Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/dfc6f7de8848e4eb14d92ceed3ca498a2c84549a.roa
File:                     dfc6f7de8848e4eb14d92ceed3ca498a2c84549a.roa (raw, json)
Hash identifier:          W7gNqd1X5PdKaCSfM8Uj07W+e083hCizeRVYiC1TiWY=
Subject key identifier:   99:B2:91:BD:BC:FC:80:6A:88:FE:BB:FE:E2:AD:86:41:80:B0:53:EC
Certificate issuer:       /CN=1b429c72865e191f13438ce54026b95b47e06113
Certificate serial:       6132
Authority key identifier: 62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/dfc6f7de8848e4eb14d92ceed3ca498a2c84549a.roa
Signing time:             Mon 17 Oct 2022 20:20:49 +0000
ROA not before:           Sun 16 Oct 2022 20:19:26 +0000
ROA not after:            Thu 17 Oct 2024 20:19:26 +0000
asID:                     262182
IP address blocks:        189.201.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24882 (0x6132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b429c72865e191f13438ce54026b95b47e06113
        Validity
            Not Before: Oct 16 20:19:26 2022 GMT
            Not After : Oct 17 20:19:26 2024 GMT
        Subject: CN=dfc6f7de8848e4eb14d92ceed3ca498a2c84549a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:56:e7:c4:37:ec:d4:6d:c8:d9:f6:59:e5:a7:
                    34:12:23:69:6a:64:00:53:e6:ab:e1:35:55:96:0d:
                    3d:7e:28:14:43:e9:fd:15:9c:10:27:88:fd:9e:47:
                    1b:0b:ce:a0:34:d0:79:e9:ee:66:a0:ff:17:f8:4e:
                    51:5c:06:37:d4:89:95:71:86:fa:38:91:3d:d6:78:
                    15:5f:ac:83:9f:7e:ef:c0:8c:64:a6:54:0d:eb:3e:
                    7e:ca:f7:43:14:de:28:0c:f4:dd:10:f0:30:f0:e8:
                    a1:94:bc:e8:6d:46:a5:7b:dc:b0:41:0d:b8:5e:d9:
                    65:b5:db:a1:b0:63:4b:17:94:a3:41:dd:5b:70:be:
                    1f:62:e5:aa:d4:85:f3:3b:a1:1b:9e:33:fe:f9:d6:
                    73:4c:68:58:d9:76:ba:d7:c7:1b:69:fb:a1:eb:d8:
                    82:6b:27:9f:75:f0:bd:21:a6:f3:2a:fe:f3:28:18:
                    94:d7:8f:1c:c6:77:c2:44:bf:af:9a:97:d0:c7:71:
                    7f:89:00:d6:29:6f:51:02:21:a3:17:19:76:df:ad:
                    c5:88:f9:ec:57:4a:49:f9:ba:40:98:94:cc:1b:b0:
                    e2:aa:9f:e8:b4:bc:74:20:be:98:50:a6:0b:5f:ab:
                    79:13:df:c9:44:2d:52:be:89:f4:33:ec:f1:2a:5d:
                    78:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B2:91:BD:BC:FC:80:6A:88:FE:BB:FE:E2:AD:86:41:80:B0:53:EC
            X509v3 Authority Key Identifier:
                keyid:62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/dfc6f7de8848e4eb14d92ceed3ca498a2c84549a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/1b429c72865e191f13438ce54026b95b47e06113.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:b9:83:62:4c:02:0a:1a:fe:ce:1b:70:30:90:bb:ab:fb:0d:
