Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/f1ed906b469b5027bdc7cecfb303c0be4e2e97aa.roa
File:                     f1ed906b469b5027bdc7cecfb303c0be4e2e97aa.roa (raw, json)
Hash identifier:          0lyyYGshWAWGTVOVjsTcok63fFf4jJW0K9MnbbQjbbE=
Subject key identifier:   C1:0F:5A:CC:E8:1E:95:06:64:3B:B1:98:09:6C:05:A6:7F:D2:6B:4B
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       12A005
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/f1ed906b469b5027bdc7cecfb303c0be4e2e97aa.roa
Signing time:             Sat 01 Jan 2022 17:44:52 +0000
ROA not before:           Sat 01 Jan 2022 03:00:00 +0000
ROA not after:            Sun 01 Jan 2023 03:00:00 +0000
asID:                     269862
IP address blocks:        201.218.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1220613 (0x12a005)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Jan  1 03:00:00 2022 GMT
            Not After : Jan  1 03:00:00 2023 GMT
        Subject: CN=f1ed906b469b5027bdc7cecfb303c0be4e2e97aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:68:e8:11:a5:aa:19:82:5c:3f:84:14:69:
                    44:7b:a8:c2:79:c7:bf:19:c7:51:b8:15:d9:72:03:
                    b2:a1:e6:a0:36:31:71:e3:8e:ce:30:b0:12:f8:01:
                    21:f2:1c:d6:24:fd:b7:c5:c4:e1:10:a1:4c:f6:dd:
                    e0:3c:55:6c:08:d9:69:8a:7c:a8:a4:25:ad:c1:ae:
                    dc:95:4e:9d:cd:ed:81:22:91:d0:4f:9a:69:da:e7:
                    15:fa:d1:24:5a:21:66:66:6d:78:7f:54:07:9d:fe:
                    0a:03:f1:1d:35:76:f9:71:4a:b5:a3:74:00:92:dd:
                    f0:87:ef:f3:8f:eb:f6:7d:e0:47:bd:ca:f3:f6:da:
                    b8:ad:0e:42:56:fa:45:9b:c0:f8:a5:97:6b:76:31:
                    48:58:db:05:fe:07:c4:94:8d:a2:86:39:73:07:54:
                    75:c2:cc:58:dd:75:c5:d4:b3:38:bc:24:0d:70:10:
                    58:a3:32:39:2c:0c:ac:ab:45:fd:b4:d1:c7:f9:f6:
                    6e:44:d5:11:6d:26:52:fd:8c:ba:ed:2c:a3:1d:ac:
                    e2:3b:1b:82:eb:69:d1:20:fc:83:1d:ad:2d:d3:f4:
                    38:52:3d:2f:fc:30:6e:db:cd:9b:88:6f:f8:ef:b2:
                    bf:8b:ed:46:9a:1f:62:70:19:22:b6:8a:51:60:49:
                    53:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0F:5A:CC:E8:1E:95:06:64:3B:B1:98:09:6C:05:A6:7F:D2:6B:4B
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/f1ed906b469b5027bdc7cecfb303c0be4e2e97aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:9a:fd:b3:13:1e:d7:55:5d:37:e0:1d:dd:be:19:4f:5a:67:
         68:8a:af:e5:7a:b0:4d:01:3c:d3:a5:2c:32:56:81:14:47:46:
         e3:d0:21:f2:ca:02:ee:57:fe:b5:28:48:ff:d1:57:ac:a1:6d:
         48:79:fb:5c:60:c9:4e:ec:95:72:d7:6a:19:3c:b7:73:16:68:
         02:11:d1:4d:02:c0:46:b8:d3:da:d6:cb:24:ed:64:27:6e:ea:
         0c:2e:9b:70:dd:35:be:a2:5a:8c:e2:8a:11:c2:9c:58:b1:50:
         0f:55:26:a7:18:d3:47:72:89:3b:6a:20:ec:4d:da:33:a6:9c:
         f8:6c:fe:58:50:2f:33:d5:00:83:ac:8d:34:12:1a:a2:7e:2c:
         81:69:1a:fe:b7:63:6d:01:d9:4c:1a:ed:5a:0e:ec:4d:7e:13:
         f7:42:cc:cf:41:66:17:e5:ef:1d:b9:cb:40:05:f1:cc:34:53:
         77:5a:37:38:d3:2d:80:0c:7d:fd:01:13:44:ad:d5:33:fc:d7:
         bc:32:28:d5:8f:78:f5:9d:a2:2a:ec:8b:31:7e:92:e8:f9:3e:
         21:a1:45:fd:41:ae:25:7a:2d:4a:94:2f:6f:fd:b0:89:eb:38:
         ee:48:8c:72:e6:9d:c4:1a:3b:31:f2:92:8d:dd:be:41:8b:95:
         f0:15:b1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-fra.rpki-client.org