Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/a43267a8c815ef73d79ae3cbe05f8425959b53d7.roa
File:                     a43267a8c815ef73d79ae3cbe05f8425959b53d7.roa (raw, json)
Hash identifier:          sUxxVU+MLDbRMwfh7BV72SYpogEe130iusv/uhQcnN0=
Subject key identifier:   36:E2:C2:39:80:5B:7D:BE:9E:40:84:8B:38:67:11:89:08:D3:A7:FB
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       0F2E40
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/a43267a8c815ef73d79ae3cbe05f8425959b53d7.roa
Signing time:             Tue 17 Aug 2021 18:21:42 +0000
ROA not before:           Tue 17 Aug 2021 03:00:00 +0000
ROA not after:            Thu 17 Aug 2023 03:00:00 +0000
asID:                     269862
IP address blocks:        201.218.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994880 (0xf2e40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Aug 17 03:00:00 2021 GMT
            Not After : Aug 17 03:00:00 2023 GMT
        Subject: CN=a43267a8c815ef73d79ae3cbe05f8425959b53d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:98:f2:a9:e7:78:9f:00:8b:12:35:f1:bc:
                    b7:1e:fc:b7:11:26:75:48:f7:6b:c5:4a:08:8e:9d:
                    6b:7f:ee:bd:ce:16:c0:e8:1e:c1:27:9a:5a:bf:cd:
                    05:41:e8:05:8c:27:00:94:08:b3:12:dc:b6:0a:47:
                    54:87:d5:99:ea:6e:65:c6:d1:5e:02:a5:be:c4:d4:
                    1c:24:72:69:34:bc:fe:37:4f:4b:28:ec:74:52:07:
                    b2:ed:b2:d0:56:3f:7b:f2:7c:ec:a4:8d:6a:72:10:
                    21:8b:29:82:b1:4f:34:b4:c4:01:e0:80:2b:cb:b3:
                    ed:4a:10:0c:63:26:03:9e:45:21:33:13:4a:16:31:
                    34:a7:5e:0d:dc:ea:a2:e5:87:67:da:02:a4:62:05:
                    3d:a9:01:fa:48:6a:1b:86:fe:af:45:2c:db:e9:06:
                    7d:5e:ec:b3:37:a8:f5:9b:da:60:5b:b6:46:c3:7e:
                    12:77:b1:6f:de:44:c6:89:3a:ad:4e:9e:47:66:a4:
                    05:53:1d:b2:1f:c5:09:49:6a:1c:90:08:8b:1e:7b:
                    88:99:8c:d4:59:c2:31:b3:b7:e6:64:f9:18:5b:d1:
                    fa:5b:27:29:d9:94:a7:a8:35:9d:d4:51:f9:52:9c:
                    eb:78:49:ff:b4:e4:69:fb:46:15:e1:fd:dd:c4:3f:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E2:C2:39:80:5B:7D:BE:9E:40:84:8B:38:67:11:89:08:D3:A7:FB
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/a43267a8c815ef73d79ae3cbe05f8425959b53d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:6f:62:2f:df:e5:ec:88:43:10:cd:7d:21:a5:3f:2f:89:72:
         c9:d4:bd:58:40:68:a7:4a:bb:80:58:70:fb:a6:50:66:16:a3:
         82:b6:06:0f:a3:b6:5b:90:f5:cc:20:65:71:a9:8e:fe:e2:27:
         7b:fe:18:62:50:23:05:84:f2:89:72:62:3b:a1:93:d7:4e:6c:
         1b:ba:f4:fe:17:e7:19:5e:a1:8a:61:c4:6d:1a:01:f2:b9:68:
         cd:e9:a8:de:9e:f1:c9:39:bb:7e:61:d5:ac:10:81:03:02:57:
         7d:24:8d:77:20:50:fb:bc:d1:38:c9:97:31:b3:cb:8b:b2:20:
         0e:c6:f8:d0:03:95:8b:e1:36:d8:41:87:96:2e:52:dc:9e:33:
         59:b6:db:8f:c6:a9:a8:86:36:70:90:b9:6b:c7:a0:5c:3b:94:
         f3:c2:49:d3:50:0b:c3:b9:2b:cc:ed:17:c6:4a:06:cc:87:38:
         18:7f:7b:02:5a:60:42:5a:08:83:9f:42:d3:6c:6e:eb:70:c0:
         06:7c:9f:bc:a3:6b:f2:dc:9b:a2:24:ce:23:ac:ae:10:13:70:
         37:3b:67:6d:ca:f8:18:2a:73:f5:fb:1e:99:5b:ed:9a:f3:40:
         57:db:3d:60:7d:1f:49:c1:e2:04:fd:4f:55:8f:54:12:08:6e:
         40:6b:23:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 09:04:17 2023 by rpki-client on console-fra.rpki-client.org