Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/ae55e67e22911d305fc980c7d0a0fe69fd06119d.roa
File:                     ae55e67e22911d305fc980c7d0a0fe69fd06119d.roa (raw, json)
Hash identifier:          8WxJzi6X/1xHkrP5w64tsATwwncP+Kpoi6dZk/A0e8U=
Subject key identifier:   28:BE:D7:DE:34:45:75:84:86:38:8D:0E:2E:C3:09:18:09:00:CA:4D
Certificate issuer:       /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial:       022C6D
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/ae55e67e22911d305fc980c7d0a0fe69fd06119d.roa
Signing time:             Wed 07 Dec 2022 03:13:46 +0000
ROA not before:           Tue 20 Sep 2022 20:48:46 +0000
ROA not after:            Sat 21 Sep 2024 20:48:46 +0000
asID:                     8163
IP address blocks:        200.89.96.0/20 maxlen: 20
                          200.89.96.0/24 maxlen: 24
                          200.89.97.0/24 maxlen: 24
                          200.89.98.0/24 maxlen: 24
                          200.89.99.0/24 maxlen: 24
                          200.89.101.0/24 maxlen: 24
                          200.89.102.0/24 maxlen: 24
                          200.89.103.0/24 maxlen: 24
                          200.89.104.0/24 maxlen: 24
                          200.89.105.0/24 maxlen: 24
                          200.89.106.0/24 maxlen: 24
                          200.89.107.0/24 maxlen: 24
                          200.89.108.0/24 maxlen: 24
                          200.89.109.0/24 maxlen: 24
                          200.89.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142445 (0x22c6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
        Validity
            Not Before: Sep 20 20:48:46 2022 GMT
            Not After : Sep 21 20:48:46 2024 GMT
        Subject: CN=ae55e67e22911d305fc980c7d0a0fe69fd06119d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:5e:75:a0:47:5d:f2:70:70:77:fa:76:ec:
                    29:fa:b2:6b:3d:21:fa:3f:2c:7d:3e:71:be:ad:36:
                    70:51:35:1b:8b:1f:31:9a:bc:1a:ff:56:ee:2f:8e:
                    da:ab:07:d1:72:a8:79:a3:80:91:11:d0:da:5c:04:
                    00:4a:62:3a:9b:81:4b:2f:37:ae:c8:1a:18:9d:45:
                    4a:d6:87:4d:53:5a:f2:de:0f:39:d0:98:20:50:12:
                    38:93:63:60:97:73:9f:33:04:76:ca:c7:b4:f4:59:
                    0a:8d:ef:32:24:bc:5a:b4:4c:17:27:a3:e2:7c:19:
                    4a:02:77:d2:a2:16:49:92:a0:0b:3f:b0:d5:5e:2b:
                    34:79:da:9a:b0:7d:c8:78:e0:59:25:a8:06:b5:be:
                    15:83:a5:71:53:4c:7c:82:de:59:26:5f:78:00:b9:
                    32:44:bf:e5:09:32:1a:1c:a8:eb:a3:ba:f6:34:01:
                    68:ed:86:c6:17:f7:65:75:a5:58:9e:2e:7f:c7:6e:
                    c2:7b:e1:8a:5d:da:71:3d:f9:4b:a1:35:31:d9:39:
                    3a:1c:90:21:1c:76:12:6a:25:b4:e8:55:87:10:cc:
                    95:9c:3d:49:6f:bc:33:6c:d5:6b:63:0c:e6:e7:e6:
                    0b:f6:f9:8c:48:21:27:da:26:70:37:16:d0:d4:83:
                    62:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BE:D7:DE:34:45:75:84:86:38:8D:0E:2E:C3:09:18:09:00:CA:4D
            X509v3 Authority Key Identifier:
                keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/ae55e67e22911d305fc980c7d0a0fe69fd06119d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:bb:6b:58:da:0f:8e:08:b5:6a:00:8e:2d:d6:e4:e8:66:f7:
         98:d5:d4:da:f2:6c:0b:ac:47:c6:7a:27:47:1a:bb:0c:d3:31:
         15:ea:13:a3:bd:6b:e1:1b:a8:47:3b:f9:f7:90:71:e5:a0:bc:
         f8:8b:4f:46:84:ca:af:25:90:bc:ed:a2:97:5e:39:20:a1:ab:
         c9:19:2a:61:ba:76:e8:8c:33:18:d3:76:54:2f:6f:6c:cd:ca:
         c1:1c:22:34:3f:7b:64:0c:99:8a:c3:9f:d9:bd:f8:df:9a:7e:
         37:54:ff:e0:07:39:e2:d7:6c:9f:c5:4f:45:db:b6:11:7f:d0:
         e5:da:2c:26:bb:19:b1:9e:64:75:8f:22:a1:34:dc:5c:27:10:
         5d:e0:09:4c:02:51:46:33:3f:99:0d:5b:ba:27:44:ce:f2:9d:
         bd:ed:15:97:f2:3a:2f:8f:66:f6:5b:32:4a:09:73:19:a2:d3:
         ab:0b:f5:c0:f6:c9:b3:c3:cf:89:56:d0:73:48:d5:cb:39:b5:
         84:eb:09:ec:b4:05:e7:82:30:34:56:72:d5:b3:fb:c3:39:90:
         da:fb:d7:3d:3a:2d:ee:8c:2e:5f:23:65:58:e8:8f:b6:aa:e6:
         e7:4d:53:a5:2d:7f:ee:15:5d:5a:60:4b:44:7f:72:ac:20:fb:
         d6:fe:0e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 18:08:10 2023 by rpki-client on console-fra.rpki-client.org