Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/d47ec6f60100c610f472eac30a9ab3fa4c68764e.roa
File:                     d47ec6f60100c610f472eac30a9ab3fa4c68764e.roa (raw, json)
Hash identifier:          MM/3EobYYNTjb8JsiL1AzwGi4LYPhv8vDeKEohICbPk=
Subject key identifier:   A7:2B:2B:14:C6:AC:3E:5A:76:7B:B4:77:96:7E:88:A0:79:66:50:BA
Certificate issuer:       /CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Certificate serial:       0ABCDB
Authority key identifier: B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/d47ec6f60100c610f472eac30a9ab3fa4c68764e.roa
Signing time:             Wed 24 Mar 2021 14:35:37 +0000
ROA not before:           Wed 24 Mar 2021 14:35:37 +0000
ROA not after:            Tue 24 Mar 2026 14:35:37 +0000
asID:                     8151
IP address blocks:        201.131.88.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703707 (0xabcdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
        Validity
            Not Before: Mar 24 14:35:37 2021 GMT
            Not After : Mar 24 14:35:37 2026 GMT
        Subject: CN=d47ec6f60100c610f472eac30a9ab3fa4c68764e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:44:b7:00:55:81:6f:f2:91:58:9e:19:ed:b5:
                    0f:7a:ce:6d:7d:ab:ae:8c:b7:e8:14:3b:3d:fb:af:
                    b7:7a:c3:e1:d7:5e:a8:d6:ae:39:b3:53:2d:28:4f:
                    f6:c8:e5:f9:4d:48:ea:bd:23:a8:87:fc:c5:b4:0e:
                    b1:29:c5:19:af:ce:96:16:d9:78:54:52:9a:b7:d1:
                    be:13:92:57:3f:b7:10:c7:cb:53:c9:f3:c9:38:b2:
                    db:b8:4d:44:f5:60:a1:cf:c5:db:d5:15:3f:dc:fb:
                    ae:a9:93:f8:e4:d7:da:44:66:1a:f3:79:00:b3:04:
                    a3:56:a3:a1:c4:61:19:c3:c2:c0:f0:0d:03:7d:b2:
                    86:06:47:f1:45:6c:74:51:80:91:1a:95:5e:ea:fa:
                    41:36:ca:87:0b:d0:3d:53:3f:b7:f6:7a:c8:c2:3f:
                    ce:ab:4a:26:2e:71:a9:ab:69:c3:1f:d3:a2:76:7a:
                    dd:db:f8:e7:20:aa:6d:e5:f4:63:a1:94:93:89:4b:
                    5c:d6:47:a4:8f:6c:ec:73:ec:b2:32:f2:2a:3e:20:
                    7f:4f:1c:24:3a:0b:40:c2:a7:85:c3:97:e8:98:2c:
                    dd:34:6e:2f:71:d9:c9:16:0c:dc:df:aa:c2:46:30:
                    6e:b9:13:95:da:7c:c9:4d:be:e1:ee:dd:aa:f2:5c:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2B:2B:14:C6:AC:3E:5A:76:7B:B4:77:96:7E:88:A0:79:66:50:BA
            X509v3 Authority Key Identifier:
                keyid:B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/d47ec6f60100c610f472eac30a9ab3fa4c68764e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:ef:ce:8b:a3:f4:1f:85:96:3e:fa:6d:46:32:05:ff:33:40:
