Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/9307eb93d2cfa8e527bb8710e590839b59e2c5fe.roa
File:                     9307eb93d2cfa8e527bb8710e590839b59e2c5fe.roa (raw, json)
Hash identifier:          EJliTeIUXYg5lQKb6whlhyK/K1CmA0ZR0/ylmsc/VqE=
Subject key identifier:   43:C9:DB:E1:59:E4:29:80:A9:D2:D7:CB:D5:A3:E1:6C:C0:0D:D3:67
Certificate issuer:       /CN=8c041e50afd913d8324a7c556750cd4fc1dafbbe
Certificate serial:       0C7762
Authority key identifier: A6:C1:19:CB:89:C0:24:64:6D:FE:6B:06:8A:28:7C:60:C0:CB:D5:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c041e50afd913d8324a7c556750cd4fc1dafbbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/9307eb93d2cfa8e527bb8710e590839b59e2c5fe.roa
Signing time:             Wed 24 Mar 2021 14:34:15 +0000
ROA not before:           Wed 24 Mar 2021 14:34:15 +0000
ROA not after:            Tue 24 Mar 2026 14:34:15 +0000
asID:                     265743
IP address blocks:        128.201.116.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816994 (0xc7762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c041e50afd913d8324a7c556750cd4fc1dafbbe
        Validity
            Not Before: Mar 24 14:34:15 2021 GMT
            Not After : Mar 24 14:34:15 2026 GMT
        Subject: CN=9307eb93d2cfa8e527bb8710e590839b59e2c5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f6:6e:62:7c:7e:2b:84:6b:b7:63:46:02:04:
                    7b:56:7f:28:2d:a2:b2:1a:8f:15:1d:59:21:1c:24:
                    27:73:e4:45:b1:6d:11:d8:40:6b:97:45:de:c9:f2:
                    19:7c:d4:5a:d0:51:fa:e6:4c:34:55:66:f7:fe:ad:
                    19:4c:51:5f:a8:3f:ae:d5:73:1e:f3:c4:26:80:5a:
                    32:a3:41:af:7c:ca:f1:a3:be:4c:3c:a6:50:ae:70:
                    e9:c0:72:45:ae:d0:bc:9e:88:d8:af:55:e6:ad:26:
                    67:6c:4f:02:8f:bf:ba:83:5c:c0:2f:17:05:75:43:
                    70:a0:ed:a1:12:a7:ab:26:48:da:33:00:6e:85:e4:
                    dd:49:2e:12:60:d3:52:95:ef:b2:00:f9:64:02:82:
                    f2:cc:94:24:de:7d:0d:1b:ea:37:05:57:aa:cb:ea:
                    a1:fa:a6:9a:c6:a3:c3:cd:0a:39:dc:90:8b:ef:0f:
                    5e:1c:85:5e:ec:e5:ee:6f:68:f6:9c:e6:a4:c3:f2:
                    97:72:22:ec:89:e3:f3:cf:e6:21:e9:52:3f:ad:0e:
                    41:3d:54:77:81:33:bd:39:53:31:b4:0f:20:74:39:
                    6e:d0:90:f9:64:40:cc:b7:f0:1e:3d:02:49:2c:bc:
                    c0:e9:c6:80:61:02:d7:cb:89:46:50:c0:a2:a6:30:
                    8b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C9:DB:E1:59:E4:29:80:A9:D2:D7:CB:D5:A3:E1:6C:C0:0D:D3:67
            X509v3 Authority Key Identifier:
