Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/9d63b433f54ed83fa2091f006c1c776cb4ea7d54.roa
File:                     9d63b433f54ed83fa2091f006c1c776cb4ea7d54.roa (raw, json)
Hash identifier:          VwS8Brq6swurZ3jHDRMosDizLhoUhDl+nAFfI0rYJkE=
Subject key identifier:   EA:1F:D1:81:05:25:7C:4D:56:57:7B:79:19:F0:E5:18:AE:DF:46:54
Certificate issuer:       /CN=5fda6ad2528a266efa963c472a945b45114d0ccf
Certificate serial:       06C28A
Authority key identifier: 0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/9d63b433f54ed83fa2091f006c1c776cb4ea7d54.roa
Signing time:             Wed 19 Oct 2022 16:29:02 +0000
ROA not before:           Tue 18 Oct 2022 16:19:28 +0000
ROA not after:            Sat 19 Oct 2024 16:19:28 +0000
asID:                     272883
IP address blocks:        181.233.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443018 (0x6c28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fda6ad2528a266efa963c472a945b45114d0ccf
        Validity
            Not Before: Oct 18 16:19:28 2022 GMT
            Not After : Oct 19 16:19:28 2024 GMT
        Subject: CN=9d63b433f54ed83fa2091f006c1c776cb4ea7d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7e:2c:20:54:6f:18:5f:ab:68:9d:4f:c6:45:
                    85:9d:61:b5:b5:bc:85:7d:f8:80:1f:b9:9e:cb:5e:
                    df:ff:8b:f8:e1:c1:96:52:a7:f0:e9:8b:fd:64:ae:
                    87:18:1c:70:1f:3e:be:19:93:57:64:10:87:1b:b3:
                    f4:13:13:8c:ab:bf:c0:af:cf:4c:57:ed:1c:5e:5c:
                    22:29:5f:0a:d1:a8:d4:c8:59:7c:15:17:36:5a:80:
                    88:1b:db:09:9c:dc:41:94:5a:62:a0:8a:17:98:c7:
                    c3:cf:fc:85:d0:fd:c9:3f:bd:7d:f3:27:a6:df:bf:
                    32:af:a5:62:7d:ec:72:56:f9:ee:98:1b:8b:3c:6d:
                    17:88:6a:e3:4c:23:4c:b8:6e:16:06:8f:e9:4c:56:
                    1d:06:0e:45:53:75:6a:94:55:8f:ba:94:9e:57:ec:
                    d0:92:36:ef:a1:22:c0:cd:50:4a:97:59:35:93:8b:
                    d1:ed:e9:4f:51:b1:f1:26:9b:d0:a3:e3:1e:17:24:
                    e8:be:44:2b:f3:60:0d:71:e6:e3:4d:14:c1:cb:20:
                    26:c4:1b:eb:c0:96:04:89:dd:e2:1f:40:1a:d7:31:
                    6d:0a:63:5b:05:0f:3f:08:27:50:08:17:df:b7:ea:
                    40:0a:64:8f:9f:40:cb:74:8d:ca:f0:b8:4c:4c:c6:
                    71:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1F:D1:81:05:25:7C:4D:56:57:7B:79:19:F0:E5:18:AE:DF:46:54
            X509v3 Authority Key Identifier:
                keyid:0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/9d63b433f54ed83fa2091f006c1c776cb4ea7d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5fda6ad2528a266efa963c472a945b45114d0ccf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:a2:84:e2:dd:8a:ce:fb:97:42:d3:a5:70:f6:2b:1f:ab:0e:
