Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/38cc3b06c15768707ddeb3bd0d2660cc7b68cd64.roa
File:                     38cc3b06c15768707ddeb3bd0d2660cc7b68cd64.roa (raw, json)
Hash identifier:          9L2ciYoSUPQUnhhuNOes0QrnbOxcUjJc+F8jcrs6wkg=
Subject key identifier:   17:BB:DC:3D:68:14:9B:B7:81:34:DA:F7:37:4D:37:8B:EE:14:9A:6A
Certificate issuer:       /CN=0cec7209b9057d239c9d724b057b75899fa702cf
Certificate serial:       21C4BA
Authority key identifier: 71:95:E8:00:FE:E5:80:94:51:D8:B9:24:9B:B0:31:69:CC:89:39:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cec7209b9057d239c9d724b057b75899fa702cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/38cc3b06c15768707ddeb3bd0d2660cc7b68cd64.roa
Signing time:             Thu 06 Jul 2023 04:41:07 +0000
ROA not before:           Wed 05 Jul 2023 04:41:07 +0000
ROA not after:            Sun 06 Jul 2025 04:41:07 +0000
asID:                     52468
IP address blocks:        201.182.150.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2213050 (0x21c4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cec7209b9057d239c9d724b057b75899fa702cf
        Validity
            Not Before: Jul  5 04:41:07 2023 GMT
            Not After : Jul  6 04:41:07 2025 GMT
        Subject: CN=38cc3b06c15768707ddeb3bd0d2660cc7b68cd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:24:8e:3e:c5:33:8b:97:d9:e0:9b:4b:ef:
                    69:69:34:bd:b3:8e:65:b2:86:8b:b7:39:79:cb:96:
                    eb:2b:65:42:ac:6e:96:b3:95:ac:55:e7:36:05:72:
                    62:d1:24:ff:ef:9a:b6:33:8d:99:71:74:09:1d:4b:
                    53:45:36:b3:af:06:4e:26:a4:64:79:6f:08:52:ee:
                    17:d3:cd:60:4e:18:bf:71:71:36:81:6b:8b:df:f6:
                    08:e6:59:f7:8a:bb:25:fd:89:a9:bd:9f:6b:e9:63:
                    f5:69:26:af:ae:43:70:bc:04:65:d1:90:0d:46:c9:
                    1d:fb:fe:74:7e:ba:f6:18:20:96:b2:38:af:a3:37:
                    33:f2:a6:0f:dc:48:14:b2:bb:5f:8a:40:a1:10:6b:
                    51:e3:60:02:ab:bb:c6:82:5a:06:d9:51:38:54:f4:
                    a0:b4:23:9d:7c:ae:29:23:8d:54:f4:b2:9f:52:09:
                    2c:e3:cd:62:0b:95:4d:e0:31:61:38:fe:87:f9:95:
                    9e:5c:64:ba:92:e7:24:b6:ad:19:3c:de:3b:4f:14:
                    58:28:64:29:7a:a9:0d:79:7c:53:88:62:45:be:12:
                    94:f5:30:56:c4:41:08:34:37:76:af:02:e0:e1:9a:
                    78:c4:26:b4:b1:e8:ad:78:4d:01:24:6b:e5:7b:62:
                    ca:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BB:DC:3D:68:14:9B:B7:81:34:DA:F7:37:4D:37:8B:EE:14:9A:6A
            X509v3 Authority Key Identifier:
                keyid:71:95:E8:00:FE:E5:80:94:51:D8:B9:24:9B:B0:31:69:CC:89:39:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cec7209b9057d239c9d724b057b75899fa702cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/38cc3b06c15768707ddeb3bd0d2660cc7b68cd64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/0cec7209b9057d239c9d724b057b75899fa702cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:5e:9f:71:53:61:d1:50:d0:77:a0:38:d5:ac:7d:3c:99:2a:
         ec:2a:fa:e3:32:51:96:52:df:1d:64:20:59:4f:7d:4e:40:0d:
         5a:61:70:79:34:4b:e6:dc:3e:0a:0c:08:15:df:ad:da:1b:7b:
         00:0e:09:93:c8:e1:04:43:37:e7:f2:5d:8b:b9:91:03:ff:80:
         91:a1:3a:b0:59:2b:18:b5:d6:cc:05:8f:9f:90:94:e3:ff:08:
         03:cf:00:84:cb:3c:ea:2e:45:fe:1e:81:94:75:bb:91:6c:e5:
         93:15:9d:f6:fb:9e:1c:64:9c:07:31:fe:93:61:87:ef:6d:f4:
         53:98:2c:15:f0:b3:4f:78:b1:3f:76:19:b5:45:4f:1a:6b:36:
         f5:01:67:d2:55:93:ff:62:61:de:24:fb:62:ef:53:bc:f4:4a:
         7c:26:1f:38:eb:c0:b7:5f:6f:37:91:75:e1:3d:19:e0:19:1d:
         66:8a:8f:9f:7d:49:23:ca:b1:4f:3b:22:12:1f:31:1f:f6:44:
         10:c5:5c:87:39:76:21:9e:86:af:c7:bd:69:6a:09:bd:08:25:
         59:a3:76:5c:97:bb:ea:5d:27:6a:eb:31:c3:49:85:83:82:be:
         03:58:03:44:c4:4d:ed:63:98:d2:1e:03:54:28:a7:46:a3:5a:
         b2:77:aa:96
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIcS6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBj
ZWM3MjA5YjkwNTdkMjM5YzlkNzI0YjA1N2I3NTg5OWZhNzAyY2YwHhcNMjMwNzA1
MDQ0MTA3WhcNMjUwNzA2MDQ0MTA3WjAzMTEwLwYDVQQDEygzOGNjM2IwNmMxNTc2
ODcwN2RkZWIzYmQwZDI2NjBjYzdiNjhjZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwdIkjj7FM4uX2eCbS+9paTS9s45lsoaLtzl5y5brK2VCrG6W
s5WsVec2BXJi0ST/75q2M42ZcXQJHUtTRTazrwZOJqRkeW8IUu4X081gThi/cXE2
gWuL3/YI5ln3irsl/YmpvZ9r6WP1aSavrkNwvARl0ZANRskd+/50frr2GCCWsjiv
ozcz8qYP3EgUsrtfikChEGtR42ACq7vGgloG2VE4VPSgtCOdfK4pI41U9LKfUgks
481iC5VN4DFhOP6H+ZWeXGS6kucktq0ZPN47TxRYKGQpeqkNeXxTiGJFvhKU9TBW
xEEINDd2rwLg4Zp4xCa0seiteE0BJGvle2LKRQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBe73D1oFJu3gTTa9zdNN4vuFJpqMB8GA1UdIwQYMBaAFHGV6AD+5YCUUdi5
JJuwMWnMiTk2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGNlYzcy
MDliOTA1N2QyMzljOWQ3MjRiMDU3Yjc1ODk5ZmE3MDJjZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTk1MmQyN2MtYzkxMC00NTY5LWFmMjAtOTAxZGQ2
NjU5NWFjLzM4Y2MzYjA2YzE1NzY4NzA3ZGRlYjNiZDBkMjY2MGNjN2I2OGNkNjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85OTUyZDI3Yy1jOTEwLTQ1NjktYWYyMC05MDFk
ZDY2NTk1YWMvMGNlYzcyMDliOTA1N2QyMzljOWQ3MjRiMDU3Yjc1ODk5ZmE3MDJj
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcm2ljANBgkqhkiG9w0BAQsFAAOCAQEAmF6fcVNh0VDQd6A4
1ax9PJkq7Cr64zJRllLfHWQgWU99TkANWmFweTRL5tw+CgwIFd+t2ht7AA4Jk8jh
BEM35/Jdi7mRA/+AkaE6sFkrGLXWzAWPn5CU4/8IA88AhMs86i5F/h6BlHW7kWzl
kxWd9vueHGScBzH+k2GH7230U5gsFfCzT3ixP3YZtUVPGms29QFn0lWT/2Jh3iT7
Yu9TvPRKfCYfOOvAt19vN5F14T0Z4BkdZoqPn31JI8qxTzsiEh8xH/ZEEMVchzl2
IZ6Gr8e9aWoJvQglWaN2XJe76l0nausxw0mFg4K+A1gDRMRN7WOY0h4DVCinRqNa
sneqlg==
-----END CERTIFICATE-----
Generated at Tue Oct 17 20:26:36 2023 by rpki-client on console-ams.rpki-client.org