         d2:a4:24:b6:9d:b0:2d:7a:9d:e2:bc:bd:5a:73:70:ef:bb:e6:
         9c:58:f6:06:e4:56:c1:83:db:51:13:b5:fc:85:c3:49:e3:92:
         92:68:37:d1:ff:e4:1b:8f:59:7c:20:b2:69:ed:54:8b:42:a2:
         16:19:ad:33:26:c2:c1:14:a8:b9:26:fa:8e:60:24:35:c6:fb:
         d6:78:21:e3:78:6d:d0:71:9e:90:37:cd:a9:51:d9:ce:06:d5:
         c4:db:26:0b:99:3a:dc:38:6d:39:2e:7a:64:3d:16:c2:93:e3:
         2f:22:96:1b:df:94:da:7d:ad:a7:17:f4:49:1b:32:95:70:db:
         29:fe:50:8e:be:4a:20:b1:b7:f6:9e:cf:92:cb:03:f7:a0:93:
         fa:1a:02:4d:df:fe:c6:ff:3b:50:f9:ab:bf:b0:8b:a1:41:4b:
         41:24:d2:ad:c1:79:d1:45:97:60:89:85:e8:72:05:37:c2:5e:
         5d:06:3d:1c:21:e7:e4:26:84:2d:e2:9e:9b:40:fc:5d:5c:15:
         d5:af:83:7c:dd:82:c4:50:38:8d:db:99:51:39:88:bd:ff:52:
         39:fe:38:e1:f4:2a:58:8b:fe:b9:1c:a9:c1:d3:f8:22:71:01:
         c6:79:6a:d8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCrzbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
ZGVhMjNkODlmODllMjVlODY5MmE2YzBiMWM0MTNlOTA5ZGExY2EwHhcNMjEwMzI0
MTQzNTM3WhcNMjYwMzI0MTQzNTM3WjAzMTEwLwYDVQQDEyhkNDdlYzZmNjAxMDBj
NjEwZjQ3MmVhYzMwYTlhYjNmYTRjNjg3NjRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk0S3AFWBb/KRWJ4Z7bUPes5tfauujLfoFDs9+6+3esPh116o
1q45s1MtKE/2yOX5TUjqvSOoh/zFtA6xKcUZr86WFtl4VFKat9G+E5JXP7cQx8tT
yfPJOLLbuE1E9WChz8Xb1RU/3PuuqZP45NfaRGYa83kAswSjVqOhxGEZw8LA8A0D
fbKGBkfxRWx0UYCRGpVe6vpBNsqHC9A9Uz+39nrIwj/Oq0omLnGpq2nDH9Oidnrd
2/jnIKpt5fRjoZSTiUtc1kekj2zsc+yyMvIqPiB/TxwkOgtAwqeFw5fomCzdNG4v
cdnJFgzc36rCRjBuuROV2nzJTb7h7t2q8lyDZwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKcrKxTGrD5adnu0d5Z+iKB5ZlC6MB8GA1UdIwQYMBaAFLmaRc/clgAPAvwG
bM+YWfBSwphfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzFkZWEy
M2Q4OWY4OWUyNWU4NjkyYTZjMGIxYzQxM2U5MDlkYTFjYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVlODc1MmQtM2I5ZC00OTBhLWI4OGYtODE1MTM4
MDZjNGRhL2Q0N2VjNmY2MDEwMGM2MTBmNDcyZWFjMzBhOWFiM2ZhNGM2ODc2NGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWU4NzUyZC0zYjlkLTQ5MGEtYjg4Zi04MTUx
MzgwNmM0ZGEvNzFkZWEyM2Q4OWY4OWUyNWU4NjkyYTZjMGIxYzQxM2U5MDlkYTFj
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcmDWDANBgkqhkiG9w0BAQsFAAOCAQEAc+/Oi6P0H4WWPvpt
RjIF/zNA0qQktp2wLXqd4ry9WnNw77vmnFj2BuRWwYPbURO1/IXDSeOSkmg30f/k
G49ZfCCyae1Ui0KiFhmtMybCwRSouSb6jmAkNcb71ngh43ht0HGekDfNqVHZzgbV
xNsmC5k63DhtOS56ZD0WwpPjLyKWG9+U2n2tpxf0SRsylXDbKf5Qjr5KILG39p7P
kssD96CT+hoCTd/+xv87UPmrv7CLoUFLQSTSrcF50UWXYImF6HIFN8JeXQY9HCHn
5CaELeKem0D8XVwV1a+DfN2CxFA4jduZUTmIvf9SOf444fQqWIv+uRypwdP4InEB
xnlq2A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:21 2023 by rpki-client on console-fra.rpki-client.org