Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/62b5fc16110efa452291ca16868f34b7426b78c6.roa
File:                     62b5fc16110efa452291ca16868f34b7426b78c6.roa (raw, json)
Hash identifier:          4jp1cacJ8k2YUJf2yV/y7w/21HiNQyQ4M40gR6ThFpw=
Subject key identifier:   C3:2A:99:A5:1E:5B:B5:45:E7:ED:55:84:8D:41:2A:09:E4:47:7D:23
Certificate issuer:       /CN=703bede159efdf3fd85e6b49bded6c79dc525307
Certificate serial:       0D9FA3
Authority key identifier: 79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/62b5fc16110efa452291ca16868f34b7426b78c6.roa
Signing time:             Wed 24 Mar 2021 14:47:31 +0000
ROA not before:           Wed 24 Mar 2021 14:47:30 +0000
ROA not after:            Tue 24 Mar 2026 14:47:30 +0000
asID:                     27891
IP address blocks:        150.187.141.0/24 maxlen: 24
                          150.187.142.0/24 maxlen: 24
                          150.187.145.0/24 maxlen: 24
                          150.187.148.0/24 maxlen: 24
                          150.187.178.0/24 maxlen: 24
                          150.189.48.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892835 (0xd9fa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703bede159efdf3fd85e6b49bded6c79dc525307
        Validity
            Not Before: Mar 24 14:47:30 2021 GMT
            Not After : Mar 24 14:47:30 2026 GMT
        Subject: CN=62b5fc16110efa452291ca16868f34b7426b78c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:db:e8:f4:3e:e3:ed:55:88:cc:65:5c:c7:
                    57:48:3f:87:25:82:2d:ce:bb:20:bc:6a:c2:6b:43:
                    c3:6b:c6:a1:bf:65:a8:bf:af:d7:24:27:5f:70:d3:
                    de:66:5f:ee:aa:9b:94:bf:39:4c:70:7d:20:0f:25:
                    20:a4:ba:7b:a7:01:14:bc:80:00:b0:e0:ad:7c:1f:
                    bf:7e:af:a5:b6:77:ef:e1:d7:97:0c:94:6c:00:bc:
                    4e:86:44:81:31:2f:e4:0f:47:dc:ba:dc:6f:be:a6:
                    2d:6d:cc:de:9f:e5:4a:db:6d:cc:c3:a8:e9:1e:58:
                    60:96:ad:f5:d9:92:da:49:03:e7:c9:c0:e0:1e:f9:
                    64:0c:58:7d:af:d9:66:15:6e:74:60:42:fb:91:eb:
                    6e:a6:69:88:65:a2:54:ba:f6:9e:27:90:cd:a5:9a:
                    87:cb:b7:62:65:09:8f:e6:f7:a1:46:89:17:0b:ea:
                    54:4a:ca:d2:94:4b:e4:8a:79:7d:1d:7b:67:95:59:
                    20:f9:10:b0:a2:30:56:e1:aa:22:99:25:ac:01:67:
                    7d:9e:bb:b7:eb:d1:da:1a:e0:cc:b0:0f:53:f1:c4:
                    6d:5f:0b:b1:57:05:11:55:15:c3:59:7c:c5:a0:ff:
                    d0:d3:8f:5f:3f:0a:44:4d:28:82:63:f4:71:15:85:
                    43:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2A:99:A5:1E:5B:B5:45:E7:ED:55:84:8D:41:2A:09:E4:47:7D:23
            X509v3 Authority Key Identifier:
                keyid:79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/62b5fc16110efa452291ca16868f34b7426b78c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/703bede159efdf3fd85e6b49bded6c79dc525307.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.187.141.0-150.187.142.255
