Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/9d8450dace9c1bd1c8238ee099076f8c65d3802f.roa
File:                     9d8450dace9c1bd1c8238ee099076f8c65d3802f.roa (raw, json)
Hash identifier:          VeQIRzwPyYeu/cNl+Qzu6k0XvC+Hvr+AHT4yPrSfZTk=
Subject key identifier:   C1:79:37:AF:98:A3:CA:73:19:67:ED:82:A9:DC:70:55:1D:9E:0A:88
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       140AEC
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/9d8450dace9c1bd1c8238ee099076f8c65d3802f.roa
Signing time:             Mon 18 Oct 2021 17:20:24 +0000
ROA not before:           Mon 18 Oct 2021 03:00:00 +0000
ROA not after:            Wed 18 Oct 2023 03:00:00 +0000
asID:                     52323
IP address blocks:        181.16.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313516 (0x140aec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Oct 18 03:00:00 2021 GMT
            Not After : Oct 18 03:00:00 2023 GMT
        Subject: CN=9d8450dace9c1bd1c8238ee099076f8c65d3802f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b8:38:eb:11:69:35:f6:1d:0f:5d:e1:ff:7c:
                    56:72:48:85:b3:2f:91:fb:8f:db:35:03:9a:c1:4e:
                    18:10:b5:2e:12:77:ff:39:45:3b:5d:22:6d:52:3f:
                    9b:9b:7f:33:29:ac:4d:34:22:30:64:01:ca:c8:b7:
                    4f:9c:30:af:2a:64:9b:12:f9:d4:f3:b9:b0:de:60:
                    e3:91:26:1d:06:37:d9:74:4c:87:96:51:a6:5a:24:
                    c0:1b:d3:ac:82:60:02:d0:60:e0:f4:c1:70:d7:5b:
                    9c:b8:19:13:bd:4d:37:23:0a:b2:96:bd:53:a1:11:
                    08:a2:89:fe:2d:df:14:d2:db:8c:fc:fd:48:08:78:
                    bc:f8:a9:c0:fe:0e:e4:3f:a0:9f:0b:db:01:2b:41:
                    d6:ed:4e:9e:1b:1c:d8:79:55:bc:a4:aa:30:e6:83:
                    31:09:73:a4:85:c0:6e:dd:f3:9e:d3:a6:3c:4e:e8:
                    f7:e2:29:56:ac:53:5c:10:46:8d:e2:84:a1:4c:ee:
                    d4:36:5a:6e:c5:62:0f:8f:38:82:30:0f:0b:b1:09:
                    67:c7:18:3d:d3:62:b2:b2:6f:04:f5:a5:6b:f1:64:
                    a2:24:4c:28:6c:f4:88:4d:7e:80:b0:82:cd:23:a8:
                    3f:a9:66:b2:10:9c:ca:a5:28:08:8c:95:f6:0c:59:
                    29:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:79:37:AF:98:A3:CA:73:19:67:ED:82:A9:DC:70:55:1D:9E:0A:88
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/9d8450dace9c1bd1c8238ee099076f8c65d3802f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:8a:6d:5d:26:5f:8e:5d:fd:f4:f2:fd:25:2f:c3:0a:9a:89:
         54:51:fc:d6:12:91:65:f5:86:ec:89:c4:a0:cf:24:2b:63:0f:
         ae:24:b5:65:2f:3c:17:fa:5d:de:7a:35:1f:84:6d:a6:b1:e2:
         a2:ab:4a:e5:ad:14:92:64:8a:9c:db:f3:7d:83:cf:64:53:82:
         5f:3c:bf:4f:c6:34:c9:25:82:80:1a:6b:a9:b9:4d:82:91:6b:
         0b:2f:cb:db:e7:94:41:99:53:60:1a:73:0b:81:39:17:f9:6c:
         cd:16:b7:64:4b:e1:b8:5b:aa:94:7d:5a:5d:1a:f2:a8:14:2f:
         cd:da:11:77:61:d0:09:bb:b8:96:45:11:00:b0:73:da:e3:09:
         ec:57:d0:c3:4e:8e:28:ce:bf:1c:77:d8:c3:d8:02:0a:93:44:
         da:aa:ea:e3:2a:f1:7b:5b:ca:bc:87:b3:42:04:99:cc:78:89:
         d4:fc:57:9c:6a:3e:6a:c1:69:7b:33:41:87:06:bc:ad:41:6a:
         67:02:8f:2c:7e:7e:f5:ca:cc:1f:43:3f:4c:0e:8b:f0:b5:db:
         2a:37:6f:0f:44:9d:c7:0e:67:4b:96:ab:a2:ee:d3:5b:ae:e5:
         98:68:1a:b0:2e:05:da:b5:3e:02:ba:f3:6b:20:ed:8b:78:dc:
         1d:e3:e9:fb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFArsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjExMDE4
MDMwMDAwWhcNMjMxMDE4MDMwMDAwWjAzMTEwLwYDVQQDEyg5ZDg0NTBkYWNlOWMx
YmQxYzgyMzhlZTA5OTA3NmY4YzY1ZDM4MDJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1Lg46xFpNfYdD13h/3xWckiFsy+R+4/bNQOawU4YELUuEnf/
OUU7XSJtUj+bm38zKaxNNCIwZAHKyLdPnDCvKmSbEvnU87mw3mDjkSYdBjfZdEyH
llGmWiTAG9OsgmAC0GDg9MFw11ucuBkTvU03Iwqylr1ToREIoon+Ld8U0tuM/P1I
CHi8+KnA/g7kP6CfC9sBK0HW7U6eGxzYeVW8pKow5oMxCXOkhcBu3fOe06Y8Tuj3
4ilWrFNcEEaN4oShTO7UNlpuxWIPjziCMA8LsQlnxxg902Kysm8E9aVr8WSiJEwo
bPSITX6AsILNI6g/qWayEJzKpSgIjJX2DFkpvQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMF5N6+Yo8pzGWftgqnccFUdngqIMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3LzlkODQ1MGRhY2U5YzFiZDFjODIzOGVlMDk5MDc2ZjhjNjVkMzgwMmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQ1TANBgkqhkiG9w0BAQsFAAOCAQEANIptXSZfjl399PL9
JS/DCpqJVFH81hKRZfWG7InEoM8kK2MPriS1ZS88F/pd3no1H4RtprHioqtK5a0U
kmSKnNvzfYPPZFOCXzy/T8Y0ySWCgBprqblNgpFrCy/L2+eUQZlTYBpzC4E5F/ls
zRa3ZEvhuFuqlH1aXRryqBQvzdoRd2HQCbu4lkURALBz2uMJ7FfQw06OKM6/HHfY
w9gCCpNE2qrq4yrxe1vKvIezQgSZzHiJ1PxXnGo+asFpezNBhwa8rUFqZwKPLH5+
9crMH0M/TA6L8LXbKjdvD0Sdxw5nS5arou7TW67lmGgasC4F2rU+ArrzayDti3jc
HePp+w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-fra.rpki-client.org