Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/404a98bfaf4829422c7f2324f677cde6b9586392.roa
File:                     404a98bfaf4829422c7f2324f677cde6b9586392.roa (raw, json)
Hash identifier:          zh9/mZCFW124MIsgiA1GzpUsvYBpSq0UVAYJ2x6hYv8=
Subject key identifier:   8E:86:65:AD:AD:66:1E:83:3C:A2:22:1B:24:5A:02:0F:27:D1:16:AA
Certificate issuer:       /CN=cdf3c4883ddca1519ed46106e0af85f1db80392f
Certificate serial:       01E4B9
Authority key identifier: 46:C2:C8:A1:9E:E3:9F:CB:34:26:C6:F1:3E:6F:59:9A:F8:52:B7:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdf3c4883ddca1519ed46106e0af85f1db80392f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/404a98bfaf4829422c7f2324f677cde6b9586392.roa
Signing time:             Thu 04 Nov 2021 14:08:16 +0000
ROA not before:           Sat 21 Aug 2021 03:00:00 +0000
ROA not after:            Mon 21 Aug 2023 03:00:00 +0000
asID:                     265831
IP address blocks:        200.114.88.0/21 maxlen: 24
                          2803:420::/32 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124089 (0x1e4b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf3c4883ddca1519ed46106e0af85f1db80392f
        Validity
            Not Before: Aug 21 03:00:00 2021 GMT
            Not After : Aug 21 03:00:00 2023 GMT
        Subject: CN=404a98bfaf4829422c7f2324f677cde6b9586392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:42:b6:dc:05:66:b3:32:4a:ce:b5:2d:a4:8c:
                    86:98:aa:e8:d4:db:d3:a1:cb:3b:34:02:70:45:b1:
                    52:09:07:0e:6a:72:da:2c:1c:b3:87:b6:13:95:98:
                    fd:32:d4:f1:53:c1:6b:5d:5e:65:22:ce:02:b8:b6:
                    e5:ef:47:cd:c5:dc:f4:01:e1:6a:9f:5c:26:04:a1:
                    63:29:b9:93:e8:98:f9:2f:3f:80:8a:da:a6:ec:ae:
                    08:22:41:cb:f9:4a:02:92:e2:dc:c6:0d:0b:7b:f3:
                    54:6b:47:72:87:73:cc:2a:2d:f8:57:11:02:31:d2:
                    fb:8e:26:70:16:56:32:7f:cd:11:4d:80:0b:5e:df:
                    d2:e8:12:a4:97:34:0b:72:e1:d5:dc:da:08:3a:11:
                    08:9f:84:b1:bb:2e:36:96:27:25:f7:5f:96:b4:9a:
                    b3:5a:c3:81:5b:03:83:5c:35:56:59:04:0e:c2:5b:
                    6e:74:84:7c:b5:8f:c5:1d:9b:70:aa:db:31:f1:b2:
                    d5:59:13:0a:ca:ce:cc:44:c1:c1:00:c0:72:55:f0:
                    f0:b5:8a:9c:f2:62:d2:50:93:0b:1c:cd:1b:8a:fa:
                    c6:c2:ac:a8:8e:94:a2:3b:e6:ef:03:1e:14:d4:ee:
                    c2:28:fa:29:14:20:82:54:da:9d:9c:71:f9:f9:ff:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:86:65:AD:AD:66:1E:83:3C:A2:22:1B:24:5A:02:0F:27:D1:16:AA
            X509v3 Authority Key Identifier:
                keyid:46:C2:C8:A1:9E:E3:9F:CB:34:26:C6:F1:3E:6F:59:9A:F8:52:B7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdf3c4883ddca1519ed46106e0af85f1db80392f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/404a98bfaf4829422c7f2324f677cde6b9586392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/cdf3c4883ddca1519ed46106e0af85f1db80392f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.88.0/21
                IPv6:
                  2803:420::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:24:7d:57:88:f3:cd:d5:db:00:6a:bd:a6:12:20:70:50:95:
         65:88:6e:65:5d:7f:c9:f4:fc:0c:c6:ed:5d:aa:7a:c1:e7:2b:
         96:1f:fd:b3:ce:d8:5b:36:f6:3b:d1:dd:7e:6c:b5:57:47:ca:
         1b:95:4b:e6:3b:3b:ed:d8:b9:aa:d9:f0:2b:51:ce:8f:00:58:
         05:ad:33:19:1b:a1:10:8c:19:42:e8:73:b1:f2:02:e6:20:2e:
         bc:34:ae:1c:d1:8f:9b:b1:61:db:92:ea:df:b1:00:d0:9e:fe:
         e3:9b:8e:cd:0f:b6:e0:a3:db:ca:20:50:73:31:81:16:7f:19:
         3e:15:de:12:cf:82:d0:0d:bd:9c:ee:94:ff:92:09:ba:87:6d:
         ae:28:31:d1:72:e2:ed:f0:96:cb:db:79:25:98:73:15:4e:4c:
         71:ce:bb:23:d6:42:0c:93:b2:b8:c8:38:ae:0d:24:88:2f:37:
         fc:32:23:0c:67:91:a6:42:2d:48:3f:7f:be:02:0f:19:c9:0d:
         95:79:4d:1c:84:6b:b4:fa:42:f3:c1:a3:17:da:a7:55:10:87:
         21:bd:4c:86:d5:dd:d6:df:d8:80:ba:a8:ca:80:50:e0:e2:d8:
         55:ac:80:7f:f0:77:bd:f2:0f:ad:a5:54:06:86:92:b0:80:58:
         df:83:5f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 20 09:07:17 2023 by rpki-client on console-fra.rpki-client.org