Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/2bbd34688e27b8ec403b73c3c68abe56ea64a1a0.roa
File:                     2bbd34688e27b8ec403b73c3c68abe56ea64a1a0.roa (raw, json)
Hash identifier:          y4i0ZwyqKe2yXUTQ+OYec6h84Brz8+QE7GrBa9B0A+U=
Subject key identifier:   D2:E4:95:4E:A2:B4:A1:59:C1:BE:9F:2D:8C:92:B4:5B:3B:E0:B4:DE
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       122F1B
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/2bbd34688e27b8ec403b73c3c68abe56ea64a1a0.roa
Signing time:             Sat 19 Feb 2022 00:40:16 +0000
ROA not before:           Fri 18 Feb 2022 02:00:00 +0000
ROA not after:            Sun 18 Feb 2024 03:00:00 +0000
asID:                     18734
IP address blocks:        200.57.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1191707 (0x122f1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Feb 18 02:00:00 2022 GMT
            Not After : Feb 18 03:00:00 2024 GMT
        Subject: CN=2bbd34688e27b8ec403b73c3c68abe56ea64a1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:34:3e:ef:e3:0c:d4:2c:b5:66:63:7a:0c:
                    9f:18:0d:14:cf:21:10:57:9f:c2:11:65:46:f6:70:
                    c5:74:f8:65:13:13:e8:bf:35:d1:cc:1d:46:c1:06:
                    0f:b0:c3:87:25:04:7b:14:0b:45:fe:e0:b1:bf:aa:
                    54:61:22:51:1f:91:57:f8:b1:f5:8d:13:a2:bd:c0:
                    4b:6c:95:37:5c:3b:e4:61:25:a7:45:6b:72:17:23:
                    96:0a:4c:3e:90:59:5f:aa:0d:b3:92:47:94:83:a4:
                    d8:91:af:fd:93:62:e9:64:c3:ca:ff:62:04:74:6e:
                    62:4c:89:00:8a:8b:a9:bd:c0:dd:52:54:f2:70:14:
                    10:16:e7:79:96:b9:6d:1b:48:0f:4f:9e:c0:04:82:
                    b4:d3:ae:aa:06:45:31:f1:45:0b:0f:e9:84:2f:4c:
                    6d:54:df:5d:cb:9f:ef:b4:e6:18:d6:b4:0d:7b:42:
                    0b:00:73:2c:63:57:d6:a6:28:31:ba:ee:e0:df:c8:
                    d6:00:35:a7:07:b0:6f:be:ed:c1:96:d5:b5:c0:d3:
                    eb:8a:8b:84:f0:b8:65:b2:a4:c7:35:52:fd:b4:05:
                    9e:76:ea:ba:5a:16:7b:75:1f:1d:41:c4:86:4c:77:
                    b4:22:a6:61:c2:53:e3:a9:89:f3:78:31:1b:65:4c:
                    4c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E4:95:4E:A2:B4:A1:59:C1:BE:9F:2D:8C:92:B4:5B:3B:E0:B4:DE
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/2bbd34688e27b8ec403b73c3c68abe56ea64a1a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:19:7a:bb:e6:c9:dc:c8:aa:8d:a4:da:d7:19:de:47:36:89:
         89:e2:fe:cc:f2:cb:e6:14:f9:10:07:1f:78:46:9d:f3:89:ab:
         ae:6d:b1:15:73:59:a1:7a:f9:bc:af:60:9a:57:d5:76:f6:21:
         10:6f:c3:2a:61:a3:2e:d9:75:2b:04:84:9b:f1:da:a3:8c:c3:
         c6:9b:7f:be:8c:6f:63:04:a5:17:67:29:ff:bd:ef:04:47:81:
         8f:b4:b4:62:1d:fd:5b:74:88:61:ce:d9:2d:6c:14:2b:cc:f9:
         f1:8f:d8:95:c0:e6:df:43:bc:6d:96:81:9a:a4:08:34:f3:e9:
         9d:45:ae:82:f1:72:d8:88:b0:d4:c2:05:8e:1f:50:eb:79:1d:
         77:8c:3a:1e:f1:f5:4e:d9:52:4a:5f:76:43:53:bf:75:76:20:
         f3:48:5f:71:b8:3a:44:55:d1:41:e4:cf:1f:66:64:7c:f5:92:
         b2:29:51:4b:61:90:70:77:55:53:8f:69:a8:aa:77:b1:5d:9b:
         77:96:7d:da:16:ef:b0:50:13:99:a1:73:cf:2a:13:1a:ed:26:
         dd:27:37:41:0b:ac:c5:01:fc:6d:cf:0c:ba:5d:67:66:c7:68:
         23:3d:c3:9e:17:b2:db:32:e2:77:21:43:dc:f4:de:05:73:c9:
         02:1f:d9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org