                  150.187.145.0/24
                  150.187.148.0/24
                  150.187.178.0/24
                  150.189.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:99:6e:79:b8:fe:9c:20:48:b1:bf:1f:42:01:16:aa:13:4f:
         86:28:c0:5e:cf:6b:38:9e:21:80:e6:64:95:0a:a9:64:9c:27:
         52:28:d2:07:91:ad:44:b3:5a:57:2f:ba:cf:ec:36:e7:00:78:
         fd:09:a8:cd:38:df:55:f6:a5:2b:8c:70:dd:95:24:4e:5a:6b:
         77:81:c7:d5:ce:78:cf:86:c7:d0:38:f8:cf:0b:68:b6:9d:bc:
         5a:7c:67:17:56:83:0e:d4:79:5a:cc:aa:c7:cb:ff:6b:25:a7:
         0f:5d:d1:c9:61:8e:3c:ab:ac:f9:b2:87:a9:a2:b8:39:2b:b7:
         34:be:13:c3:cd:3d:ce:e6:67:e6:d9:d7:f6:da:91:df:5f:25:
         15:73:8d:45:a1:50:10:6a:64:ed:03:60:72:74:56:da:44:a0:
         2c:2a:e5:d2:25:47:b4:a2:ae:c9:25:7d:e8:b3:a2:f1:15:b6:
         24:0a:af:a0:00:f3:d4:56:ee:33:8e:9e:16:16:f3:59:bf:b8:
         ea:1f:e4:55:aa:fb:22:d6:19:46:20:9c:3f:d3:48:05:e5:5b:
         ed:aa:65:a0:43:0a:b9:d4:63:c5:b9:44:e6:b5:b9:a1:14:f3:
         38:ee:24:d3:d0:6b:78:59:8b:88:09:7d:6d:64:1d:90:c5:c7:
         ce:af:cf:e0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIDDZ+jMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
M2JlZGUxNTllZmRmM2ZkODVlNmI0OWJkZWQ2Yzc5ZGM1MjUzMDcwHhcNMjEwMzI0
MTQ0NzMwWhcNMjYwMzI0MTQ0NzMwWjAzMTEwLwYDVQQDEyg2MmI1ZmMxNjExMGVm
YTQ1MjI5MWNhMTY4NjhmMzRiNzQyNmI3OGM2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsGHb6PQ+4+1ViMxlXMdXSD+HJYItzrsgvGrCa0PDa8ahv2Wo
v6/XJCdfcNPeZl/uqpuUvzlMcH0gDyUgpLp7pwEUvIAAsOCtfB+/fq+ltnfv4deX
DJRsALxOhkSBMS/kD0fcutxvvqYtbczen+VK223Mw6jpHlhglq312ZLaSQPnycDg
HvlkDFh9r9lmFW50YEL7ketupmmIZaJUuvaeJ5DNpZqHy7diZQmP5vehRokXC+pU
SsrSlEvkinl9HXtnlVkg+RCwojBW4aoimSWsAWd9nru369HaGuDMsA9T8cRtXwux
VwURVRXDWXzFoP/Q049fPwpETSiCY/RxFYVDdwIDAQABo4ICezCCAncwHQYDVR0O
BBYEFMMqmaUeW7VF5+1VhI1BKgnkR30jMB8GA1UdIwQYMBaAFHmsn71HO0C8BtDw
US5CTe1rKogpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzAzYmVk
ZTE1OWVmZGYzZmQ4NWU2YjQ5YmRlZDZjNzlkYzUyNTMwNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWI2YmMxNTAtZGVmYi00MTlhLWFhYTEtYTVhMzU5
NTQyYTg1LzYyYjVmYzE2MTEwZWZhNDUyMjkxY2ExNjg2OGYzNGI3NDI2Yjc4YzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YjZiYzE1MC1kZWZiLTQxOWEtYWFhMS1hNWEz
NTk1NDJhODUvNzAzYmVkZTE1OWVmZGYzZmQ4NWU2YjQ5YmRlZDZjNzlkYzUyNTMw
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQw
MC4wLAQCAAEwJjAMAwQAlruNAwQAlruOAwQAlruRAwQAlruUAwQAlruyAwQDlr0w
MA0GCSqGSIb3DQEBCwUAA4IBAQCOmW55uP6cIEixvx9CARaqE0+GKMBez2s4niGA
5mSVCqlknCdSKNIHka1Es1pXL7rP7DbnAHj9CajNON9V9qUrjHDdlSROWmt3gcfV
znjPhsfQOPjPC2i2nbxafGcXVoMO1HlazKrHy/9rJacPXdHJYY48q6z5soeporg5
K7c0vhPDzT3O5mfm2df22pHfXyUVc41FoVAQamTtA2BydFbaRKAsKuXSJUe0oq7J
JX3os6LxFbYkCq+gAPPUVu4zjp4WFvNZv7jqH+RVqvsi1hlGIJw/00gF5VvtqmWg
Qwq51GPFuUTmtbmhFPM47iTT0Gt4WYuICX1tZB2QxcfOr8/g
-----END CERTIFICATE-----
Generated at Mon Sep 25 15:53:08 2023 by rpki-client on console-fra.rpki-client.org