Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/7649f82de549fd1b2b77bdb2bdbad378cad03b4f.roa
File:                     7649f82de549fd1b2b77bdb2bdbad378cad03b4f.roa (raw, json)
Hash identifier:          9d2emOsoLDuxZrD9xCT/S4DHy5AUq6GXu6r3VjVh5d8=
Subject key identifier:   AF:66:AC:C7:60:1D:42:21:B8:91:6D:CA:FE:CC:92:AA:FF:EF:73:C2
Certificate issuer:       /CN=72dcf4f6ae59843fdce24c28f903c9595129b623
Certificate serial:       088B
Authority key identifier: 89:86:D7:8F:18:A2:0B:CB:15:07:EB:D2:31:2C:0D:8E:09:AD:2E:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72dcf4f6ae59843fdce24c28f903c9595129b623.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/7649f82de549fd1b2b77bdb2bdbad378cad03b4f.roa
Signing time:             Thu 25 Nov 2021 14:18:57 +0000
ROA not before:           Thu 25 Nov 2021 03:00:00 +0000
ROA not after:            Sat 25 Nov 2023 03:00:00 +0000
asID:                     271867
IP address blocks:        200.36.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187 (0x88b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72dcf4f6ae59843fdce24c28f903c9595129b623
        Validity
            Not Before: Nov 25 03:00:00 2021 GMT
            Not After : Nov 25 03:00:00 2023 GMT
        Subject: CN=7649f82de549fd1b2b77bdb2bdbad378cad03b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:5d:99:35:e8:46:ca:fe:8c:38:97:e4:aa:
                    fa:24:91:7c:c6:a5:0a:65:58:52:46:67:3d:80:5f:
                    b2:c2:20:fd:95:96:a1:bc:8a:50:11:71:32:21:e1:
                    26:48:45:ea:05:5d:48:c8:3b:03:aa:51:25:a4:99:
                    bc:0d:97:b5:d3:eb:aa:85:8f:3d:a9:ef:d8:19:10:
                    19:de:f6:56:5b:07:46:dc:36:37:f3:24:c9:5a:db:
                    d3:99:81:22:0b:95:b8:a2:56:d0:92:c5:08:40:44:
                    b3:71:f6:d1:dd:08:d1:fa:42:2c:d7:b8:42:a3:40:
                    31:fd:6f:bc:05:7d:05:f9:b7:eb:da:61:9b:b3:d7:
                    03:48:c7:c6:47:1e:1f:a0:ef:59:d4:e3:7f:0a:68:
                    bc:0a:7e:8c:7e:49:14:d6:a0:ed:be:25:69:40:73:
                    28:24:4b:5e:1a:3a:dc:68:c4:6d:ed:91:e5:b3:dc:
                    09:26:43:b6:9c:5a:c6:2b:04:76:a9:be:11:86:e5:
                    de:a5:98:d0:4e:b0:dc:bd:8b:b8:ca:38:3b:3a:cf:
                    bc:70:f4:d5:7b:4b:49:95:02:89:ef:5c:99:a7:6b:
                    13:4e:7d:b7:1c:d7:74:8f:0f:4c:a9:14:fa:16:ea:
                    7d:f0:96:b9:14:47:25:c5:bd:98:d6:6c:b0:34:e7:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:66:AC:C7:60:1D:42:21:B8:91:6D:CA:FE:CC:92:AA:FF:EF:73:C2
            X509v3 Authority Key Identifier:
                keyid:89:86:D7:8F:18:A2:0B:CB:15:07:EB:D2:31:2C:0D:8E:09:AD:2E:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72dcf4f6ae59843fdce24c28f903c9595129b623.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/7649f82de549fd1b2b77bdb2bdbad378cad03b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/72dcf4f6ae59843fdce24c28f903c9595129b623.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:92:72:f9:57:ff:54:66:84:4a:d7:91:ee:d8:8e:31:ea:5c:
         d1:10:ce:d7:2a:b7:10:ab:0a:3a:53:4e:83:2a:64:d0:b4:80:
         c6:8f:74:ee:39:d0:80:3e:30:08:cb:ac:9e:19:33:aa:1e:35:
         57:9f:91:32:b4:2f:83:fc:e8:30:1a:87:88:8c:c0:76:2f:d6:
         21:8b:fa:0a:ff:73:cc:21:da:3a:93:e1:e6:87:11:70:28:79:
         4a:4c:53:6e:ca:c5:40:6b:e5:3a:60:40:92:6c:e8:00:82:ec:
         e2:e0:5d:89:ac:d5:b2:56:4d:d3:43:74:cb:f2:c3:23:98:90:
         d8:6b:ab:11:ce:d2:75:a6:19:12:99:34:1f:de:95:b1:55:d6:
         27:9b:e4:eb:46:71:69:e0:c4:a0:f9:d0:38:7e:fa:9b:6d:19:
         f1:7b:a5:05:49:30:55:a7:5e:69:f8:b4:2f:7b:34:91:76:8f:
         03:b0:ec:f2:75:9e:ea:ca:54:ad:f1:41:cf:c2:9b:99:83:93:
         1b:cb:26:bf:76:20:74:60:98:ff:ab:d6:fd:7c:01:06:30:64:
         c6:b3:b4:7c:3f:f4:7c:1b:a3:83:f5:5d:6c:f8:40:dc:e0:b2:
         f8:49:19:0e:6e:65:86:5d:6a:1d:36:3a:ac:e3:a9:a1:93:1f:
         0a:07:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 08:23:59 2023 by rpki-client on console-ams.rpki-client.org