Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7dc18747443011e10082d12cd00134215e1da408.roa
File:                     7dc18747443011e10082d12cd00134215e1da408.roa (raw, json)
Hash identifier:          HPUObb3C2CAHrMONb4YBVZuz9mVDunNBp4bFYt2rTfI=
Subject key identifier:   FE:FE:AA:D4:F9:BF:5D:5E:76:9F:C3:E7:4E:80:43:FB:7A:A6:46:04
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       1B93B2
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7dc18747443011e10082d12cd00134215e1da408.roa
Signing time:             Mon 05 Sep 2022 19:23:21 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     272114
IP address blocks:        200.50.167.0/24 maxlen: 24
                          200.50.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807282 (0x1b93b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=7dc18747443011e10082d12cd00134215e1da408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:1a:44:f4:b5:1e:02:89:c5:73:58:15:99:
                    c7:9f:fa:1c:3b:06:c0:2a:44:12:cb:05:b0:de:ba:
                    67:89:cc:16:ec:21:de:df:f8:05:dc:1e:ee:ca:50:
                    d1:bb:b8:c4:5b:ad:79:0d:89:d7:a6:86:b3:0b:a4:
                    33:6c:5d:8e:ce:57:ed:b0:cd:90:bf:6a:28:6d:2d:
                    41:7d:f7:e6:86:ad:52:15:00:9a:2c:31:3b:76:a1:
                    5a:a4:3c:9e:6d:90:bb:f5:92:68:a0:17:db:16:59:
                    74:a5:e6:cd:e0:54:0c:b1:d4:2d:af:49:bf:5a:23:
                    99:08:d3:7c:53:83:c8:ac:c9:78:27:72:77:dc:eb:
                    43:d0:46:b0:b1:c3:33:3e:c8:28:23:cd:72:50:71:
                    95:31:05:59:58:94:b7:ff:3f:e4:2a:8f:c2:94:63:
                    a5:a8:f9:0c:bd:e2:19:3d:17:be:42:f9:54:cc:2e:
                    e2:77:3c:46:70:0c:e4:e5:bc:10:39:41:52:fb:6f:
                    03:82:d7:b5:4c:5f:9a:dc:f7:85:a8:93:d1:e4:d9:
                    2d:20:d8:82:0d:cd:4c:20:8a:ff:fe:84:45:75:42:
                    de:67:65:31:ac:62:d5:1a:21:27:dc:55:1e:db:04:
                    b9:38:6a:6f:2f:0a:ad:3e:e5:98:f5:60:cf:39:72:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FE:AA:D4:F9:BF:5D:5E:76:9F:C3:E7:4E:80:43:FB:7A:A6:46:04
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7dc18747443011e10082d12cd00134215e1da408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.167.0/24
                  200.50.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:eb:ac:8d:48:c1:ca:24:72:d6:63:0f:31:96:08:e2:69:af:
         67:cd:e4:7c:f9:46:7f:00:65:e1:32:14:6a:44:f6:82:d8:4b:
         62:45:08:31:eb:f1:4a:ca:73:a0:b8:44:1e:03:4a:e5:4a:1f:
         4f:95:0a:4a:3d:7b:02:9d:64:0c:4d:9e:80:ab:45:be:45:cf:
         df:f4:76:71:2a:d4:af:16:94:2b:36:45:bf:0c:32:d1:74:4a:
         85:b5:d5:3c:12:06:bb:5b:3b:c4:ca:f4:f3:78:d7:8f:a4:70:
         3a:a6:b9:62:bd:85:bc:7a:9e:ca:80:f8:41:c2:28:f8:c3:ef:
         bf:1f:de:f4:5f:84:cf:7b:38:d7:90:7f:6c:04:7a:7c:83:fe:
         9c:42:88:95:5e:0b:d1:f5:41:10:6a:79:f9:a3:f9:c6:68:da:
         cf:29:51:0f:b1:74:4c:b2:bf:80:d2:02:5c:d6:06:a0:23:01:
         f3:87:9a:34:83:e2:b4:55:1f:83:b4:9a:64:14:5e:a5:bc:93:
         f0:74:43:73:11:2c:96:ed:81:73:e3:0f:39:84:61:d3:15:40:
         b8:15:6f:9b:16:8c:ab:b4:a2:a7:af:43:0c:ac:40:a5:cb:a4:
         c6:00:f8:67:6a:c2:96:85:60:8e:1a:fa:30:92:ba:29:87:70:
         27:86:2e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org