Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3586e6cf-f752-4f1e-ba65-5f30d37c75c2/c2b9aaf13ab22e3750db541a9a8a4818f4249b02.roa
File:                     c2b9aaf13ab22e3750db541a9a8a4818f4249b02.roa (raw, json)
Hash identifier:          DX3DO4pmDgJXJwbB0ILUv76nAbmkWaZjA253zUvyBAg=
Subject key identifier:   42:AC:75:94:17:FD:1B:7B:9C:B5:75:7D:54:9F:3C:E6:3A:14:34:DB
Certificate issuer:       /CN=73512e1e1fd4c7802ea04ee5d9fb1d15fda87ccc
Certificate serial:       0148
Authority key identifier: FB:F7:CF:61:86:63:D8:A1:ED:59:F8:52:BC:AC:8A:23:37:2F:97:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73512e1e1fd4c7802ea04ee5d9fb1d15fda87ccc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3586e6cf-f752-4f1e-ba65-5f30d37c75c2/c2b9aaf13ab22e3750db541a9a8a4818f4249b02.roa
Signing time:             Sun 23 May 2021 03:06:57 +0000
ROA not before:           Sun 23 May 2021 03:00:00 +0000
ROA not after:            Tue 23 May 2023 03:00:00 +0000
asID:                     271880
IP address blocks:        200.36.152.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73512e1e1fd4c7802ea04ee5d9fb1d15fda87ccc
        Validity
            Not Before: May 23 03:00:00 2021 GMT
            Not After : May 23 03:00:00 2023 GMT
        Subject: CN=c2b9aaf13ab22e3750db541a9a8a4818f4249b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:72:79:1d:17:8b:f5:e3:09:9e:6c:e5:ef:ac:
                    22:bd:75:fa:fb:ee:10:63:f5:4c:c9:dc:01:6e:79:
                    2b:86:fe:30:36:71:a7:e8:db:1b:13:59:09:73:6c:
                    b8:91:b2:90:cd:f5:cb:55:62:81:e6:46:4c:70:a5:
                    40:69:2c:2d:5a:f4:0b:ff:3b:7a:8c:cd:2b:46:9a:
                    fc:b0:57:74:f6:67:0d:30:00:7e:a1:36:34:fc:a7:
                    c6:74:4e:c2:69:ef:17:fc:80:65:d6:c3:39:91:bc:
                    a1:b8:fe:24:ec:ed:a8:55:dd:b7:b0:68:02:d7:85:
                    25:34:53:fe:8a:49:4e:02:4a:61:2e:c7:0e:7a:8c:
                    91:3a:65:1a:a7:81:c3:3f:48:85:2c:67:7c:76:c8:
                    13:77:04:91:c4:13:97:ca:57:ec:27:24:e2:9f:7a:
                    ac:d4:bb:0b:0e:e7:ed:b3:31:a3:1b:1c:29:b9:ca:
                    e9:de:ab:a6:7f:8a:70:3f:ce:83:09:78:3f:61:89:
                    a7:fc:b2:d7:d0:d0:f3:09:6d:db:e8:f0:19:25:b6:
                    41:46:c1:e4:32:11:b0:d3:8e:a8:3b:9a:11:2f:48:
                    a2:fe:e2:40:65:a7:14:ca:d2:21:df:6f:cb:04:4d:
                    64:b4:3f:47:37:e1:e0:3e:bb:c2:05:0d:ea:75:17:
                    e7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AC:75:94:17:FD:1B:7B:9C:B5:75:7D:54:9F:3C:E6:3A:14:34:DB
            X509v3 Authority Key Identifier:
                keyid:FB:F7:CF:61:86:63:D8:A1:ED:59:F8:52:BC:AC:8A:23:37:2F:97:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73512e1e1fd4c7802ea04ee5d9fb1d15fda87ccc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3586e6cf-f752-4f1e-ba65-5f30d37c75c2/c2b9aaf13ab22e3750db541a9a8a4818f4249b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3586e6cf-f752-4f1e-ba65-5f30d37c75c2/73512e1e1fd4c7802ea04ee5d9fb1d15fda87ccc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:f9:82:95:74:ae:75:61:57:42:b6:0f:8e:aa:a7:36:bf:d1:
         14:0e:57:fe:f9:ee:d8:a4:a5:c5:0a:40:fc:75:34:20:95:57:
         25:fb:32:61:02:7a:14:aa:7d:c7:c3:a3:52:0b:ea:75:b8:55:
         bd:8b:4f:f4:d7:b8:f1:13:fd:8d:20:bd:03:81:a2:64:b4:62:
         be:6a:48:f8:22:cd:02:d9:ee:71:a3:25:e2:53:10:61:b8:75:
         4e:a6:6d:ae:83:fb:5f:ee:30:af:92:b0:db:80:a0:76:62:4e:
         e8:9d:89:9a:e4:ad:0a:02:4c:81:7a:20:e9:03:cc:ab:54:a3:
         27:09:ab:4b:db:dc:a9:a2:6c:94:ff:9b:28:c3:d9:d7:e3:87:
         9c:d6:97:af:a8:c9:49:81:ab:dd:7c:2a:a3:d8:31:de:62:55:
         58:f3:70:a8:61:10:3c:39:1b:04:b9:12:24:6a:2a:79:49:6b:
         7f:69:45:45:97:20:bd:71:9b:b1:e9:94:eb:45:15:72:81:6d:
         55:4c:fa:95:10:dc:95:38:d1:4a:a2:d4:ea:06:14:25:3b:99:
         d8:a1:97:d2:cb:c1:8a:7a:a8:2c:8a:cc:d1:0a:29:94:50:ff:
         08:5c:de:61:62:7b:1e:b0:66:a0:e6:f7:9d:41:50:31:42:e5:
         68:65:77:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-ams.rpki-client.org