Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/81877d8013ea0e7de482ba8d6b8c3bf97ee51330.roa
File:                     81877d8013ea0e7de482ba8d6b8c3bf97ee51330.roa (raw, json)
Hash identifier:          RTzQ/EylnQPW6ujXt06puvYpIMxDmXLOda+MVLa5EzY=
Subject key identifier:   AE:12:B4:99:18:56:E0:ED:EE:EE:F4:91:F7:2F:D4:37:DA:52:73:08
Certificate issuer:       /CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Certificate serial:       127C4C
Authority key identifier: A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/81877d8013ea0e7de482ba8d6b8c3bf97ee51330.roa
Signing time:             Mon 11 Oct 2021 17:03:17 +0000
ROA not before:           Thu 12 Aug 2021 03:00:00 +0000
ROA not after:            Sat 12 Aug 2023 03:00:00 +0000
asID:                     23243
IP address blocks:        181.174.64.0/20 maxlen: 24
                          181.174.80.0/23 maxlen: 24
                          181.174.83.0/24 maxlen: 24
                          181.174.84.0/22 maxlen: 24
                          181.174.88.0/22 maxlen: 24
                          181.174.92.0/24 maxlen: 24
                          181.174.94.0/23 maxlen: 24
                          181.174.96.0/22 maxlen: 24
                          181.174.100.0/24 maxlen: 24
                          181.174.102.0/23 maxlen: 24
                          181.174.108.0/23 maxlen: 24
                          181.174.111.0/24 maxlen: 24
                          181.174.112.0/21 maxlen: 24
                          181.174.120.0/22 maxlen: 24
                          181.174.125.0/24 maxlen: 24
                          181.174.126.0/23 maxlen: 24
                          181.189.133.0/24 maxlen: 24
                          181.189.134.0/24 maxlen: 24
                          181.189.135.0/24 maxlen: 24
                          181.189.136.0/21 maxlen: 24
                          186.189.192.0/20 maxlen: 24
                          186.189.208.0/22 maxlen: 24
                          186.189.213.0/24 maxlen: 24
                          186.189.214.0/24 maxlen: 24
                          186.189.216.0/24 maxlen: 24
                          186.189.218.0/23 maxlen: 24
                          186.189.220.0/22 maxlen: 24
                          190.106.193.0/24 maxlen: 24
                          190.106.194.0/23 maxlen: 24
                          190.106.196.0/22 maxlen: 24
                          190.106.200.0/21 maxlen: 24
                          190.106.208.0/24 maxlen: 24
                          190.106.211.0/24 maxlen: 24
                          190.106.212.0/22 maxlen: 24
                          190.106.216.0/23 maxlen: 24
                          200.49.160.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211468 (0x127c4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
        Validity
            Not Before: Aug 12 03:00:00 2021 GMT
            Not After : Aug 12 03:00:00 2023 GMT
        Subject: CN=81877d8013ea0e7de482ba8d6b8c3bf97ee51330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ca:a2:c6:27:0e:3f:d0:5d:a9:74:1b:8b:1c:
                    ca:c5:39:f0:e0:31:94:c5:4f:84:31:4c:e5:da:39:
                    20:7b:11:93:ab:91:80:2c:3c:0c:83:19:0e:12:e7:
                    08:66:c6:63:35:c0:06:ac:2c:dc:7b:09:eb:6e:eb:
                    24:49:98:36:da:b4:cb:4d:8a:ed:80:0b:c8:bf:43:
                    af:39:9d:ed:cb:20:4e:86:5b:92:b3:c8:21:6c:1b:
                    43:e9:ec:6f:d8:b2:4b:79:d0:09:f9:a4:6a:bd:71:
                    2a:f5:88:fb:29:f1:e0:9e:e0:bc:21:8b:05:7b:8e:
                    44:cd:04:0c:90:31:12:a7:39:50:3b:13:a3:63:67:
                    1d:3a:a7:2a:0d:34:29:58:e1:3e:cb:40:8c:53:44:
                    ba:c5:e2:27:3c:00:b5:e7:d0:9d:41:7a:54:1b:e4:
                    18:a8:9f:a8:1f:07:91:06:8d:fb:12:76:4b:6d:3b:
                    ec:ed:8c:cc:9b:42:80:e8:f3:55:41:c9:90:82:7b:
                    9e:b8:8d:74:07:c7:e7:40:fd:41:5d:39:b6:8f:77:
                    f6:8a:34:13:09:67:79:ad:41:bf:45:55:ee:e0:2e:
                    6a:4c:58:cd:8d:9a:58:9b:65:b5:3a:ac:7e:98:c1:
                    83:52:05:87:9f:02:91:74:79:a5:a3:1e:1a:26:ab:
                    e2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:12:B4:99:18:56:E0:ED:EE:EE:F4:91:F7:2F:D4:37:DA:52:73:08
            X509v3 Authority Key Identifier:
                keyid:A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/81877d8013ea0e7de482ba8d6b8c3bf97ee51330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.64.0-181.174.81.255
                  181.174.83.0-181.174.92.255
                  181.174.94.0-181.174.100.255
                  181.174.102.0/23
                  181.174.108.0/23
                  181.174.111.0-181.174.123.255
                  181.174.125.0-181.174.127.255
                  181.189.133.0-181.189.143.255
                  186.189.192.0-186.189.211.255
                  186.189.213.0-186.189.214.255
                  186.189.216.0/24
                  186.189.218.0-186.189.223.255
                  190.106.193.0-190.106.208.255
                  190.106.211.0-190.106.217.255
                  200.49.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:fe:88:40:59:41:ad:34:24:df:e4:a9:cf:f8:6f:35:ee:cb:
         56:c9:13:b8:85:66:51:16:6d:bd:d9:db:9f:26:66:9d:f2:fc:
         17:28:ac:c8:90:ce:2c:9b:89:c0:d6:50:a0:12:c6:f3:91:ef:
         1d:6d:4d:20:1a:80:a3:5d:a3:4c:79:a3:1c:42:76:ca:34:01:
         05:1b:d0:30:35:19:b0:1d:61:06:9e:72:e7:42:a1:81:41:f7:
         24:b1:7a:6b:d8:1f:55:d6:79:7f:54:5d:dd:36:3e:ae:30:29:
         89:3a:13:d0:f4:fb:f8:5b:9e:03:79:ef:c0:77:01:a4:90:c6:
         01:25:b7:f7:7f:6b:5d:37:ab:98:da:a8:75:8d:f0:77:0b:af:
         cc:87:b9:cd:45:7c:87:b5:99:fd:89:81:61:34:32:b0:46:a4:
         04:86:11:b1:ed:c7:5d:04:2c:84:54:46:59:59:2e:a9:4d:cc:
         87:96:58:1c:85:6c:fb:16:aa:c6:bb:f2:a7:4c:6d:2c:f9:28:
         57:c1:95:d9:2e:fa:a7:5b:f7:ad:20:6a:d9:e1:4f:2e:b0:df:
         8b:5a:23:02:fe:5e:08:79:ae:48:09:6c:fe:e0:a8:98:42:a5:
         1a:99:69:4b:98:f0:8b:00:f4:e3:35:4b:80:43:76:8f:cc:63:
         d4:8b:1c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:20 2023 by rpki-client on console-fra.rpki-client.org