Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/2365829783f163ac6debf2e7db38b724aa8e678c.roa
File:                     2365829783f163ac6debf2e7db38b724aa8e678c.roa (raw, json)
Hash identifier:          pj7P8bPvBbxo7Qd1EKc09cNNT3NofD7H5Hoi5afytwE=
Subject key identifier:   21:AF:48:62:A7:8A:38:15:FE:8A:1B:13:77:86:FC:19:D8:5D:BF:9D
Certificate issuer:       /CN=89b05c9212d6b33b390c81f3fc8958af7050b896
Certificate serial:       14AED4
Authority key identifier: C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/2365829783f163ac6debf2e7db38b724aa8e678c.roa
Signing time:             Thu 06 Jan 2022 23:57:28 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264763
IP address blocks:        168.197.96.0/24 maxlen: 24
                          168.197.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1355476 (0x14aed4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b05c9212d6b33b390c81f3fc8958af7050b896
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=2365829783f163ac6debf2e7db38b724aa8e678c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:ed:9b:5a:f9:50:80:77:35:f8:61:06:f8:
                    b9:f5:03:d8:09:26:15:c0:b5:8b:b6:10:d0:fd:4b:
                    76:6f:fb:f1:05:c1:41:81:4e:55:82:1b:d0:0b:c5:
                    08:4e:9d:59:47:9e:cc:cd:b9:1c:b4:92:0e:17:61:
                    5d:4e:93:24:d3:ae:aa:fe:ed:5d:e3:34:7c:3d:ef:
                    f7:49:88:85:67:a8:8f:2e:39:73:a1:ab:00:d8:07:
                    e8:a2:00:f0:2e:b6:83:36:0c:f1:7c:dd:19:1d:be:
                    0b:df:e6:d7:11:14:4a:9b:3f:06:06:9c:a1:84:79:
                    6d:19:d3:a4:d3:c0:66:1d:ea:f2:6a:1a:78:ae:8a:
                    6c:b2:b7:90:56:fb:e4:b5:89:8a:38:74:27:55:b3:
                    ed:08:15:25:59:cb:a1:20:dd:23:84:37:86:46:b4:
                    0c:1d:9e:88:2e:d6:2a:cb:76:5d:ed:91:45:b4:b1:
                    92:39:22:c1:b5:90:2b:60:c5:f6:00:09:b9:14:93:
                    24:d3:1c:2a:e6:b7:44:7f:18:e9:ff:1e:40:75:db:
                    8d:40:8d:9a:be:36:07:4b:a6:0a:9d:ad:0c:6a:82:
                    98:af:3a:08:b2:ee:a6:6c:19:19:c9:92:a3:c6:a7:
                    f4:18:2f:d7:69:ba:c0:12:5e:d6:e9:bc:10:f8:0b:
                    a6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AF:48:62:A7:8A:38:15:FE:8A:1B:13:77:86:FC:19:D8:5D:BF:9D
            X509v3 Authority Key Identifier:
                keyid:C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/2365829783f163ac6debf2e7db38b724aa8e678c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/89b05c9212d6b33b390c81f3fc8958af7050b896.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:73:24:48:fd:91:a3:83:75:80:e6:5f:04:3d:96:e2:48:17:
         38:c1:08:7a:99:87:2f:a5:52:41:6d:4b:85:fb:a7:1c:ef:ef:
         8e:b3:8a:95:07:44:58:65:1e:21:dc:35:0f:5d:ec:e4:76:33:
         9a:b7:14:45:a8:ea:e8:4d:5a:5e:e6:e8:b1:d7:61:00:c3:76:
         71:a2:55:37:95:0b:a3:dd:fe:0a:f3:98:32:0f:cf:96:b4:05:
         c4:ce:ee:94:35:58:27:e2:7a:08:a7:f1:61:1c:f9:f3:3a:9c:
         1a:b5:04:3d:0d:28:5f:06:4c:e5:cd:3e:cb:82:4c:8b:63:23:
         2c:22:e2:0c:45:5b:88:13:d1:d9:b0:84:24:69:9e:69:bc:9c:
         e6:9b:44:4c:c8:ad:2c:30:a1:cb:b7:07:d4:ec:6d:40:6c:f5:
         56:42:f9:a3:eb:c7:56:b5:83:e1:5c:9b:cd:06:b6:bc:6b:ca:
         f9:10:bf:61:34:e0:ee:cb:1f:b1:ca:5f:bd:77:91:ff:7b:9d:
         29:86:f9:15:b7:87:21:24:e6:ab:88:64:b0:ad:03:76:4b:bf:
         fb:aa:51:74:79:41:3a:16:40:64:ef:ff:d1:9a:5f:ea:bc:0d:
         56:d4:e5:ad:ad:20:b3:34:fe:b5:ce:e9:00:83:e3:af:9e:5f:
         dd:b2:74:a0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFK7UMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg5
YjA1YzkyMTJkNmIzM2IzOTBjODFmM2ZjODk1OGFmNzA1MGI4OTYwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygyMzY1ODI5NzgzZjE2
M2FjNmRlYmYyZTdkYjM4YjcyNGFhOGU2NzhjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA9SPtm1r5UIB3NfhhBvi59QPYCSYVwLWLthDQ/Ut2b/vxBcFB
gU5VghvQC8UITp1ZR57MzbkctJIOF2FdTpMk066q/u1d4zR8Pe/3SYiFZ6iPLjlz
oasA2AfoogDwLraDNgzxfN0ZHb4L3+bXERRKmz8GBpyhhHltGdOk08BmHeryahp4
ropssreQVvvktYmKOHQnVbPtCBUlWcuhIN0jhDeGRrQMHZ6ILtYqy3Zd7ZFFtLGS
OSLBtZArYMX2AAm5FJMk0xwq5rdEfxjp/x5AdduNQI2avjYHS6YKna0MaoKYrzoI
su6mbBkZyZKjxqf0GC/XabrAEl7W6bwQ+AumsQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCGvSGKnijgV/oobE3eG/BnYXb+dMB8GA1UdIwQYMBaAFMVhOS6xbdlt+xS/
wyaCOKjpgYMeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODliMDVj
OTIxMmQ2YjMzYjM5MGM4MWYzZmM4OTU4YWY3MDUwYjg5Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2RkMmMxMDAtZGMzMC00MGFjLTg1ZDItNTE4MjU3
MGFjMmJlLzIzNjU4Mjk3ODNmMTYzYWM2ZGViZjJlN2RiMzhiNzI0YWE4ZTY3OGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZGQyYzEwMC1kYzMwLTQwYWMtODVkMi01MTgy
NTcwYWMyYmUvODliMDVjOTIxMmQ2YjMzYjM5MGM4MWYzZmM4OTU4YWY3MDUwYjg5
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAajFYDANBgkqhkiG9w0BAQsFAAOCAQEABXMkSP2Ro4N1gOZf
BD2W4kgXOMEIepmHL6VSQW1LhfunHO/vjrOKlQdEWGUeIdw1D13s5HYzmrcURajq
6E1aXubosddhAMN2caJVN5ULo93+CvOYMg/PlrQFxM7ulDVYJ+J6CKfxYRz58zqc
GrUEPQ0oXwZM5c0+y4JMi2MjLCLiDEVbiBPR2bCEJGmeabyc5ptETMitLDChy7cH
1OxtQGz1VkL5o+vHVrWD4VybzQa2vGvK+RC/YTTg7ssfscpfvXeR/3udKYb5FbeH
ISTmq4hksK0Ddku/+6pRdHlBOhZAZO//0Zpf6rwNVtTlra0gszT+tc7pAIPjr55f
3bJ0oA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-ams.rpki-client.org