Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/2c279f9f94a8f435c871cfb197d7faf2cd1c99c8.roa
File:                     2c279f9f94a8f435c871cfb197d7faf2cd1c99c8.roa (raw, json)
Hash identifier:          0yruFrglClOwZ1ohz1nQTLJphAUJ17RSaJc+YB0Sh6I=
Subject key identifier:   4C:7A:2D:AD:FC:ED:41:24:93:E9:64:5A:EA:00:08:5B:66:B7:68:69
Certificate issuer:       /CN=72dcf4f6ae59843fdce24c28f903c9595129b623
Certificate serial:       0C05
Authority key identifier: 89:86:D7:8F:18:A2:0B:CB:15:07:EB:D2:31:2C:0D:8E:09:AD:2E:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72dcf4f6ae59843fdce24c28f903c9595129b623.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/2c279f9f94a8f435c871cfb197d7faf2cd1c99c8.roa
Signing time:             Thu 25 Nov 2021 14:19:29 +0000
ROA not before:           Thu 25 Nov 2021 03:00:00 +0000
ROA not after:            Sat 25 Nov 2023 03:00:00 +0000
asID:                     271867
IP address blocks:        200.36.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3077 (0xc05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72dcf4f6ae59843fdce24c28f903c9595129b623
        Validity
            Not Before: Nov 25 03:00:00 2021 GMT
            Not After : Nov 25 03:00:00 2023 GMT
        Subject: CN=2c279f9f94a8f435c871cfb197d7faf2cd1c99c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c2:a3:a1:df:64:1d:5d:13:9d:c5:8c:11:1f:
                    d7:64:76:e2:ee:c5:69:4a:19:57:3b:73:e8:0d:c8:
                    2b:fa:7c:ae:34:2e:12:bb:5e:57:73:af:8a:fb:b6:
                    c5:8e:45:7b:b6:2d:9e:f9:17:d8:7f:0b:50:a5:6f:
                    40:35:d3:88:9c:39:d7:cc:dc:f9:5d:4c:1f:f3:b9:
                    48:63:6a:3b:f3:06:07:a8:ba:f2:d4:12:d8:dc:56:
                    be:f2:67:f5:84:ab:51:ff:a0:4d:19:a6:bf:07:e4:
                    d4:5e:bc:fd:ba:3f:ef:d4:d5:1b:09:11:00:17:de:
                    a5:16:4b:3f:5b:19:48:f5:f9:65:51:47:ae:33:91:
                    a6:40:ce:6c:28:f3:6c:64:53:58:02:7c:d4:3a:09:
                    5d:27:04:b5:2d:75:30:60:06:ee:0e:05:cd:80:61:
                    a3:af:fd:d4:ae:9a:b5:13:99:7f:d1:11:ce:47:03:
                    61:ea:92:27:32:46:33:f3:ae:a0:6f:7e:67:e1:e8:
                    9e:f7:4c:f4:61:53:18:70:cf:5b:39:99:39:69:ec:
                    6e:76:1e:82:1d:f0:92:04:ac:bd:9d:62:39:c5:e6:
                    87:cc:0e:a7:a5:e2:24:8a:6f:46:90:20:90:d2:5c:
                    10:6c:69:c7:82:1c:8b:ad:09:42:48:42:d0:c6:40:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7A:2D:AD:FC:ED:41:24:93:E9:64:5A:EA:00:08:5B:66:B7:68:69
            X509v3 Authority Key Identifier:
                keyid:89:86:D7:8F:18:A2:0B:CB:15:07:EB:D2:31:2C:0D:8E:09:AD:2E:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72dcf4f6ae59843fdce24c28f903c9595129b623.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/2c279f9f94a8f435c871cfb197d7faf2cd1c99c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/72dcf4f6ae59843fdce24c28f903c9595129b623.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ab:5b:25:5e:84:89:9c:bc:d0:2a:fa:2d:8c:5a:07:9d:82:
         9b:7c:ad:2b:27:58:0f:ef:1d:83:87:08:0e:ed:62:48:ef:43:
         68:18:be:2c:20:b3:13:d1:e9:d7:30:19:d7:32:42:ca:03:02:
         ef:3c:da:7e:dc:08:b4:9d:53:c4:de:b6:2a:ec:0f:f4:10:4b:
         b7:63:d8:f2:3f:8e:98:7d:91:01:d4:39:bc:27:78:8a:4f:3e:
         1a:34:93:fb:68:19:ff:b7:a5:5b:00:1a:03:92:fe:55:c2:b4:
         53:15:f9:9c:10:de:76:08:52:20:1e:78:3a:60:b9:e5:ef:ae:
         91:96:67:ad:10:1c:0f:ca:92:ea:69:e9:1a:60:41:8e:86:86:
         3c:95:32:9e:88:c2:ea:50:d9:c6:81:4d:f7:e2:7c:17:29:a8:
         9e:bb:51:0f:ed:b0:81:5a:f1:0e:69:5e:df:a5:b9:03:f4:51:
         80:11:69:73:51:18:bc:54:06:a9:6e:6a:48:1f:85:b6:e8:1c:
         58:ce:f3:04:ae:2a:7b:09:cf:fb:7e:64:d4:f2:4a:1f:71:87:
         d8:a6:cc:79:20:8f:ec:d2:56:d9:1b:d4:9d:6d:21:ed:4a:7d:
         1d:c4:d6:53:c0:10:22:ce:d8:19:7c:59:3e:8f:78:79:8d:88:
         c7:16:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 08:05:40 2023 by rpki-client on console-fra.rpki-client.org