Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/8a6dc9a1ac0b93e9dc27a8965c1b44b0f8aa1b7f.roa
File:                     8a6dc9a1ac0b93e9dc27a8965c1b44b0f8aa1b7f.roa (raw, json)
Hash identifier:          aC7vUwfL1KLBLs7CmZEI2jW3Hz8VbTapMBRHmV24h6I=
Subject key identifier:   2D:20:FF:11:FE:2B:B0:37:CA:E4:9A:80:30:58:CA:0D:AD:38:90:EB
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       181A59
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/8a6dc9a1ac0b93e9dc27a8965c1b44b0f8aa1b7f.roa
Signing time:             Mon 01 Aug 2022 15:34:07 +0000
ROA not before:           Mon 01 Aug 2022 03:00:00 +0000
ROA not after:            Tue 01 Aug 2023 03:00:00 +0000
asID:                     269862
IP address blocks:        201.218.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579609 (0x181a59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Aug  1 03:00:00 2022 GMT
            Not After : Aug  1 03:00:00 2023 GMT
        Subject: CN=8a6dc9a1ac0b93e9dc27a8965c1b44b0f8aa1b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:e2:30:d6:69:c0:94:28:8a:42:ee:46:e3:
                    ce:ec:dc:aa:b2:e2:cf:d7:8e:8d:50:74:84:bf:b4:
                    ed:76:b2:90:67:09:4f:e7:15:8d:45:e5:ac:47:ef:
                    41:83:26:97:71:d6:0d:f4:9e:8e:fe:da:d0:4c:4e:
                    0e:07:29:b2:99:38:84:b9:d3:c5:3c:1b:14:fe:bf:
                    c2:7b:e7:b9:08:48:2e:57:43:fd:b3:ff:7c:0e:cb:
                    04:ee:f8:84:e9:cc:29:84:e6:1a:93:0d:79:4b:bc:
                    71:66:59:3d:93:4a:aa:cd:d2:c1:49:3e:8a:e0:df:
                    b4:8a:c8:b5:ca:e5:33:2f:62:51:07:28:28:bf:8e:
                    c9:b4:75:f2:59:7d:a7:b0:98:bd:1e:98:0f:dd:3f:
                    3f:5a:f5:25:a9:f1:15:5a:bf:9c:12:e0:5b:19:52:
                    19:1d:ad:b5:2b:df:bb:80:4e:9d:ac:bc:e1:2d:47:
                    42:bb:a6:09:50:c8:0b:4a:49:13:7a:40:47:39:81:
                    88:cf:e8:ce:f9:1c:01:87:d6:86:1f:ab:16:f5:08:
                    dc:4b:1d:c1:70:65:b9:a2:f7:fb:be:7a:80:ba:f9:
                    af:29:02:a6:0c:66:91:d0:3d:3e:fa:ab:8f:cc:67:
                    40:1d:07:32:36:79:2b:25:d4:9b:38:8b:f1:2c:f0:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:20:FF:11:FE:2B:B0:37:CA:E4:9A:80:30:58:CA:0D:AD:38:90:EB
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/8a6dc9a1ac0b93e9dc27a8965c1b44b0f8aa1b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:d3:1d:40:87:27:cf:f4:75:09:9d:56:0f:79:a8:c3:8b:71:
         7a:1e:51:77:e9:bb:b5:34:65:49:b5:a8:5c:eb:25:39:47:70:
         3e:c7:95:2c:4a:6c:73:aa:d1:5d:b3:78:e6:6a:de:90:20:9e:
         32:8a:4b:72:99:83:41:fa:da:ae:00:80:5a:1d:64:f0:50:1f:
         24:fd:76:25:ad:cd:3d:83:01:a8:78:20:37:ab:9a:1f:6b:59:
         6a:0c:3c:75:c1:84:54:24:07:ea:48:93:96:03:4a:d7:c1:ff:
         54:47:46:3f:8f:eb:e8:5b:84:db:1f:d5:40:b5:dc:65:2c:14:
         5e:ff:cd:e4:10:f3:fb:29:30:62:36:15:6c:3b:14:53:2e:be:
         c9:6e:e8:83:7e:25:e2:46:65:33:70:a8:09:08:e7:b6:cd:36:
         f6:e8:86:a5:94:95:ca:a2:ca:57:5b:a4:96:de:59:3f:63:04:
         63:a1:cc:e3:44:00:5e:a0:ff:da:83:09:8b:c3:1e:9a:cf:48:
         0b:57:79:36:38:3e:2d:c7:ac:9b:67:a4:b9:f9:14:ba:9e:09:
         84:65:90:e5:82:68:e9:c0:11:46:98:cb:c2:bf:30:b8:9d:d9:
         7d:18:de:9d:bd:c0:7a:4f:11:a6:84:91:48:91:4a:d7:6a:86:
         f3:48:57:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 09:34:40 2023 by rpki-client on console-ams.rpki-client.org