Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/a77edc91bbb4c3ad2b3383f7b8c6e63099a1e14a.roa
File:                     a77edc91bbb4c3ad2b3383f7b8c6e63099a1e14a.roa (raw, json)
Hash identifier:          MVbnf08xn1sdpHjA9LpPDMNlawdc9v4sR5UyU2DRx4g=
Subject key identifier:   A0:5D:2A:75:AF:FF:EF:C5:50:F5:4B:F7:A7:84:EC:F5:44:43:B1:55
Certificate issuer:       /CN=94997e9738eb4843477b7a8b538303d62f97978d
Certificate serial:       21E8F1
Authority key identifier: 97:DA:8C:47:FE:77:ED:09:BC:AC:B4:04:A4:C3:AD:57:49:0E:4B:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94997e9738eb4843477b7a8b538303d62f97978d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/a77edc91bbb4c3ad2b3383f7b8c6e63099a1e14a.roa
Signing time:             Thu 06 Jul 2023 04:41:13 +0000
ROA not before:           Wed 05 Jul 2023 04:41:13 +0000
ROA not after:            Sun 06 Jul 2025 04:41:13 +0000
asID:                     52468
IP address blocks:        131.196.112.0/22 maxlen: 22
                          131.196.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2222321 (0x21e8f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94997e9738eb4843477b7a8b538303d62f97978d
        Validity
            Not Before: Jul  5 04:41:13 2023 GMT
            Not After : Jul  6 04:41:13 2025 GMT
        Subject: CN=a77edc91bbb4c3ad2b3383f7b8c6e63099a1e14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:27:18:6a:af:59:21:ec:13:1c:63:44:95:eb:
                    a5:c2:84:30:47:c4:49:e1:05:51:1e:75:10:aa:ca:
                    74:95:be:74:14:2f:86:4d:8c:fc:a1:9e:5f:0d:65:
                    32:63:aa:4d:00:68:32:01:47:7c:d1:24:e3:83:49:
                    ee:e4:24:ae:45:33:05:6e:c6:b4:e0:60:d3:44:fc:
                    23:d7:24:bb:64:29:a3:e5:49:b1:04:77:35:e6:25:
                    b2:69:e7:72:fa:88:54:0a:71:18:b5:62:eb:45:62:
                    7e:6b:e4:97:70:f6:78:df:a9:72:b8:9c:21:bb:1c:
                    9b:eb:64:e1:a8:4d:52:7b:0c:12:8d:24:5a:98:8b:
                    0b:f7:2e:54:a2:02:b5:e9:1e:9a:db:7b:14:09:d3:
                    60:9e:d5:5d:29:c6:a7:1a:d8:77:75:4d:fa:48:a7:
                    b9:d0:f3:f7:b3:8e:de:72:64:57:f4:9e:94:b2:cb:
                    8c:08:43:a5:e6:0f:b5:c3:4c:22:e8:dd:c5:cd:e1:
                    b1:17:de:bc:6b:49:bb:2e:d8:58:40:aa:50:30:15:
                    c1:7a:ce:e0:b0:45:a6:38:1d:a2:bb:10:19:83:e8:
                    fb:45:38:5a:13:11:4a:02:43:87:cf:67:5f:2b:53:
                    8f:27:fd:a5:d2:64:7c:9b:85:b3:f8:ad:25:5c:47:
                    17:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5D:2A:75:AF:FF:EF:C5:50:F5:4B:F7:A7:84:EC:F5:44:43:B1:55
            X509v3 Authority Key Identifier:
