Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/6ca926da48ccf3b7e3016deeb1069c4a755c3565.roa
File:                     6ca926da48ccf3b7e3016deeb1069c4a755c3565.roa (raw, json)
Hash identifier:          gMZiPGO6ZHyLqbaYLfkHHYL/xW4M1SbfDsOmUGhOEH0=
Subject key identifier:   CE:50:DB:DE:98:31:53:2E:7E:A1:02:CA:69:B6:21:DE:E6:D4:39:63
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       0D1A31
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/6ca926da48ccf3b7e3016deeb1069c4a755c3565.roa
Signing time:             Wed 24 Mar 2021 14:29:20 +0000
ROA not before:           Wed 24 Mar 2021 14:29:18 +0000
ROA not after:            Tue 24 Mar 2026 14:29:18 +0000
asID:                     61441
IP address blocks:        200.115.85.0/24 maxlen: 24
                          201.182.129.0/24 maxlen: 24
                          2001:13c7:6015::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858673 (0xd1a31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Mar 24 14:29:18 2021 GMT
            Not After : Mar 24 14:29:18 2026 GMT
        Subject: CN=6ca926da48ccf3b7e3016deeb1069c4a755c3565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:cc:de:9d:d8:e8:51:da:cc:6e:fc:03:43:
                    6c:02:e1:85:b3:43:50:33:25:7e:ad:40:69:aa:12:
                    4c:53:be:5b:8a:0d:f1:81:cd:4b:00:6a:c6:21:49:
                    3e:81:ec:5b:07:85:3d:6b:1d:90:d3:5c:2a:dc:d5:
                    f0:16:4e:14:cf:51:9d:62:60:ff:7b:17:c3:17:f3:
                    ea:39:cc:c4:94:f4:32:94:88:85:26:60:a1:62:29:
                    16:b0:10:ec:a4:33:79:e4:53:02:19:f3:5f:f8:d5:
                    4d:50:76:6c:48:a5:d9:ee:6d:51:71:71:38:7c:b0:
                    0d:b7:1e:02:a6:fc:32:8e:cc:56:94:4d:ff:48:09:
                    56:36:98:d9:70:39:91:c4:d3:6a:44:9c:63:99:4a:
                    89:91:95:ab:84:3e:04:c7:98:ac:17:05:00:94:7e:
                    77:7c:ba:d9:af:dc:bf:01:73:41:bd:e2:38:f5:33:
                    3b:74:e7:a5:b4:2a:41:02:46:ac:5b:f3:bb:5c:68:
                    6d:20:c5:33:74:4e:2a:7d:d0:a7:be:e8:53:c9:5a:
                    33:c6:3d:e8:f3:66:6d:f5:fa:9f:33:c0:51:9c:84:
                    34:1c:59:4e:09:d8:9d:45:f1:4c:e9:41:d8:94:72:
                    5e:c0:ba:10:74:ee:14:e0:c8:e0:40:c9:b1:52:9b:
                    17:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:50:DB:DE:98:31:53:2E:7E:A1:02:CA:69:B6:21:DE:E6:D4:39:63
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/6ca926da48ccf3b7e3016deeb1069c4a755c3565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.85.0/24
                  201.182.129.0/24
                IPv6:
                  2001:13c7:6015::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:2f:ae:f1:42:6e:22:68:f4:67:fd:7e:40:17:62:35:25:8a:
         77:bd:de:ad:b5:63:62:21:32:c4:93:f7:bd:01:d8:d5:7e:67:
         bb:82:11:fc:92:a8:48:61:a8:2c:80:52:a5:4d:32:d3:06:f7:
         d3:c6:1d:a1:2b:c2:4a:1e:a6:1a:d8:11:6e:6b:4a:8f:95:87:
         2b:dd:e2:74:ca:0e:d6:6d:27:e9:6c:d4:55:44:31:9e:50:bb:
         4b:08:e9:6f:bd:7a:30:82:d9:4c:c4:5b:31:51:5a:ae:05:14:
         b1:51:55:ea:15:cb:09:a0:ff:5a:81:f0:11:c5:cc:7f:a2:84:
         90:a3:cb:26:96:e0:34:7a:a7:cd:14:ce:3f:ae:f4:75:63:40:
         b5:da:8f:82:4b:13:29:dd:6b:39:cf:51:df:e2:21:13:1b:cd:
         59:b6:88:27:74:05:dc:9e:d6:1b:94:99:3a:31:39:9e:b5:6c:
         3a:dd:59:d3:aa:ea:d9:a7:8c:f1:14:63:1d:ed:b0:e8:36:31:
         ab:83:7c:e4:b3:ba:04:86:13:22:3e:8f:2d:20:5f:b5:27:72:
         8c:90:8d:a1:67:36:e1:2b:91:e9:86:76:a4:7b:ef:90:3b:5e:
         e4:c6:f9:84:91:de:0a:78:c0:82:f4:7d:15:90:85:c6:b4:b5:
         20:29:66:fb
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDDRoxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjEwMzI0
MTQyOTE4WhcNMjYwMzI0MTQyOTE4WjAzMTEwLwYDVQQDEyg2Y2E5MjZkYTQ4Y2Nm
M2I3ZTMwMTZkZWViMTA2OWM0YTc1NWMzNTY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtdnM3p3Y6FHazG78A0NsAuGFs0NQMyV+rUBpqhJMU75big3x
gc1LAGrGIUk+gexbB4U9ax2Q01wq3NXwFk4Uz1GdYmD/exfDF/PqOczElPQylIiF
JmChYikWsBDspDN55FMCGfNf+NVNUHZsSKXZ7m1RcXE4fLANtx4CpvwyjsxWlE3/
SAlWNpjZcDmRxNNqRJxjmUqJkZWrhD4Ex5isFwUAlH53fLrZr9y/AXNBveI49TM7
dOeltCpBAkasW/O7XGhtIMUzdE4qfdCnvuhTyVozxj3o82Zt9fqfM8BRnIQ0HFlO
CdidRfFM6UHYlHJewLoQdO4U4MjgQMmxUpsXkwIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFM5Q296YMVMufqECymm2Id7m1DljMB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxLzZjYTkyNmRhNDhjY2YzYjdlMzAxNmRlZWIxMDY5YzRhNzU1YzM1NjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwEgQCAAEwDAMEAMhzVQMEAMm2gTAPBAIAAjAJAwcAIAETx2AVMA0GCSqGSIb3
DQEBCwUAA4IBAQASL67xQm4iaPRn/X5AF2I1JYp3vd6ttWNiITLEk/e9AdjVfme7
ghH8kqhIYagsgFKlTTLTBvfTxh2hK8JKHqYa2BFua0qPlYcr3eJ0yg7WbSfpbNRV
RDGeULtLCOlvvXowgtlMxFsxUVquBRSxUVXqFcsJoP9agfARxcx/ooSQo8smluA0
eqfNFM4/rvR1Y0C12o+CSxMp3Ws5z1Hf4iETG81ZtogndAXcntYblJk6MTmetWw6
3VnTqurZp4zxFGMd7bDoNjGrg3zks7oEhhMiPo8tIF+1J3KMkI2hZzbhK5Hphnak
e++QO17kxvmEkd4KeMCC9H0VkIXGtLUgKWb7
-----END CERTIFICATE-----
Generated at Mon Oct 30 12:36:31 2023 by rpki-client on console-ams.rpki-client.org