Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/c988b81ee78e6328861c4fff5045c7e643d331b2.roa
File:                     c988b81ee78e6328861c4fff5045c7e643d331b2.roa (raw, json)
Hash identifier:          g628N6FN6sPoMXdwiFyhM9NgvSl7gjESHaDAQ3o7pyI=
Subject key identifier:   5D:CE:6E:0E:E8:6B:E1:49:C9:7A:2B:9C:5D:F1:3C:59:EF:BF:DF:DA
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       170A12
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/c988b81ee78e6328861c4fff5045c7e643d331b2.roa
Signing time:             Thu 01 Sep 2022 16:02:04 +0000
ROA not before:           Thu 01 Sep 2022 16:00:46 +0000
ROA not after:            Sun 01 Sep 2024 16:00:46 +0000
asID:                     18734
IP address blocks:        189.202.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1509906 (0x170a12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Sep  1 16:00:46 2022 GMT
            Not After : Sep  1 16:00:46 2024 GMT
        Subject: CN=c988b81ee78e6328861c4fff5045c7e643d331b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:05:37:fd:7d:9f:76:62:b8:28:51:e4:40:
                    90:67:b6:e5:d7:f1:ad:ed:03:d8:77:bb:bf:33:82:
                    ae:a5:4a:ac:93:f5:03:f2:6f:90:c7:c5:7e:3b:d0:
                    cc:e9:e1:87:f8:46:4d:2c:a4:42:ab:78:ce:13:b9:
                    cc:d7:9f:55:3f:cc:07:27:91:3d:aa:b5:72:07:72:
                    3c:7e:a8:d6:08:0a:1b:ce:82:f5:ec:29:e9:6d:ad:
                    13:81:02:93:00:08:bc:00:cb:38:05:e6:23:fb:f0:
                    7e:47:7e:34:18:dd:9e:2c:01:51:08:ec:40:5c:c8:
                    39:63:3a:ef:30:3c:cc:40:86:94:f4:a2:80:03:69:
                    f1:2b:6f:a5:de:77:33:80:58:8c:01:44:1c:5f:b8:
                    5d:4b:eb:b6:fb:7e:28:e6:f3:cd:92:de:5b:6b:71:
                    30:66:84:68:93:13:bb:21:61:38:28:93:0b:54:b9:
                    6b:c6:a5:1a:81:9e:4a:ac:91:f2:47:3a:0a:00:bc:
                    d1:86:48:0a:de:28:d6:1d:13:15:8e:a9:e2:ee:7b:
                    82:61:f5:44:0b:3e:0e:cd:3c:7c:e5:78:97:ef:a9:
                    94:c2:27:16:44:e2:db:c9:87:f7:2c:6a:90:b6:80:
                    fa:bc:13:2d:17:a0:e1:28:19:63:5b:91:81:75:58:
                    64:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CE:6E:0E:E8:6B:E1:49:C9:7A:2B:9C:5D:F1:3C:59:EF:BF:DF:DA
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/c988b81ee78e6328861c4fff5045c7e643d331b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:86:82:ba:56:b3:aa:1a:cb:73:24:5b:d7:34:cf:10:9b:dc:
         4c:8a:db:d3:0b:2a:ec:8c:b7:6f:0c:a2:09:40:0e:70:19:e1:
         97:09:25:e7:2a:3b:ff:76:90:a1:e1:ad:b9:7f:6b:3c:be:b9:
         ef:76:7c:55:41:5e:2d:2e:6b:67:ca:2b:cf:4f:2f:cb:34:30:
         2c:e2:e9:e9:0c:4a:2e:07:67:59:bc:e2:46:70:10:e1:78:94:
         5c:8f:2a:2b:78:b0:98:ef:1c:60:1a:63:d9:bf:8c:66:94:02:
         0a:e4:6c:d6:76:c0:e1:7b:00:a6:b2:58:9b:dd:18:a8:6a:44:
         ab:d6:ce:5b:24:75:a6:dd:e7:85:b9:9d:00:4c:b8:72:70:17:
         e2:a0:91:5a:be:8c:a0:c5:28:66:60:75:5d:b4:8e:10:e2:b7:
         e0:de:33:f9:9c:31:6d:2a:4a:5f:e8:9e:89:4a:04:75:e8:e7:
         00:e4:84:b5:35:82:d8:f2:91:51:06:50:36:de:13:87:36:95:
         ba:fe:ef:17:60:c2:69:12:60:c7:c0:62:d6:26:1f:5c:34:8f:
         ee:40:0b:99:d3:08:6f:14:0a:ac:40:b7:5a:7a:17:6e:e8:f9:
         a5:53:11:6f:cd:aa:65:bb:74:57:64:d5:39:15:d5:2d:0f:35:
         a2:2f:fb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org