Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/9c7ffeea7136d336b4510e6fd43f06244d7d1765.roa
File:                     9c7ffeea7136d336b4510e6fd43f06244d7d1765.roa (raw, json)
Hash identifier:          PSJ8JcAeHTzM/t9aTlxLEKo4erSr8pRKC7P46QFAu2g=
Subject key identifier:   25:85:F0:13:0A:26:5E:5C:AF:70:6D:E2:11:A8:5D:05:82:F9:B6:5D
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E31F6
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/9c7ffeea7136d336b4510e6fd43f06244d7d1765.roa
Signing time:             Wed 24 Mar 2021 14:45:11 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     27812
IP address blocks:        201.218.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930294 (0xe31f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=9c7ffeea7136d336b4510e6fd43f06244d7d1765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:89:2b:1b:d9:e1:52:15:d2:eb:42:0a:8a:
                    7e:ab:26:ab:0f:a8:0e:9e:ef:1a:7d:9e:33:6f:6a:
                    1e:8a:75:7a:3e:f7:cf:31:35:88:6b:d5:df:73:bc:
                    3c:53:bc:79:77:a4:fe:ba:fa:1e:3a:a7:2f:c8:20:
                    a4:a2:64:c7:09:30:a2:88:42:74:8f:38:fb:be:45:
                    b2:91:49:c5:d3:a0:25:50:69:62:d6:c4:90:26:6a:
                    ef:73:38:0c:4f:70:cc:2b:41:52:ea:3d:ff:af:3c:
                    5e:9c:78:aa:23:d9:76:d9:68:93:10:d7:82:17:a9:
                    27:b1:f3:ef:8f:55:7b:67:29:e6:09:d6:83:08:5b:
                    f4:67:c9:16:61:a2:aa:07:20:45:73:75:8e:3d:a7:
                    78:2d:e0:e0:24:c6:c9:a4:3a:52:8e:67:71:1e:93:
                    5c:92:56:cb:6b:71:89:30:53:f4:ed:07:3a:49:5a:
                    76:5d:6f:0e:e2:84:62:39:da:9b:11:82:a9:bc:20:
                    d8:c6:9e:e4:bf:dd:af:68:64:35:28:08:4a:6b:99:
                    7f:55:ea:9b:52:b1:ba:7f:1f:be:1a:1e:84:bc:ec:
                    67:c7:a9:c8:3c:42:f7:92:b2:0d:4e:31:06:99:38:
                    2e:5a:b6:bd:64:d7:85:60:47:51:33:f8:87:2a:67:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:85:F0:13:0A:26:5E:5C:AF:70:6D:E2:11:A8:5D:05:82:F9:B6:5D
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/9c7ffeea7136d336b4510e6fd43f06244d7d1765.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:23:cf:f0:77:f9:2e:0e:df:37:9e:ce:23:9a:51:cc:db:89:
         21:c6:ee:fa:8b:5a:b6:ef:02:ca:56:e9:13:aa:78:5b:0d:e6:
         30:b0:62:65:e9:61:16:eb:d4:e5:97:23:ed:4e:a5:91:28:b3:
         2c:4d:b9:f3:82:dd:cf:90:f8:b9:58:23:d4:f7:c2:24:17:4a:
         33:e3:6a:d0:32:88:2a:ca:8d:a3:90:8a:d7:37:74:6d:3c:8f:
         d0:3c:8f:a2:4e:20:15:d4:4e:bc:1d:d7:84:87:dd:ee:3b:c4:
         ac:c2:60:f4:3c:b4:c1:c5:9a:9f:e3:7f:7c:0f:dd:be:d1:e0:
         01:d5:a2:df:d7:c9:bd:2f:b6:cb:8b:49:d2:41:20:1f:c5:67:
         3c:61:3f:8e:f9:db:f6:84:ce:f1:b0:db:29:45:06:b2:bd:b7:
         ce:53:01:b4:ce:52:43:05:a2:da:60:47:f5:38:40:f7:3f:f0:
         59:c0:6d:13:9f:e4:cf:d4:6f:b6:21:9e:7b:36:1d:df:4b:5d:
         38:d8:cd:d3:b5:4e:06:c6:12:4e:91:5f:65:f7:27:3f:5c:a2:
         71:dc:52:ca:23:f9:07:5c:24:cc:6e:ee:8e:1c:a8:1c:c3:06:
         5d:7d:de:9e:73:f9:45:b9:94:c6:78:88:a2:af:1e:71:57:54:
         ff:9c:57:b3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDjH2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
NWRhMzA0MzM0ZmIzNjIwNGEzNzBlOTUwNDg3Njg5ZTgxMWEyYzgwHhcNMjEwMzI0
MTQ0NTA5WhcNMjYwMzI0MTQ0NTA5WjAzMTEwLwYDVQQDEyg5YzdmZmVlYTcxMzZk
MzM2YjQ1MTBlNmZkNDNmMDYyNDRkN2QxNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv+GJKxvZ4VIV0utCCop+qyarD6gOnu8afZ4zb2oeinV6PvfP
MTWIa9Xfc7w8U7x5d6T+uvoeOqcvyCCkomTHCTCiiEJ0jzj7vkWykUnF06AlUGli
1sSQJmrvczgMT3DMK0FS6j3/rzxenHiqI9l22WiTENeCF6knsfPvj1V7ZynmCdaD
CFv0Z8kWYaKqByBFc3WOPad4LeDgJMbJpDpSjmdxHpNcklbLa3GJMFP07Qc6SVp2
XW8O4oRiOdqbEYKpvCDYxp7kv92vaGQ1KAhKa5l/VeqbUrG6fx++Gh6EvOxnx6nI
PEL3krINTjEGmTguWra9ZNeFYEdRM/iHKmct0wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCWF8BMKJl5cr3Bt4hGoXQWC+bZdMB8GA1UdIwQYMBaAFJWonEF2ARCODpgC
PQcm9Ep8UQ9LMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDg1ZGEz
MDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWNjNTQ4ZmYtOGYwYy00ZTc1LTgxMjUtNWUwOTVm
YmYyNGMwLzljN2ZmZWVhNzEzNmQzMzZiNDUxMGU2ZmQ0M2YwNjI0NGQ3ZDE3NjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xY2M1NDhmZi04ZjBjLTRlNzUtODEyNS01ZTA5
NWZiZjI0YzAvZDg1ZGEzMDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnawDANBgkqhkiG9w0BAQsFAAOCAQEAACPP8Hf5Lg7fN57O
I5pRzNuJIcbu+otatu8CylbpE6p4Ww3mMLBiZelhFuvU5Zcj7U6lkSizLE2584Ld
z5D4uVgj1PfCJBdKM+Nq0DKIKsqNo5CK1zd0bTyP0DyPok4gFdROvB3XhIfd7jvE
rMJg9Dy0wcWan+N/fA/dvtHgAdWi39fJvS+2y4tJ0kEgH8VnPGE/jvnb9oTO8bDb
KUUGsr23zlMBtM5SQwWi2mBH9ThA9z/wWcBtE5/kz9RvtiGeezYd30tdONjN07VO
BsYSTpFfZfcnP1yicdxSyiP5B1wkzG7ujhyoHMMGXX3ennP5RbmUxniIoq8ecVdU
/5xXsw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org