Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/5adbf48f8448e68e82aa9851526c6884b31f4425.roa
File:                     5adbf48f8448e68e82aa9851526c6884b31f4425.roa (raw, json)
Hash identifier:          fLW+77HjYIYRd5DLtJSvw1CrjTmv0PQ8EhEhU8Q526k=
Subject key identifier:   AE:79:26:10:DA:E2:21:72:7A:8C:8A:BB:A9:CF:2D:B7:8C:D9:71:38
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       1136D6
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/5adbf48f8448e68e82aa9851526c6884b31f4425.roa
Signing time:             Fri 13 Aug 2021 15:00:30 +0000
ROA not before:           Fri 13 Aug 2021 15:00:21 +0000
ROA not after:            Thu 13 Aug 2026 15:00:21 +0000
asID:                     27947
IP address blocks:        200.125.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1128150 (0x1136d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Aug 13 15:00:21 2021 GMT
            Not After : Aug 13 15:00:21 2026 GMT
        Subject: CN=5adbf48f8448e68e82aa9851526c6884b31f4425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f8:c9:12:0b:48:af:3b:06:d7:5c:99:78:cf:
                    96:ff:31:b9:56:4f:14:a9:58:42:4c:bc:45:61:4a:
                    b1:7d:c1:ea:ea:6c:aa:ef:c0:cc:ce:dc:4b:f9:cd:
                    5c:0e:04:61:68:79:02:c8:48:97:2e:04:e4:7c:5e:
                    46:43:fe:45:35:ac:2f:d0:d7:b6:d9:f4:ac:05:d3:
                    9d:d7:a3:24:32:81:13:ca:72:f2:f3:9c:a5:59:74:
                    82:ef:e9:72:30:05:b4:c9:59:89:a8:40:e7:a1:d5:
                    c5:5d:cc:e5:9c:ac:f1:67:cb:1e:70:88:7d:41:e1:
                    08:bd:55:12:16:4a:9f:99:65:8f:5b:f0:fb:8b:60:
                    d1:02:ca:db:2c:ba:cf:a7:fb:59:41:15:2e:de:c8:
                    ff:2c:a9:32:ef:b7:8b:ac:c9:ba:9f:e0:ec:65:2e:
                    69:be:6f:70:cb:cb:3e:07:01:1c:5d:d2:33:97:2f:
                    07:df:ec:ad:d2:7e:53:73:07:52:90:5a:82:b2:fe:
                    56:01:45:90:72:8f:18:b8:28:d2:5b:59:fa:78:e3:
                    c1:94:04:eb:6f:f4:88:20:2e:3b:de:42:cf:45:02:
                    ef:88:ff:d0:c1:26:11:3a:24:d0:6f:2b:9f:e8:33:
                    03:ef:0c:ff:16:fe:20:39:52:46:5d:26:c5:75:0a:
                    1b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:79:26:10:DA:E2:21:72:7A:8C:8A:BB:A9:CF:2D:B7:8C:D9:71:38
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/5adbf48f8448e68e82aa9851526c6884b31f4425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:28:f1:ad:45:b9:f0:58:6f:bb:4c:1e:bb:39:ba:34:3d:33:
         e9:14:3d:7b:17:c4:88:03:0a:29:bb:5b:4a:aa:0c:c7:74:9b:
         22:e9:68:3a:c1:67:74:44:23:77:82:72:89:60:77:fe:c4:5c:
         e8:b8:26:a4:74:f9:7d:de:dd:6d:14:b0:9c:32:ec:4d:ac:ae:
         df:82:d6:1e:30:a5:ed:cb:46:66:89:4f:72:52:a4:0e:42:fb:
         2b:51:df:b9:0a:8b:eb:1c:89:1e:fb:5a:e0:f1:d9:0d:7a:1f:
         bc:eb:e9:1d:1e:8d:29:9f:6f:d2:27:9b:77:37:37:07:d7:94:
         2d:42:5e:76:13:e5:32:99:c7:8c:71:ae:40:f7:a9:02:0b:0a:
         ad:95:a3:bf:eb:d6:1a:6f:e0:b9:2d:08:1d:d8:a6:13:61:5b:
         44:c8:56:72:d9:47:25:05:8e:cb:6e:cd:a7:85:64:5b:d3:04:
         fe:b5:e8:f9:01:1d:d1:f2:70:27:22:9f:a6:04:f2:1e:4d:60:
         06:df:62:6a:09:21:f9:30:7c:58:6f:69:da:ab:8e:1b:70:55:
         87:39:bc:14:66:fa:86:5c:5e:3b:04:ae:a1:64:bc:7b:a3:6c:
         44:99:78:f0:1f:e9:ea:b4:22:2d:28:d6:04:dd:8f:ad:40:2a:
         85:b9:b0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:18 2023 by rpki-client on console-fra.rpki-client.org