         7b:c0:a4:df:88:16:76:52:c7:b5:5d:3c:79:74:5c:42:16:30:
         7b:02:c8:1d:d3:4f:28:b4:40:f1:08:8f:1f:06:03:7c:8d:61:
         35:da:ed:60:3a:96:b9:0e:2a:1d:20:f8:af:b9:75:21:ec:ac:
         18:d7:5f:f6:a4:b6:a8:c7:de:40:94:d5:77:62:85:a3:c4:f3:
         09:6c:7c:85:12:8b:fa:de:e1:f2:10:dd:ab:47:d5:9f:56:dd:
         06:4c:b2:22:9c:3f:97:7e:87:42:eb:d7:1c:c5:90:10:14:e3:
         60:da:a9:17:7c:17:91:b3:fa:83:32:c5:b2:62:ef:19:5c:a6:
         29:c7:96:75:18:f0:2d:e9:5d:b4:80:99:f5:b7:b1:28:4c:6a:
         82:88:b4:35:75:32:bd:8a:7f:c6:b2:85:70:e8:88:1c:a5:fb:
         6d:0d:10:9f:6d:82:4f:a1:04:93:02:7c:08:bd:58:77:a9:86:
         a3:6d:f4:d4:d6:e0:46:e4:5d:2f:ae:97:6c:ea:eb:4a:9e:da:
         c6:76:a2:41:0d:22:c5:fe:fa:7a:2f:9b:87:45:6b:03:df:e9:
         47:30:8f:05:a7:64:c8:01:49:c4:bc:56:8b:4c:3b:ec:46:de:
         e9:98:60:d5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBsKKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVm
ZGE2YWQyNTI4YTI2NmVmYTk2M2M0NzJhOTQ1YjQ1MTE0ZDBjY2YwHhcNMjIxMDE4
MTYxOTI4WhcNMjQxMDE5MTYxOTI4WjAzMTEwLwYDVQQDEyg5ZDYzYjQzM2Y1NGVk
ODNmYTIwOTFmMDA2YzFjNzc2Y2I0ZWE3ZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmn4sIFRvGF+raJ1PxkWFnWG1tbyFffiAH7mey17f/4v44cGW
Uqfw6Yv9ZK6HGBxwHz6+GZNXZBCHG7P0ExOMq7/Ar89MV+0cXlwiKV8K0ajUyFl8
FRc2WoCIG9sJnNxBlFpioIoXmMfDz/yF0P3JP7198yem378yr6VifexyVvnumBuL
PG0XiGrjTCNMuG4WBo/pTFYdBg5FU3VqlFWPupSeV+zQkjbvoSLAzVBKl1k1k4vR
7elPUbHxJpvQo+MeFyTovkQr82ANcebjTRTByyAmxBvrwJYEid3iH0Aa1zFtCmNb
BQ8/CCdQCBfft+pACmSPn0DLdI3K8LhMTMZxdwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOof0YEFJXxNVld7eRnw5Riu30ZUMB8GA1UdIwQYMBaAFA1bxD8SHr0G0UUp
azA2M39EQtlZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWZkYTZh
ZDI1MjhhMjY2ZWZhOTYzYzQ3MmE5NDViNDUxMTRkMGNjZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThlNjY3YzUtM2RhZS00MDc5LThjN2ItOGUyOTU3
M2Q1ZWQ0LzlkNjNiNDMzZjU0ZWQ4M2ZhMjA5MWYwMDZjMWM3NzZjYjRlYTdkNTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGU2NjdjNS0zZGFlLTQwNzktOGM3Yi04ZTI5
NTczZDVlZDQvNWZkYTZhZDI1MjhhMjY2ZWZhOTYzYzQ3MmE5NDViNDUxMTRkMGNj
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALXpMjANBgkqhkiG9w0BAQsFAAOCAQEANKKE4t2KzvuXQtOl
cPYrH6sOe8Ck34gWdlLHtV08eXRcQhYwewLIHdNPKLRA8QiPHwYDfI1hNdrtYDqW
uQ4qHSD4r7l1IeysGNdf9qS2qMfeQJTVd2KFo8TzCWx8hRKL+t7h8hDdq0fVn1bd
BkyyIpw/l36HQuvXHMWQEBTjYNqpF3wXkbP6gzLFsmLvGVymKceWdRjwLeldtICZ
9bexKExqgoi0NXUyvYp/xrKFcOiIHKX7bQ0Qn22CT6EEkwJ8CL1Yd6mGo2301Nbg
RuRdL66XbOrrSp7axnaiQQ0ixf76ei+bh0VrA9/pRzCPBadkyAFJxLxWi0w77Ebe
6Zhg1Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:20 2023 by rpki-client on console-fra.rpki-client.org