Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/31d388bd3245bcc5102d97f02656fb6e0f639556.roa
File:                     31d388bd3245bcc5102d97f02656fb6e0f639556.roa (raw, json)
Hash identifier:          P3043rH/VdSWyN195P8Ba9JYuXfT0njoEEvnVNqgTEk=
Subject key identifier:   74:F9:76:A2:E8:AE:A2:76:35:C4:61:77:99:6D:5D:EF:8A:D9:2E:11
Certificate issuer:       /CN=72dcf4f6ae59843fdce24c28f903c9595129b623
Certificate serial:       1144
Authority key identifier: 89:86:D7:8F:18:A2:0B:CB:15:07:EB:D2:31:2C:0D:8E:09:AD:2E:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72dcf4f6ae59843fdce24c28f903c9595129b623.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/31d388bd3245bcc5102d97f02656fb6e0f639556.roa
Signing time:             Thu 25 Nov 2021 14:20:05 +0000
ROA not before:           Thu 25 Nov 2021 03:00:00 +0000
ROA not after:            Sat 25 Nov 2023 03:00:00 +0000
asID:                     271867
IP address blocks:        200.36.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4420 (0x1144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72dcf4f6ae59843fdce24c28f903c9595129b623
        Validity
            Not Before: Nov 25 03:00:00 2021 GMT
            Not After : Nov 25 03:00:00 2023 GMT
        Subject: CN=31d388bd3245bcc5102d97f02656fb6e0f639556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:05:d6:c3:dd:46:e0:64:e5:bd:9d:aa:4e:
                    08:da:72:a4:f0:4e:e9:59:a4:f3:5e:3a:8f:f7:20:
                    04:3f:47:b0:48:bf:4c:b7:33:11:02:97:8d:b2:ff:
                    ff:76:4c:07:f9:3d:14:a7:de:5e:02:5d:7b:16:d0:
                    13:4a:e9:3f:3c:d6:29:41:90:e8:b7:62:3d:38:9f:
                    45:82:2a:68:cc:fe:97:4d:20:c4:5d:fb:82:c6:fe:
                    06:87:cc:98:ea:48:8a:47:e4:f0:98:c7:fa:71:a5:
                    24:87:90:dd:ff:ef:dd:d6:6d:ed:90:07:25:8a:d0:
                    ea:3d:73:b9:24:31:5a:92:43:f1:24:0e:0e:4e:d7:
                    21:05:29:ab:4d:fd:93:94:90:13:64:ea:25:ea:99:
                    fd:07:6e:df:0e:32:22:3e:85:97:23:1d:15:77:0b:
                    a8:89:68:e6:a9:7c:29:24:47:71:d6:0f:93:ca:cf:
                    d6:53:81:de:df:02:f4:96:38:50:46:5b:26:26:b2:
                    bc:f8:cd:2a:60:af:9c:df:4f:41:7d:12:ee:df:fe:
                    93:1f:b4:18:ef:24:01:13:f4:1e:97:79:6b:e2:52:
                    33:fb:b2:cd:b5:09:8a:54:e2:58:7f:4a:b3:69:a3:
                    d2:c8:65:ae:00:ad:0b:8c:08:be:63:84:c2:1e:e9:
                    4c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F9:76:A2:E8:AE:A2:76:35:C4:61:77:99:6D:5D:EF:8A:D9:2E:11
            X509v3 Authority Key Identifier:
                keyid:89:86:D7:8F:18:A2:0B:CB:15:07:EB:D2:31:2C:0D:8E:09:AD:2E:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72dcf4f6ae59843fdce24c28f903c9595129b623.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/31d388bd3245bcc5102d97f02656fb6e0f639556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/72dcf4f6ae59843fdce24c28f903c9595129b623.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:31:5d:7e:c8:76:da:86:0f:7c:d3:e2:eb:16:fc:87:ff:87:
         73:6f:df:89:f1:41:f4:b2:bb:cc:53:35:5b:73:53:5f:55:57:
         c9:79:5d:01:e6:17:78:46:3c:8e:82:75:b7:3b:98:2a:3c:5e:
         06:52:c1:87:3f:3d:fa:af:77:78:f1:72:06:be:69:99:b5:79:
         0e:63:d5:76:58:44:1a:3c:39:f0:1f:ea:fd:bc:81:60:63:89:
         ee:85:2f:db:36:82:62:e4:c6:d8:9a:fc:66:61:f3:8d:56:72:
         a1:53:b9:4b:c8:70:2f:19:bc:29:a7:58:03:4d:01:7f:12:1d:
         d4:f5:e0:0c:98:82:a2:6a:e7:c4:16:28:8e:ee:f4:dd:be:8b:
         9b:d9:07:1e:80:6d:ed:8e:c4:c4:17:9a:2e:7b:72:1d:3d:94:
         c4:a8:1e:d6:99:b8:dc:8a:31:4b:54:08:51:dc:49:db:f8:28:
         1c:14:5d:92:b7:5e:8b:f4:d3:f8:5f:62:93:7c:ca:68:29:5a:
         8c:49:8b:9f:7e:a3:78:79:15:ee:b2:59:f3:85:80:b6:69:63:
         a5:79:f7:ed:6f:bd:ab:a7:6e:88:0d:34:a2:36:75:c3:1d:bd:
         93:2f:eb:f7:9b:e0:aa:65:5d:cc:a9:39:78:b4:22:99:00:cf:
         f7:51:7d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 08:05:40 2023 by rpki-client on console-fra.rpki-client.org