Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/77bc06646ebc93132c2b20b71c63bd9ede68e16e.roa
File:                     77bc06646ebc93132c2b20b71c63bd9ede68e16e.roa (raw, json)
Hash identifier:          BxfghXNkW+2Ljv28sx2H0/xXymt5AniauaEtkpJ7EZQ=
Subject key identifier:   C5:B1:9A:3D:AF:2E:E5:2F:C2:CC:B4:D2:E3:8B:BC:99:29:46:8A:CF
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       1BEBD0
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/77bc06646ebc93132c2b20b71c63bd9ede68e16e.roa
Signing time:             Sat 15 Oct 2022 11:54:28 +0000
ROA not before:           Fri 14 Oct 2022 11:52:13 +0000
ROA not after:            Tue 15 Oct 2024 11:52:13 +0000
asID:                     27947
IP address blocks:        200.125.133.0/24 maxlen: 24
                          200.125.142.0/24 maxlen: 24
                          200.125.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829840 (0x1bebd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Oct 14 11:52:13 2022 GMT
            Not After : Oct 15 11:52:13 2024 GMT
        Subject: CN=77bc06646ebc93132c2b20b71c63bd9ede68e16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5d:1b:67:f5:22:9e:a3:6a:b5:a9:48:18:ac:
                    36:cb:a8:9e:2a:20:b5:8f:7d:17:e1:e8:7f:8d:d2:
                    5e:2a:44:68:78:85:77:ac:2a:c1:b7:95:42:33:15:
                    92:6c:cf:84:40:2e:dc:61:64:a4:73:d4:ec:08:9d:
                    8b:39:66:38:9f:32:db:5e:81:cf:d9:a3:e7:fc:71:
                    59:bf:d7:0d:81:b3:37:b8:7c:4e:54:21:be:b5:67:
                    d0:3c:b4:87:2e:2f:ae:03:aa:45:b2:8f:d1:97:ba:
                    1a:70:b6:7d:15:27:85:b8:46:a2:5a:2e:dc:6a:d3:
                    1d:d2:a3:e7:48:c9:22:9e:a9:2b:b2:d6:16:60:01:
                    ee:26:7e:d0:a1:19:3d:e7:98:1c:ee:6a:3d:0a:ba:
                    d9:81:b1:77:5b:c6:c3:dd:82:97:e3:25:13:ca:e8:
                    32:ed:3c:4c:69:10:50:e9:3a:6c:4d:77:52:1a:dd:
                    bc:76:4e:f1:cc:fd:c3:5c:0b:35:ee:43:98:2c:d2:
                    35:b0:a2:93:22:e8:db:23:b0:8b:0a:f8:93:8b:9e:
                    69:25:0e:aa:82:22:81:53:63:0d:0f:a1:10:50:ff:
                    e0:c4:0f:80:31:5f:90:de:f7:bb:4f:9e:38:a3:f1:
                    cc:4a:88:66:02:d6:34:cb:e8:65:e2:03:9e:94:e2:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B1:9A:3D:AF:2E:E5:2F:C2:CC:B4:D2:E3:8B:BC:99:29:46:8A:CF
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/77bc06646ebc93132c2b20b71c63bd9ede68e16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.133.0/24
                  200.125.142.0/24
                  200.125.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:98:e4:25:98:19:73:06:28:b7:6f:16:64:2f:b6:58:0e:c8:
         db:65:72:9e:37:1d:c0:ec:36:af:2f:0d:56:c5:94:7d:3d:30:
         b9:d1:bb:49:1a:a4:76:d9:53:47:46:02:92:9d:8a:5b:7f:d3:
         08:87:32:3e:5a:29:49:ae:37:9b:40:a1:fb:1f:03:fb:8d:30:
         13:16:1f:b0:b8:87:00:f4:53:f8:0a:30:1a:34:81:0d:cd:80:
         00:55:e3:77:c5:db:ea:47:f9:b6:ae:e6:d7:17:21:3a:61:71:
         df:75:3b:57:5a:32:e1:9b:38:d5:74:ab:f1:5e:d7:7d:df:79:
         94:41:a9:82:30:5e:51:3a:24:be:d6:dc:61:5a:f0:93:a5:47:
         5c:d1:61:31:3e:c4:8e:da:61:0b:95:cd:55:da:23:5b:72:1a:
         78:5c:51:2c:12:5c:81:7e:0c:27:81:c5:1c:61:f6:05:9e:e7:
         44:9a:53:00:36:0a:09:90:0e:55:f5:63:3a:ab:df:85:3a:64:
         15:05:f2:bf:5a:6b:08:5e:b0:9e:a9:86:cf:54:95:33:b0:d8:
         c1:25:e3:fd:42:58:00:46:08:c8:af:a5:c1:09:1a:9c:bc:c6:
         69:01:c8:c5:60:e9:3d:f1:bc:9d:6e:37:00:69:c3:e3:c2:0b:
         f7:af:03:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-ams.rpki-client.org