Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/d22030edb01ab1fbd1c84d0e4841e3e4146c7a34.roa
File:                     d22030edb01ab1fbd1c84d0e4841e3e4146c7a34.roa (raw, json)
Hash identifier:          M9rNpicPNx9qCvmtOvSLAbPJPQ6R6FgQc6/ipc10q74=
Subject key identifier:   B1:06:DD:B1:7B:CE:0F:0C:5E:70:BE:C2:3D:02:10:06:F6:19:39:5C
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       11220C
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/d22030edb01ab1fbd1c84d0e4841e3e4146c7a34.roa
Signing time:             Fri 13 Aug 2021 15:00:25 +0000
ROA not before:           Fri 13 Aug 2021 15:00:21 +0000
ROA not after:            Thu 13 Aug 2026 15:00:21 +0000
asID:                     28041
IP address blocks:        200.125.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1122828 (0x11220c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Aug 13 15:00:21 2021 GMT
            Not After : Aug 13 15:00:21 2026 GMT
        Subject: CN=d22030edb01ab1fbd1c84d0e4841e3e4146c7a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:39:6e:03:d3:a0:0f:0a:52:d1:96:60:c5:5a:
                    a1:43:c6:c2:fa:07:33:af:ad:36:d4:ce:b7:95:27:
                    a8:bd:a1:45:75:54:63:3a:b4:14:d9:49:09:e3:87:
                    60:08:31:b7:c7:3c:e1:2c:a6:11:37:df:64:91:bb:
                    0f:4b:ea:b8:24:c2:7f:d0:9a:28:e3:49:9d:96:91:
                    44:7e:37:a3:df:56:46:11:9c:58:eb:1b:97:4e:e9:
                    8a:95:46:d5:46:d7:29:fb:59:6e:0b:15:bd:b1:b9:
                    a0:e4:88:db:a5:d4:a9:c9:14:d0:9b:98:39:89:c7:
                    f1:ac:d9:07:74:df:17:b5:b0:9b:48:68:65:e2:f8:
                    64:a6:f6:03:27:37:9b:97:45:bc:e4:80:54:7d:ee:
                    5a:cd:57:57:c2:62:85:7e:63:73:f5:46:b6:84:f4:
                    01:80:60:af:1e:17:89:fc:a6:9e:56:83:6c:85:ca:
                    ca:e2:90:70:23:94:eb:3c:e8:b6:ee:4d:bf:06:d6:
                    45:56:c7:c6:80:62:e0:8a:bc:72:c5:fb:88:ce:19:
                    1e:c3:ec:bf:1b:06:e5:cb:5a:e1:67:c7:f3:e9:29:
                    13:91:c2:b4:aa:2d:c5:b5:47:17:5e:ff:29:bd:7e:
                    66:79:69:37:6f:20:7a:41:78:b7:e3:c5:98:e4:80:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:06:DD:B1:7B:CE:0F:0C:5E:70:BE:C2:3D:02:10:06:F6:19:39:5C
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/d22030edb01ab1fbd1c84d0e4841e3e4146c7a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:c8:9b:df:ee:e5:06:aa:a9:73:27:27:b4:29:17:a8:b1:ab:
         ee:36:96:9a:32:7a:d8:29:45:e7:64:a2:4c:43:4e:87:c3:c5:
