Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/67966b50458573c2c33cda239e1e05b14d3b8939.roa
File:                     67966b50458573c2c33cda239e1e05b14d3b8939.roa (raw, json)
Hash identifier:          VaA5UHzeo7CwouSec1IbM9WISz4zy2DRWuz8H/Cxo9o=
Subject key identifier:   9A:7A:0D:6D:88:06:E6:B0:AD:32:8B:44:66:44:BD:B6:14:9C:4F:7A
Certificate issuer:       /CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Certificate serial:       0D4728
Authority key identifier: 9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/67966b50458573c2c33cda239e1e05b14d3b8939.roa
Signing time:             Fri 09 Apr 2021 06:53:41 +0000
ROA not before:           Fri 09 Apr 2021 03:00:00 +0000
ROA not after:            Sun 09 Apr 2023 03:00:00 +0000
asID:                     266757
IP address blocks:        191.97.59.0/24 maxlen: 24
                          191.97.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870184 (0xd4728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b9d9319d2010f9907e00e3e1940885c59db093
        Validity
            Not Before: Apr  9 03:00:00 2021 GMT
            Not After : Apr  9 03:00:00 2023 GMT
        Subject: CN=67966b50458573c2c33cda239e1e05b14d3b8939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:41:0c:ca:2b:19:7c:5f:f8:5b:30:e2:ab:
                    d5:94:28:5a:c8:c8:dd:e7:de:5c:76:2b:d3:ff:b7:
                    89:4c:d1:00:ae:a2:df:53:25:68:f2:2d:32:d5:34:
                    ec:08:5c:4c:77:3e:0e:62:a0:76:40:f5:80:52:18:
                    15:0d:86:f8:04:a9:2f:e1:56:79:00:f9:81:df:3f:
                    87:46:6e:e1:71:2e:cf:54:b2:72:fa:e1:d7:69:e2:
                    c8:fa:9e:e6:f5:50:34:7d:e1:24:a5:21:ab:70:45:
                    64:13:43:1b:90:bb:b7:de:eb:59:47:55:ee:45:cc:
                    a0:cb:81:cd:1d:1b:93:5a:42:6b:76:99:37:ff:c9:
                    6c:8d:42:de:5c:24:5e:fc:53:f4:02:51:67:1d:34:
                    22:0f:ad:0c:9d:02:e6:a4:3b:23:b8:57:83:7e:20:
                    33:09:c9:ad:2a:9b:ba:0b:70:03:85:86:90:08:e6:
                    85:b4:38:94:90:1b:4b:06:56:55:4c:d5:97:ef:b1:
                    9f:08:e5:70:ba:41:8b:87:2f:76:16:b2:4b:ac:97:
                    35:af:7c:50:c4:06:8a:2c:59:f7:c1:19:e7:c8:8d:
                    ea:57:ae:d9:8d:24:08:01:95:45:4d:a8:53:ca:94:
                    57:a6:d7:0e:2c:91:8d:c7:33:55:56:ba:2b:ac:a7:
                    78:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7A:0D:6D:88:06:E6:B0:AD:32:8B:44:66:44:BD:B6:14:9C:4F:7A
            X509v3 Authority Key Identifier:
                keyid:9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/67966b50458573c2c33cda239e1e05b14d3b8939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a9b9d9319d2010f9907e00e3e1940885c59db093.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.59.0/24
                  191.97.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e0:be:56:d6:d3:da:e9:5d:44:03:de:12:82:46:a9:e8:1f:
         3e:cb:de:89:54:3a:67:05:0b:13:d0:df:0d:c5:e3:bc:80:d0:
         ad:2b:55:2c:0c:97:9a:45:f9:b9:c9:6c:c0:c9:7b:6a:b7:dc:
         cb:cc:2c:36:47:5b:0f:d9:e0:ee:14:94:8b:8e:62:66:69:0f:
         6f:0f:24:50:77:74:7e:3b:c2:66:65:ee:fa:41:17:b2:8e:31:
         c9:0b:29:fb:59:91:29:b7:73:22:ab:3c:0b:a9:ee:84:86:7b:
         8f:20:40:24:44:39:e0:dd:1b:1a:a0:3b:34:59:fa:fd:a4:c0:
         13:f5:ab:11:00:03:d8:c0:df:0c:98:f0:7b:bb:1b:d1:4a:a3:
         b9:33:09:3a:15:d5:1f:b8:be:be:74:4f:03:5a:05:bb:84:f8:
         80:63:5e:03:25:11:b1:62:64:6d:61:bc:b9:ba:08:31:a9:58:
         08:4b:0c:65:a9:e1:6c:00:6a:eb:7a:db:c8:10:20:6f:fb:39:
         95:2e:8e:28:1d:e2:22:ed:b8:1f:f8:ae:91:c1:5e:c7:a9:bf:
         79:4b:78:09:64:8e:f3:b2:a4:92:49:58:17:c7:fb:c3:94:99:
         20:bf:54:be:7f:44:43:05:f0:53:a4:cf:0e:9d:c9:d5:93:6c:
         5f:03:15:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org