     52446
IP address blocks:        200.90.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936370 (0xe49b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=25fd12251eaa97ccb00f111217d7fd1a0922669d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:71:6d:a4:46:1e:0d:0b:83:3a:4b:eb:6b:d7:
                    bf:93:34:21:3e:0b:fa:0e:34:19:88:7a:6a:8c:be:
                    7c:1c:06:b4:56:4a:b7:20:10:dc:56:35:c1:f6:51:
                    ef:89:3a:f1:da:8f:96:b6:9d:57:fc:81:6f:26:66:
                    64:06:da:90:ce:75:cc:ca:a6:c3:2e:dd:58:42:9e:
                    df:e6:98:e0:b4:cc:25:76:e9:a5:98:6a:07:a6:f0:
                    42:44:38:b0:85:3d:80:65:a9:a0:73:e4:75:36:db:
                    05:4b:4a:7b:82:05:2f:d2:51:cd:d7:2f:96:dd:aa:
                    0e:1f:4a:ca:72:5d:c9:88:c5:49:2a:73:cf:42:3d:
                    75:11:50:ba:97:bf:7e:6e:57:c2:5e:cf:d8:7b:9e:
                    00:ff:8b:b5:e9:66:4e:2d:c6:23:89:e3:fd:46:35:
                    3f:c3:cf:2a:88:57:30:0e:12:93:95:b1:e3:19:11:
                    cd:92:6b:2a:bf:4e:ce:74:82:c6:77:ad:4d:f3:24:
                    eb:00:55:7f:f9:60:e3:18:da:70:c8:4f:c5:ad:33:
                    32:e6:a4:61:66:aa:74:5a:8a:20:8c:9d:17:4a:3e:
                    38:18:32:5f:ca:f2:20:69:25:e8:91:04:76:ee:90:
                    21:4e:77:53:50:f9:86:ab:8e:45:11:fd:69:c9:13:
                    9a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C8:00:81:09:DC:04:63:F4:ED:F7:F3:0F:74:FB:5A:37:69:65:E8
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/25fd12251eaa97ccb00f111217d7fd1a0922669d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:1e:9c:cb:f1:ae:e2:01:d8:11:80:c2:29:7c:26:52:f3:63:
         03:7e:15:d6:ee:ea:19:cf:5f:99:8b:f1:76:36:8a:e0:99:c8:
         03:95:bf:7c:ba:ab:ca:ba:13:ba:61:23:56:9d:a0:ae:c1:25:
         5d:4f:22:f3:d9:b8:8b:d8:17:c1:60:9d:fc:c3:06:ce:a4:24:
         ce:cc:dd:86:c6:d0:c4:4a:64:2f:79:41:fb:93:27:ff:f4:0e:
         a5:23:cf:0d:0c:cb:13:d9:49:9d:13:46:18:2e:a3:a1:e4:39:
         99:96:37:98:0b:11:b9:3c:59:6d:eb:a2:6a:f4:9c:56:6b:ab:
         c4:08:3a:65:f1:06:f2:4c:02:d9:a8:63:6f:32:97:9e:5e:8d:
         cd:ee:85:e5:58:85:9b:ac:70:0a:e9:a6:4d:2d:48:31:02:4e:
         56:d6:98:4b:1e:fc:85:46:a6:39:75:7d:1f:8d:02:50:c4:b7:
         fc:da:bf:6b:6b:68:d1:7a:06:e2:cf:13:a7:33:f5:5d:2e:e7:
         ba:b5:2f:6d:f0:6e:d1:51:4f:60:2f:05:54:55:ad:ca:a4:c0:
         ba:b9:8a:4e:f6:d7:f4:0c:c3:96:8f:72:f3:21:c9:b2:b4:a2:
         e4:8d:fe:7b:02:8b:94:0e:b3:01:35:97:2d:f7:00:cd:38:ca:
         8c:9a:49:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org