Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/d8332c731d46ba1d8608a68a839c1c6f4ca762b6.roa
File:                     d8332c731d46ba1d8608a68a839c1c6f4ca762b6.roa (raw, json)
Hash identifier:          45NR2L5Yx5Ro5BREBrWZaX+E8QeQ+eaIqvb7/26oOoU=
Subject key identifier:   E4:BF:64:46:A8:19:93:DC:B5:91:4B:7B:72:86:39:24:92:64:4A:BF
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       1C735A
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/d8332c731d46ba1d8608a68a839c1c6f4ca762b6.roa
Signing time:             Tue 04 Oct 2022 20:14:44 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     272862
IP address blocks:        200.50.167.0/24 maxlen: 24
                          200.50.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864538 (0x1c735a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=d8332c731d46ba1d8608a68a839c1c6f4ca762b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8d:77:cd:16:d4:5c:18:88:62:0e:e9:9e:9b:
                    84:c3:04:e0:80:91:9a:0d:86:15:8f:a9:63:a9:bf:
                    e8:d8:fe:75:98:5c:4a:85:5d:6f:31:d9:8a:89:91:
                    1c:7e:41:c4:f2:4a:3d:b9:5b:8e:35:00:c5:67:84:
                    db:06:dd:19:d1:56:f9:d2:ad:94:63:97:f0:ab:b3:
                    da:a7:6c:37:3b:77:b3:db:4e:ed:a6:a0:11:d2:12:
                    2b:c8:69:30:d3:6e:32:5d:5e:6e:91:e8:61:7b:2f:
                    5c:d3:82:b9:eb:ad:5a:a4:3c:4d:42:18:10:e2:aa:
                    56:76:e9:e2:e5:3a:35:36:1d:8c:36:c4:2a:b7:10:
                    af:8c:59:93:aa:5a:74:e6:65:c3:75:00:5f:5e:02:
                    cf:c2:73:c3:88:e6:d0:6d:5c:cd:3a:55:14:e8:bd:
                    52:e5:be:d2:40:78:9a:60:07:15:25:ef:48:c8:b4:
                    14:56:8b:cc:ae:1e:2f:7a:65:c7:d4:ea:81:72:ab:
                    c7:75:2d:f0:ce:e9:93:0c:79:34:d4:43:91:cb:ad:
                    fe:0d:79:65:6a:68:a0:5f:01:b7:13:c4:4b:57:03:
                    08:1f:0b:f9:04:0d:94:e2:bb:cd:7f:4f:c6:bd:82:
                    e3:46:5d:1b:15:8d:a0:80:9f:06:b1:0e:70:79:29:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BF:64:46:A8:19:93:DC:B5:91:4B:7B:72:86:39:24:92:64:4A:BF
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/d8332c731d46ba1d8608a68a839c1c6f4ca762b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.167.0/24
                  200.50.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:5b:a1:27:ce:db:df:ad:6b:48:55:63:b8:a3:8f:e6:21:2b:
         74:63:e1:55:37:de:47:b0:ec:20:ed:ff:98:c2:2e:d6:e6:ad:
         fb:c3:02:b8:84:eb:2a:b6:83:d1:36:34:c4:d3:12:fe:c1:d1:
         9e:db:f1:1f:08:03:f5:7f:68:bf:54:90:0b:61:2a:43:d9:70:
         54:5d:f3:08:1b:31:d6:25:aa:a5:09:86:07:1b:29:d7:c8:6a:
         64:6c:ff:b9:d7:19:a0:5f:f1:76:9a:02:2f:12:f1:c8:7d:7a:
         e3:83:21:81:11:24:a2:f0:ee:fe:c4:1e:6b:f7:f9:da:ff:d8:
         65:6e:67:33:13:a3:03:03:86:4a:c3:dd:d8:45:af:3d:80:46:
         3c:b9:31:8e:8f:db:72:35:f4:9b:d1:48:e6:df:fa:42:24:34:
         15:ae:34:a8:ed:1a:8a:34:b0:a1:c2:7a:c3:13:06:ba:95:cf:
         bd:da:0c:76:27:6d:aa:05:de:ef:29:37:a7:dc:2d:fa:63:16:
         6a:b5:d4:56:ef:6c:d8:0d:d9:c3:ea:58:79:04:4b:be:a5:75:
         b4:7c:dd:26:58:73:4d:b0:e2:a8:c3:12:3b:c2:6b:61:87:c6:
         e8:11:24:9f:c9:19:a8:e6:14:ed:d2:5d:3c:1e:46:78:3f:fa:
         ca:2a:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org