Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/1ecb9cb3a1c0bd8bc44a8610ebecf97824a08ea0.roa
File:                     1ecb9cb3a1c0bd8bc44a8610ebecf97824a08ea0.roa (raw, json)
Hash identifier:          fnuugt8kZuQux7rJNIe7r+8OdfRdTvQkbVTHCEu0Ldk=
Subject key identifier:   44:BF:19:B1:43:32:94:58:D0:03:E8:3A:49:6B:DA:49:A1:C9:67:D9
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       0DC40D
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/1ecb9cb3a1c0bd8bc44a8610ebecf97824a08ea0.roa
Signing time:             Wed 24 Mar 2021 22:52:00 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     19114
IP address blocks:        200.24.220.0/24 maxlen: 24
                          200.7.204.0/24 maxlen: 24
                          200.7.209.0/24 maxlen: 24
                          200.7.211.0/24 maxlen: 24
                          200.7.212.0/24 maxlen: 24
                          200.7.221.0/24 maxlen: 24
                          200.7.224.0/22 maxlen: 23
                          200.7.228.0/23 maxlen: 23
                          2800:830:c001::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902157 (0xdc40d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=1ecb9cb3a1c0bd8bc44a8610ebecf97824a08ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:bc:be:41:ba:ae:89:ee:bd:3d:17:9a:13:
                    78:6f:7f:30:1e:75:9e:42:51:92:2f:ad:ad:7e:db:
                    11:be:77:18:33:ca:69:f3:1f:ee:74:a6:b6:9d:32:
                    01:b1:6a:c9:87:5c:67:d4:39:c8:c9:cd:0e:54:e3:
                    5e:d3:63:70:b9:7e:bc:1c:b3:36:c4:59:12:83:52:
                    63:6f:df:4e:d2:26:aa:00:6d:8b:52:ff:df:00:39:
                    c6:ce:48:54:41:c6:44:e4:07:a3:0a:ec:8e:69:37:
                    bd:5f:68:bc:a8:b9:64:88:ac:ac:67:bd:05:05:5f:
                    4d:28:44:c0:f7:4d:4a:58:37:4a:dd:a9:ba:e2:2f:
                    0b:52:10:c7:68:60:f5:e6:6b:2f:39:79:09:61:24:
                    e3:e5:d4:15:bc:95:8c:9f:46:49:ca:d2:39:e1:12:
                    de:ab:ff:46:6e:c1:ee:30:5c:1a:08:d3:66:e0:b2:
                    d4:20:87:77:55:15:fa:9a:f7:ff:bf:03:6a:13:93:
                    c9:16:6f:d9:b1:6f:27:7d:1a:42:79:26:bb:b7:27:
                    0c:80:a1:01:e8:5c:49:7a:52:b0:79:06:f1:18:a2:
                    bd:f2:c4:1c:55:fd:e2:3d:c7:2b:45:d5:08:44:24:
                    4c:fc:2e:b3:e9:7d:c3:83:88:85:67:08:ce:e6:08:
                    42:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BF:19:B1:43:32:94:58:D0:03:E8:3A:49:6B:DA:49:A1:C9:67:D9
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/1ecb9cb3a1c0bd8bc44a8610ebecf97824a08ea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.204.0/24
                  200.7.209.0/24
                  200.7.211.0-200.7.212.255
                  200.7.221.0/24
                  200.7.224.0-200.7.229.255
                  200.24.220.0/24
                IPv6:
                  2800:830:c001::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:6c:62:73:5b:08:16:af:28:2b:69:f2:82:ba:18:de:85:6b:
         fe:ce:00:ff:70:85:b0:22:5d:64:84:c8:7e:fd:ea:19:d8:a5:
         60:ba:72:d7:41:b8:7a:71:13:96:7d:4d:b6:f1:f1:15:d3:30:
         df:f0:e3:7e:2f:62:b6:83:6f:c4:50:53:42:7c:8a:1f:9b:14:
         08:9c:f8:f6:fe:e4:03:30:3f:42:66:c2:85:9a:59:53:e7:f1:
         9a:15:8b:df:0e:32:57:f5:19:90:0f:d2:60:9d:fe:ed:f0:a0:
         9e:19:4e:5c:59:17:f4:80:b3:30:18:50:6c:5c:ea:b2:fe:8c:
         58:f2:2e:d1:53:d0:a0:ff:80:66:7f:22:d1:66:df:db:c3:eb:
         79:0f:10:7e:74:d6:0c:a0:d4:f4:24:ee:2f:82:c0:fa:4c:ac:
         66:85:77:6d:d8:aa:91:23:3d:85:bc:9e:0f:18:64:52:ff:9c:
         56:54:fe:dd:0e:5a:0c:8b:a4:e1:dc:92:c2:23:f0:9b:ce:90:
         52:a3:7f:00:cc:f3:c4:6e:79:d0:14:29:f1:80:68:3f:5a:5c:
         ac:c4:70:1d:23:bc:b9:64:b5:18:ca:46:55:40:98:72:d0:1c:
         98:4f:b6:c4:c9:37:e7:09:5b:79:db:d2:55:f2:25:24:3a:b9:
         5c:f7:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org