Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/7d43d771b2c703e8e258b53c0b1f55eca27ce036.roa
File:                     7d43d771b2c703e8e258b53c0b1f55eca27ce036.roa (raw, json)
Hash identifier:          p56DktJ4LjqVuKY/8SzcVEFXlYTDBDWSerbDqzbvWgI=
Subject key identifier:   D9:15:21:EE:41:96:6C:49:63:7D:B2:D5:67:9E:88:A9:5F:DE:57:83
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0DF9E5
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/7d43d771b2c703e8e258b53c0b1f55eca27ce036.roa
Signing time:             Wed 24 Mar 2021 14:31:35 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     52394
IP address blocks:        200.61.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915941 (0xdf9e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=7d43d771b2c703e8e258b53c0b1f55eca27ce036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:b7:5d:a8:9e:0b:19:99:42:29:11:1c:7f:
                    af:29:99:6a:19:6b:a2:f5:63:d1:86:a1:c5:63:61:
                    18:12:05:a6:d1:3e:4a:02:f0:a7:57:91:a7:c1:38:
                    e8:62:8d:28:7a:59:9e:49:26:27:43:98:a0:75:11:
                    d0:0c:e9:7f:63:d0:c3:3e:ce:11:a2:02:89:79:37:
                    84:55:43:44:54:7b:f2:f8:6d:7f:eb:f3:7b:2c:a3:
                    0b:86:0c:ad:6b:91:02:03:cc:1a:18:62:50:09:05:
                    b1:67:ec:4f:74:a4:ce:86:e9:49:53:09:82:b1:f0:
                    df:55:3d:66:8e:b9:2b:ba:66:19:f9:d8:af:b0:b7:
                    b3:4d:16:fa:93:70:e5:d5:2a:0a:b1:68:27:86:79:
                    89:53:66:17:3c:3b:90:d8:25:ac:2d:24:18:31:72:
                    22:48:57:fa:55:a8:f1:45:23:b3:11:42:ae:70:55:
                    3b:0d:83:2d:4f:6b:0a:dd:5f:6a:a7:64:bf:6c:88:
                    fe:a2:7d:1b:b3:b0:87:a7:ed:d3:8c:4b:61:4d:24:
                    4c:32:f6:39:00:bf:9e:93:aa:a7:bd:6a:7a:bc:61:
                    c5:ce:0e:57:38:aa:42:37:c5:95:e1:3f:c5:b1:99:
                    02:1e:7f:a2:c6:18:8d:38:bb:95:2c:dd:a4:d3:48:
                    22:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:15:21:EE:41:96:6C:49:63:7D:B2:D5:67:9E:88:A9:5F:DE:57:83
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/7d43d771b2c703e8e258b53c0b1f55eca27ce036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:c1:de:48:2a:61:e7:03:9b:55:42:a9:35:eb:aa:bb:8c:2c:
         2c:ef:8e:aa:80:08:d1:d2:46:da:c2:f4:19:3d:cc:97:c9:2d:
         3a:15:74:4e:76:ae:c9:90:7f:8e:87:66:e6:7d:1b:7f:b4:20:
         ca:ac:d4:75:92:e4:5a:08:4b:89:49:d2:20:31:ab:ee:f9:87:
         ff:12:9d:96:49:b6:3f:24:36:e8:34:ee:46:57:1b:46:57:fd:
         39:75:66:0d:e5:39:62:db:ea:4d:f2:95:9a:88:df:aa:fe:e2:
         52:fa:4b:f7:61:91:41:41:3e:cb:56:ac:d6:9b:4a:76:e5:ac:
         f9:12:6c:71:f3:ac:0b:15:51:09:73:54:a4:12:ef:f1:71:bb:
         00:36:0b:92:5e:17:ee:9e:15:f7:50:f2:d7:bd:1d:e6:77:aa:
         d2:b4:68:9e:df:42:f0:43:98:82:8e:ef:4a:2b:de:b3:ba:3d:
         8b:ba:e8:46:09:0a:d1:e0:13:7c:e6:41:6b:87:c3:09:ec:a9:
         5d:67:50:71:61:7c:01:13:2b:a9:43:b2:85:61:4f:40:d6:aa:
         b8:1d:df:c9:ed:ae:4b:d1:14:d1:21:64:0e:f6:d4:fd:55:64:
         28:b4:da:b9:d0:7d:a7:48:7f:48:79:80:ae:ab:52:e4:38:60:
         7f:fb:1b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org