                keyid:97:DA:8C:47:FE:77:ED:09:BC:AC:B4:04:A4:C3:AD:57:49:0E:4B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94997e9738eb4843477b7a8b538303d62f97978d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/a77edc91bbb4c3ad2b3383f7b8c6e63099a1e14a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/94997e9738eb4843477b7a8b538303d62f97978d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:fa:73:4c:db:d1:38:c2:05:a5:7a:41:1e:d8:5d:ce:d0:d2:
         0b:5c:29:fd:1b:28:64:b5:1f:c3:69:a0:a6:ec:27:31:04:09:
         53:b8:65:4d:09:ee:65:01:0b:03:1f:8c:52:da:0f:df:77:7b:
         27:02:45:7b:51:5a:42:61:f5:d3:a4:1d:c9:7a:9d:5d:01:4d:
         f1:67:cc:63:c5:dc:3d:85:41:d3:68:de:85:e6:ba:63:15:0a:
         03:04:ff:dd:e1:3d:4b:e4:b3:98:6c:ce:d8:a0:97:45:c9:df:
         4e:58:0b:1a:8b:2d:cc:7d:a9:38:e8:aa:05:78:c4:07:e2:81:
         11:f2:2f:6b:f6:d7:90:98:f3:5e:8f:26:46:85:96:82:27:2c:
         9e:3f:2f:88:15:a6:b5:68:5e:4e:a7:03:9c:aa:c9:5e:9d:20:
         80:fc:46:02:87:44:13:08:76:c4:ad:29:2b:37:1b:fc:fb:a5:
         a0:1f:31:1a:29:4e:2b:87:8e:ea:40:a2:4d:71:fa:39:1d:35:
         73:31:7a:b2:4b:fb:e1:37:fb:bf:41:5a:0a:ae:9f:29:a9:de:
         46:de:9d:fb:db:a1:b4:cb:4a:d5:19:cf:36:2a:fc:b5:af:a8:
         3f:65:84:e6:7c:89:1b:a9:5e:e4:77:54:13:f5:c9:9c:41:f4:
         4c:4a:33:88
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIejxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
OTk3ZTk3MzhlYjQ4NDM0NzdiN2E4YjUzODMwM2Q2MmY5Nzk3OGQwHhcNMjMwNzA1
MDQ0MTEzWhcNMjUwNzA2MDQ0MTEzWjAzMTEwLwYDVQQDEyhhNzdlZGM5MWJiYjRj
M2FkMmIzMzgzZjdiOGM2ZTYzMDk5YTFlMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgScYaq9ZIewTHGNEleulwoQwR8RJ4QVRHnUQqsp0lb50FC+G
TYz8oZ5fDWUyY6pNAGgyAUd80STjg0nu5CSuRTMFbsa04GDTRPwj1yS7ZCmj5Umx
BHc15iWyaedy+ohUCnEYtWLrRWJ+a+SXcPZ436lyuJwhuxyb62ThqE1SewwSjSRa
mIsL9y5UogK16R6a23sUCdNgntVdKcanGth3dU36SKe50PP3s47ecmRX9J6UssuM
CEOl5g+1w0wi6N3FzeGxF968a0m7LthYQKpQMBXBes7gsEWmOB2iuxAZg+j7RTha
ExFKAkOHz2dfK1OPJ/2l0mR8m4Wz+K0lXEcXgQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKBdKnWv/+/FUPVL96eE7PVEQ7FVMB8GA1UdIwQYMBaAFJfajEf+d+0JvKy0
BKTDrVdJDkuoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTQ5OTdl
OTczOGViNDg0MzQ3N2I3YThiNTM4MzAzZDYyZjk3OTc4ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTk0YjBkMDQtMTdjYi00NmI4LWEzMzctYzE2MjE0
YWM4YTMxL2E3N2VkYzkxYmJiNGMzYWQyYjMzODNmN2I4YzZlNjMwOTlhMWUxNGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85OTRiMGQwNC0xN2NiLTQ2YjgtYTMzNy1jMTYy
MTRhYzhhMzEvOTQ5OTdlOTczOGViNDg0MzQ3N2I3YThiNTM4MzAzZDYyZjk3OTc4
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAoPEcDANBgkqhkiG9w0BAQsFAAOCAQEADfpzTNvROMIFpXpB
HthdztDSC1wp/RsoZLUfw2mgpuwnMQQJU7hlTQnuZQELAx+MUtoP33d7JwJFe1Fa
QmH106QdyXqdXQFN8WfMY8XcPYVB02jehea6YxUKAwT/3eE9S+SzmGzO2KCXRcnf
TlgLGostzH2pOOiqBXjEB+KBEfIva/bXkJjzXo8mRoWWgicsnj8viBWmtWheTqcD
nKrJXp0ggPxGAodEEwh2xK0pKzcb/PuloB8xGilOK4eO6kCiTXH6OR01czF6skv7
4Tf7v0FaCq6fKaneRt6d+9uhtMtK1RnPNir8ta+oP2WE5nyJG6le5HdUE/XJnEH0
TEoziA==
-----END CERTIFICATE-----
Generated at Tue Oct 17 20:26:36 2023 by rpki-client on console-ams.rpki-client.org