         0d:2f:bb:a8:d2:ca:21:3f:e6:16:be:e2:de:1f:8c:4a:b1:d3:
         45:22:8e:03:9e:28:20:89:14:c0:79:b0:10:ab:69:1d:af:d5:
         6f:55:3a:5d:57:1d:3c:5f:60:fa:90:74:8e:63:55:90:b2:8f:
         53:c0:4c:e6:cc:03:35:82:43:6d:16:5d:36:03:e4:48:8b:8b:
         5c:e4:5f:30:e7:de:3b:7b:95:d1:08:dd:f8:82:d4:7e:5d:4a:
         23:89:1e:1b:f3:91:b8:10:45:4f:e2:38:ce:42:64:fb:a9:d8:
         ab:17:81:a5:7c:6f:b1:84:f0:d3:d6:d7:8c:e4:9b:fd:ff:a9:
         12:db:72:91:32:2e:e6:8c:6e:78:3b:17:75:a2:ac:5e:f5:30:
         29:d8:aa:ca:42:78:08:ba:c4:14:3a:7d:bf:1d:59:2e:41:66:
         fc:1b:53:81:f7:98:f5:eb:17:1c:2d:3f:95:48:90:15:d9:bf:
         62:e1:a8:d3:24:c5:9e:30:92:d4:d6:62:b7:11:d3:c8:d6:2f:
         65:44:11:99:08:00:96:91:2e:4a:54:6d:40:96:1c:fe:8d:99:
         1f:51:5a:e1:ce:c1:c0:c6:0f:2e:28:e2:a6:32:3d:8a:d9:62:
         7a:b5:08:f3
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICYTIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMWI0
MjljNzI4NjVlMTkxZjEzNDM4Y2U1NDAyNmI5NWI0N2UwNjExMzAeFw0yMjEwMTYy
MDE5MjZaFw0yNDEwMTcyMDE5MjZaMDMxMTAvBgNVBAMTKGRmYzZmN2RlODg0OGU0
ZWIxNGQ5MmNlZWQzY2E0OThhMmM4NDU0OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnVufEN+zUbcjZ9lnlpzQSI2lqZABT5qvhNVWWDT1+KBRD6f0V
nBAniP2eRxsLzqA00Hnp7mag/xf4TlFcBjfUiZVxhvo4kT3WeBVfrIOffu/AjGSm
VA3rPn7K90MU3igM9N0Q8DDw6KGUvOhtRqV73LBBDbhe2WW126GwY0sXlKNB3Vtw
vh9i5arUhfM7oRueM/751nNMaFjZdrrXxxtp+6Hr2IJrJ5918L0hpvMq/vMoGJTX
jxzGd8JEv6+al9DHcX+JANYpb1ECIaMXGXbfrcWI+exXSkn5ukCYlMwbsOKqn+i0
vHQgvphQpgtfq3kT38lELVK+ifQz7PEqXXjJAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUmbKRvbz8gGqI/rv+4q2GQYCwU+wwHwYDVR0jBBgwFoAUYlibz5e4FJp81Gx9
mmRnJxtZ74IwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8xYjQyOWM3
Mjg2NWUxOTFmMTM0MzhjZTU0MDI2Yjk1YjQ3ZTA2MTEzLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy85YTgyZWUzZC1jNzU2LTRhNWMtYTM2Ny05M2UyMDVl
MzM2NDkvZGZjNmY3ZGU4ODQ4ZTRlYjE0ZDkyY2VlZDNjYTQ5OGEyYzg0NTQ5YS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzlhODJlZTNkLWM3NTYtNGE1Yy1hMzY3LTkzZTIw
NWUzMzY0OS8xYjQyOWM3Mjg2NWUxOTFmMTM0MzhjZTU0MDI2Yjk1YjQ3ZTA2MTEz
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAvcnlMA0GCSqGSIb3DQEBCwUAA4IBAQBluYNiTAIKGv7OG3Aw
kLur+w0NL7uo0sohP+YWvuLeH4xKsdNFIo4DniggiRTAebAQq2kdr9VvVTpdVx08
X2D6kHSOY1WQso9TwEzmzAM1gkNtFl02A+RIi4tc5F8w5947e5XRCN34gtR+XUoj
iR4b85G4EEVP4jjOQmT7qdirF4GlfG+xhPDT1teM5Jv9/6kS23KRMi7mjG54Oxd1
oqxe9TAp2KrKQngIusQUOn2/HVkuQWb8G1OB95j16xccLT+VSJAV2b9i4ajTJMWe
MJLU1mK3EdPI1i9lRBGZCACWkS5KVG1Alhz+jZkfUVrhzsHAxg8uKOKmMj2K2WJ6
tQjz
-----END CERTIFICATE-----
Generated at Tue Sep 5 21:44:30 2023 by rpki-client on console-fra.rpki-client.org