                keyid:A6:C1:19:CB:89:C0:24:64:6D:FE:6B:06:8A:28:7C:60:C0:CB:D5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c041e50afd913d8324a7c556750cd4fc1dafbbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/9307eb93d2cfa8e527bb8710e590839b59e2c5fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/8c041e50afd913d8324a7c556750cd4fc1dafbbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:2b:d3:b2:cf:78:ee:29:3b:9c:53:18:7e:ff:26:f1:2e:16:
         72:11:e6:67:39:34:ab:bf:9a:e8:37:88:e1:10:bd:a8:c9:c1:
         f9:96:0b:32:3f:d3:65:43:ef:9e:a1:17:73:10:e4:64:25:b9:
         93:9e:b7:bf:7c:82:55:92:65:ca:83:30:f9:69:a7:6f:54:b3:
         fd:ee:bb:f3:de:b3:fa:3d:bf:1c:ef:79:a7:b8:58:26:8a:07:
         5c:8e:05:3d:0b:b9:bb:4d:86:cc:a4:8d:92:2d:45:5d:3a:2d:
         fa:26:c2:c8:63:91:dd:84:0f:08:bd:2c:23:10:b2:1c:0e:22:
         1b:69:20:0b:b0:96:0e:03:94:b6:68:2c:b3:f8:9a:ac:55:99:
         bd:c2:8a:d6:0a:01:b8:32:0b:b7:58:99:e9:f1:64:c7:80:8f:
         b7:be:a3:e2:a3:ff:7a:ef:00:b7:57:20:fc:97:7d:06:62:c3:
         6a:b3:48:33:ea:e5:dd:43:c1:6c:41:72:5c:7c:fb:1a:32:79:
         40:b8:2f:cc:69:8e:c3:ec:1c:d2:aa:45:9c:5a:d5:8c:49:ae:
         37:7f:38:45:9c:5e:48:4e:b1:b6:92:95:5e:f8:b9:7f:3c:56:
         57:e2:06:73:b6:79:79:7b:5d:87:10:ee:67:24:31:c9:ac:77:
         d9:58:23:c0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDHdiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhj
MDQxZTUwYWZkOTEzZDgzMjRhN2M1NTY3NTBjZDRmYzFkYWZiYmUwHhcNMjEwMzI0
MTQzNDE1WhcNMjYwMzI0MTQzNDE1WjAzMTEwLwYDVQQDEyg5MzA3ZWI5M2QyY2Zh
OGU1MjdiYjg3MTBlNTkwODM5YjU5ZTJjNWZlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj/ZuYnx+K4Rrt2NGAgR7Vn8oLaKyGo8VHVkhHCQnc+RFsW0R
2EBrl0XeyfIZfNRa0FH65kw0VWb3/q0ZTFFfqD+u1XMe88QmgFoyo0GvfMrxo75M
PKZQrnDpwHJFrtC8nojYr1XmrSZnbE8Cj7+6g1zALxcFdUNwoO2hEqerJkjaMwBu
heTdSS4SYNNSle+yAPlkAoLyzJQk3n0NG+o3BVeqy+qh+qaaxqPDzQo53JCL7w9e
HIVe7OXub2j2nOakw/KXciLsiePzz+Yh6VI/rQ5BPVR3gTO9OVMxtA8gdDlu0JD5
ZEDMt/AePQJJLLzA6caAYQLXy4lGUMCipjCL/QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEPJ2+FZ5CmAqdLXy9Wj4WzADdNnMB8GA1UdIwQYMBaAFKbBGcuJwCRkbf5r
BooofGDAy9X9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGMwNDFl
NTBhZmQ5MTNkODMyNGE3YzU1Njc1MGNkNGZjMWRhZmJiZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDQ1Yjg0YWEtNzQxMS00YjUxLTg2YjEtYjM1Mjkw
NWVlNDQ4LzkzMDdlYjkzZDJjZmE4ZTUyN2JiODcxMGU1OTA4MzliNTllMmM1ZmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NDViODRhYS03NDExLTRiNTEtODZiMS1iMzUy
OTA1ZWU0NDgvOGMwNDFlNTBhZmQ5MTNkODMyNGE3YzU1Njc1MGNkNGZjMWRhZmJi
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAoDJdDANBgkqhkiG9w0BAQsFAAOCAQEAPCvTss947ik7nFMY
fv8m8S4WchHmZzk0q7+a6DeI4RC9qMnB+ZYLMj/TZUPvnqEXcxDkZCW5k563v3yC
VZJlyoMw+Wmnb1Sz/e67896z+j2/HO95p7hYJooHXI4FPQu5u02GzKSNki1FXTot
+ibCyGOR3YQPCL0sIxCyHA4iG2kgC7CWDgOUtmgss/iarFWZvcKK1goBuDILt1iZ
6fFkx4CPt76j4qP/eu8At1cg/Jd9BmLDarNIM+rl3UPBbEFyXHz7GjJ5QLgvzGmO
w+wc0qpFnFrVjEmuN384RZxeSE6xtpKVXvi5fzxWV+IGc7Z5eXtdhxDuZyQxyax3
2VgjwA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org