Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/a44d9d5f445670a5b494e8aec012461529b15148.roa
File:                     a44d9d5f445670a5b494e8aec012461529b15148.roa (raw, json)
Hash identifier:          8VBUy8eFo3wbUum4mCQF85j/VOSid9PLoVlfZtHx87Y=
Subject key identifier:   79:C7:2D:C8:5F:76:B1:94:E8:C8:08:E7:EB:E1:D3:15:FF:EB:AC:28
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       1CC1FC
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/a44d9d5f445670a5b494e8aec012461529b15148.roa
Signing time:             Fri 14 Oct 2022 02:54:07 +0000
ROA not before:           Wed 06 Apr 2022 03:00:00 +0000
ROA not after:            Mon 07 Apr 2031 03:00:00 +0000
asID:                     272114
IP address blocks:        200.123.32.0/23 maxlen: 23
                          200.123.32.0/24 maxlen: 24
                          200.123.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1884668 (0x1cc1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Apr  6 03:00:00 2022 GMT
            Not After : Apr  7 03:00:00 2031 GMT
        Subject: CN=a44d9d5f445670a5b494e8aec012461529b15148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:f0:60:4a:8c:18:2e:58:5e:f7:21:48:fb:
                    54:c1:9a:09:d4:a0:d4:43:a0:14:67:b5:82:2e:e6:
                    dd:dd:0c:be:46:47:ab:e9:e2:15:1c:6d:f2:62:99:
                    f1:da:27:00:e2:f4:f4:4b:40:07:f4:c7:f1:fe:56:
                    b3:77:d8:16:42:5d:81:4e:91:e3:ef:c7:78:94:54:
                    98:40:f0:33:f5:0a:6a:bd:07:eb:fc:ed:89:f0:d3:
                    a2:95:93:2c:56:d6:9e:07:b0:8a:15:b4:b6:32:e6:
                    93:1f:99:9d:51:d4:f7:67:4e:c4:32:9f:8b:54:e9:
                    0f:c6:87:da:e4:2d:71:9b:88:93:2f:47:14:27:54:
                    6e:c4:48:2d:61:c9:0b:f0:7a:3f:44:44:7f:04:ff:
                    f9:49:bd:2c:db:c2:2c:09:dd:2a:ee:38:99:00:ee:
                    75:a7:b0:23:8b:17:ce:7a:97:aa:5a:84:64:ec:b8:
                    9d:f8:bb:ae:14:85:06:b2:6b:bc:38:f9:51:74:da:
                    f6:01:50:54:61:8d:84:53:39:57:e9:c9:e5:4e:56:
                    3c:37:3a:46:60:a8:49:48:9d:b5:06:07:d5:d1:e6:
                    4d:76:eb:ed:90:08:e8:2b:c4:a1:7c:03:e1:8d:05:
                    6b:7c:19:47:55:8f:8a:c4:b7:41:9f:cf:e9:29:7b:
                    5f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C7:2D:C8:5F:76:B1:94:E8:C8:08:E7:EB:E1:D3:15:FF:EB:AC:28
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/a44d9d5f445670a5b494e8aec012461529b15148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:a7:52:59:c8:96:43:dd:36:58:fc:54:ba:1a:e8:fe:bd:08:
         cb:08:11:91:09:a1:c8:3e:a4:20:a5:96:ec:7c:8d:fc:16:7f:
         09:b5:09:35:c0:75:3b:f1:a9:40:b1:56:e6:63:ba:8f:10:fa:
         e5:40:58:23:d5:39:80:ee:df:2d:08:dd:ce:29:69:73:0f:39:
         7c:b2:c0:a8:67:b4:21:79:0f:ce:22:68:85:af:a2:e5:ea:c5:
         27:b3:14:b9:26:17:c9:77:ba:40:98:44:1d:69:50:b0:39:b8:
         49:c2:41:3d:a3:25:97:b4:dd:1d:9b:4f:08:8f:ca:af:60:92:
         55:40:41:50:86:83:c8:29:55:dd:a1:7b:50:28:b0:1d:e4:60:
         25:36:10:3b:40:d0:a8:37:8d:3d:91:0c:41:84:9c:76:e1:a7:
         0b:83:10:c8:e6:d9:15:59:49:03:97:82:ff:65:ce:e7:bb:ce:
         6d:3e:e5:8c:ad:a8:d3:bf:37:fa:16:9b:59:1e:43:56:3e:5b:
         ec:45:a4:a0:32:0d:30:9d:73:28:9f:56:28:2d:70:2a:0b:a8:
         b4:b3:f1:3d:10:a8:9b:f4:ef:d3:ca:7a:ac:27:c9:59:e8:9a:
         ad:d5:c7:28:74:18:42:3e:a5:e4:15:a1:9b:d8:d3:f6:6e:03:
         56:6c:2e:1f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHMH8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
YjdhNDNmYzMzYmZjN2ZmNWVhNTkyZGVjYWRkZTY0NTI4ODcwNWUwHhcNMjIwNDA2
MDMwMDAwWhcNMzEwNDA3MDMwMDAwWjAzMTEwLwYDVQQDEyhhNDRkOWQ1ZjQ0NTY3
MGE1YjQ5NGU4YWVjMDEyNDYxNTI5YjE1MTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwULwYEqMGC5YXvchSPtUwZoJ1KDUQ6AUZ7WCLubd3Qy+Rker
6eIVHG3yYpnx2icA4vT0S0AH9Mfx/lazd9gWQl2BTpHj78d4lFSYQPAz9QpqvQfr
/O2J8NOilZMsVtaeB7CKFbS2MuaTH5mdUdT3Z07EMp+LVOkPxofa5C1xm4iTL0cU
J1RuxEgtYckL8Ho/RER/BP/5Sb0s28IsCd0q7jiZAO51p7AjixfOepeqWoRk7Lid
+LuuFIUGsmu8OPlRdNr2AVBUYY2EUzlX6cnlTlY8NzpGYKhJSJ21BgfV0eZNduvt
kAjoK8ShfAPhjQVrfBlHVY+KxLdBn8/pKXtftQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHnHLchfdrGU6MgI5+vh0xX/66woMB8GA1UdIwQYMBaAFMGk+QbXxWt9XjK0
PK4zar0RfTlWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNiN2E0
M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlL2E0NGQ5ZDVmNDQ1NjcwYTViNDk0ZThhZWMwMTI0NjE1MjliMTUxNDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvMzNiN2E0M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAch7IDANBgkqhkiG9w0BAQsFAAOCAQEAJ6dSWciWQ902WPxU
uhro/r0IywgRkQmhyD6kIKWW7HyN/BZ/CbUJNcB1O/GpQLFW5mO6jxD65UBYI9U5
gO7fLQjdzilpcw85fLLAqGe0IXkPziJoha+i5erFJ7MUuSYXyXe6QJhEHWlQsDm4
ScJBPaMll7TdHZtPCI/Kr2CSVUBBUIaDyClV3aF7UCiwHeRgJTYQO0DQqDeNPZEM
QYScduGnC4MQyObZFVlJA5eC/2XO57vObT7ljK2o0783+habWR5DVj5b7EWkoDIN
MJ1zKJ9WKC1wKguotLPxPRCom/Tv08p6rCfJWeiardXHKHQYQj6l5BWhm9jT9m4D
VmwuHw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org