Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f8070cc-6648-4467-a7a0-3cf27e412c37/2e9bc3516b71bcf6d2454cbfd4ef8b662d5e9c13.roa
File:                     2e9bc3516b71bcf6d2454cbfd4ef8b662d5e9c13.roa (raw, json)
Hash identifier:          WKYcj/z6ZU6l6e7gZgwj4WBTaESrx+0ZV4+ZjkacfqM=
Subject key identifier:   F0:6F:FA:FD:1C:13:EE:F8:D8:EA:FF:8B:7A:7F:CC:40:04:27:A2:FF
Certificate issuer:       /CN=6888ea401829b521f341a745ae20cf56ff8b19b3
Certificate serial:       11D6F4
Authority key identifier: 0E:48:E0:E6:53:2E:F9:75:76:BF:46:D1:19:68:EC:36:3F:0E:0B:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6888ea401829b521f341a745ae20cf56ff8b19b3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f8070cc-6648-4467-a7a0-3cf27e412c37/2e9bc3516b71bcf6d2454cbfd4ef8b662d5e9c13.roa
Signing time:             Tue 26 Oct 2021 14:03:13 +0000
ROA not before:           Mon 30 Aug 2021 03:00:00 +0000
ROA not after:            Wed 30 Aug 2023 03:00:00 +0000
asID:                     20015
IP address blocks:        200.71.192.0/19 maxlen: 24
                          200.71.208.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169140 (0x11d6f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6888ea401829b521f341a745ae20cf56ff8b19b3
        Validity
            Not Before: Aug 30 03:00:00 2021 GMT
            Not After : Aug 30 03:00:00 2023 GMT
        Subject: CN=2e9bc3516b71bcf6d2454cbfd4ef8b662d5e9c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:03:e4:fb:85:ec:02:c4:3f:04:a6:bf:83:
                    9f:7c:78:37:6f:35:ad:ae:2e:84:b7:f6:52:10:97:
                    56:0d:b0:22:61:62:af:87:e7:3d:be:36:d2:b9:99:
                    f1:9b:9d:30:fc:cb:fb:17:e1:5f:f2:8d:35:87:61:
                    82:7d:b9:6a:80:5f:b8:48:e8:c5:08:85:6c:0e:b0:
                    99:16:6d:a4:c3:25:90:16:d3:13:e6:bb:23:91:6e:
                    03:dd:1d:30:01:b1:1d:e9:a1:80:38:e8:90:12:70:
                    96:eb:f2:e0:55:fe:d2:ac:10:7e:b3:e0:79:a1:4d:
                    98:41:fe:d3:1a:71:76:67:4e:58:be:8a:14:85:99:
                    68:96:0b:aa:34:79:d5:cc:b4:6a:ac:34:52:96:c6:
                    02:93:84:3d:ff:6d:14:d1:b7:dd:92:f0:8b:74:33:
                    7e:c1:6f:2f:93:c4:46:82:4c:8c:c9:9e:7c:86:51:
                    66:76:42:5d:51:61:0e:7a:3e:a8:d0:23:ef:78:99:
                    80:c4:50:ce:cc:25:55:35:bd:57:c6:9b:9c:f4:32:
                    7c:73:b1:e3:25:13:3d:ea:b7:0e:ca:93:5b:11:b0:
                    52:de:31:a5:4f:4a:20:49:d0:a5:2b:c5:b7:e1:0c:
                    2f:8c:dd:9e:85:6a:bc:7e:b6:ee:ee:56:87:d9:36:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6F:FA:FD:1C:13:EE:F8:D8:EA:FF:8B:7A:7F:CC:40:04:27:A2:FF
            X509v3 Authority Key Identifier:
                keyid:0E:48:E0:E6:53:2E:F9:75:76:BF:46:D1:19:68:EC:36:3F:0E:0B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6888ea401829b521f341a745ae20cf56ff8b19b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f8070cc-6648-4467-a7a0-3cf27e412c37/2e9bc3516b71bcf6d2454cbfd4ef8b662d5e9c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f8070cc-6648-4467-a7a0-3cf27e412c37/6888ea401829b521f341a745ae20cf56ff8b19b3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:4a:90:5d:80:de:11:4e:b5:4c:84:4d:34:7b:70:cc:96:18:
         7b:ec:de:07:93:08:4c:b9:25:b0:4a:87:1f:dd:cb:4e:89:30:
         6d:dc:a6:9c:26:83:68:bf:38:80:ff:a6:8d:7c:64:b8:16:7e:
         42:7e:9d:92:80:51:f1:52:f2:3a:87:73:e3:db:11:15:29:75:
         4f:40:a7:5b:b6:d3:6f:33:0f:e5:cb:84:25:81:cf:3f:55:76:
         7c:ad:8e:8f:44:2d:6f:04:c4:ea:75:e3:45:e6:fc:50:a6:f3:
         34:60:7f:16:22:1c:32:30:c2:b5:8e:6b:ed:f7:b8:43:34:e8:
         be:3f:10:33:e1:47:95:63:72:0f:95:f5:bd:56:30:90:2d:c5:
         8a:35:9d:60:35:2a:83:66:d8:28:30:e2:74:2f:93:a0:a4:56:
         72:17:77:aa:79:02:a6:74:26:47:b8:1c:c8:43:63:f6:05:91:
         d9:c9:6e:8c:03:48:58:73:fb:5a:ff:78:fb:99:23:2a:82:dd:
         bd:c7:63:ba:66:e0:85:c6:a5:b8:43:68:97:79:ac:c0:21:08:
         db:96:e1:01:9a:73:ca:0b:93:d5:04:54:de:a9:1a:e8:ec:99:
         a9:a5:ee:57:ab:1c:43:35:28:ca:e3:02:d1:bd:75:2d:b3:03:
         fc:f3:8b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 08:59:25 2023 by rpki-client on console-ams.rpki-client.org