         f1:ab:be:d7:c1:ed:ee:6a:9a:ef:7a:f1:cf:0f:a3:e8:6f:63:
         66:9b:f0:84:78:f8:32:e6:a8:a0:08:9e:bb:d0:23:67:6d:d8:
         16:36:a7:ff:01:2f:78:c5:cd:95:74:61:e6:e7:cf:a6:2a:fd:
         3f:90:1f:e3:a8:a9:cd:ee:7f:2d:b7:45:12:71:3d:48:87:e1:
         cd:ff:34:e4:f7:6f:0b:68:c2:d2:5c:f4:77:23:3d:8e:ca:1f:
         16:89:77:a1:14:ad:4d:e4:76:b0:2a:66:98:e4:cc:61:37:87:
         db:60:c2:8c:8a:c2:fa:77:e6:b8:89:4a:28:65:4f:e5:41:80:
         d9:f2:31:87:ce:f3:41:cf:01:cc:ea:46:43:40:cb:3e:c9:37:
         6d:71:48:27:4b:a2:0b:15:1e:ac:66:47:a1:01:d6:d2:86:b5:
         f7:cd:5d:55:c4:bc:80:21:7b:0c:e0:81:ce:fc:89:3f:0a:4a:
         fa:ed:2d:68:54:5b:3a:71:7b:4e:e3:8d:5d:a4:b5:d7:47:dc:
         47:cc:bb:73:0a:da:fc:9a:16:89:1d:c7:05:a3:1b:ee:6f:56:
         09:08:c5:aa
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDESIMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFh
ZThjYmU5OTA0ZjEwMzIzMmMwMDI0ODMyMDRmOWYyYWUwNGQwMjYwHhcNMjEwODEz
MTUwMDIxWhcNMjYwODEzMTUwMDIxWjAzMTEwLwYDVQQDEyhkMjIwMzBlZGIwMWFi
MWZiZDFjODRkMGU0ODQxZTNlNDE0NmM3YTM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiDluA9OgDwpS0ZZgxVqhQ8bC+gczr6021M63lSeovaFFdVRj
OrQU2UkJ44dgCDG3xzzhLKYRN99kkbsPS+q4JMJ/0Joo40mdlpFEfjej31ZGEZxY
6xuXTumKlUbVRtcp+1luCxW9sbmg5IjbpdSpyRTQm5g5icfxrNkHdN8XtbCbSGhl
4vhkpvYDJzebl0W85IBUfe5azVdXwmKFfmNz9Ua2hPQBgGCvHheJ/KaeVoNshcrK
4pBwI5TrPOi27k2/BtZFVsfGgGLgirxyxfuIzhkew+y/Gwbly1rhZ8fz6SkTkcK0
qi3FtUcXXv8pvX5meWk3byB6QXi348WY5IBu1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLEG3bF7zg8MXnC+wj0CEAb2GTlcMB8GA1UdIwQYMBaAFJ4h+rhynemGXdTW
X98/sNPNNxk0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWFlOGNi
ZTk5MDRmMTAzMjMyYzAwMjQ4MzIwNGY5ZjJhZTA0ZDAyNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGRjMmMwN2EtOGM3ZS00N2M3LWFlOTAtY2NkNzE0
ODdjZTEwL2QyMjAzMGVkYjAxYWIxZmJkMWM4NGQwZTQ4NDFlM2U0MTQ2YzdhMzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZGMyYzA3YS04YzdlLTQ3YzctYWU5MC1jY2Q3
MTQ4N2NlMTAvYWFlOGNiZTk5MDRmMTAzMjMyYzAwMjQ4MzIwNGY5ZjJhZTA0ZDAy
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMh9hzANBgkqhkiG9w0BAQsFAAOCAQEAEMib3+7lBqqpcycn
tCkXqLGr7jaWmjJ62ClF52SiTENOh8PF8au+18Ht7mqa73rxzw+j6G9jZpvwhHj4
MuaooAieu9AjZ23YFjan/wEveMXNlXRh5ufPpir9P5Af46ipze5/LbdFEnE9SIfh
zf805PdvC2jC0lz0dyM9jsofFol3oRStTeR2sCpmmOTMYTeH22DCjIrC+nfmuIlK
KGVP5UGA2fIxh87zQc8BzOpGQ0DLPsk3bXFIJ0uiCxUerGZHoQHW0oa1981dVcS8
gCF7DOCBzvyJPwpK+u0taFRbOnF7TuONXaS110fcR8y7cwra/JoWiR3HBaMb7m9W
CQjFqg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-ams.rpki-client.org