Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/b9dc204db69b792070f7357b7bdc0472da968bb3.roa
File:                     b9dc204db69b792070f7357b7bdc0472da968bb3.roa (raw, json)
Hash identifier:          Wjs7us9Qi1qlsaHsXf75L+JHRKLNxdaAYHO5yIPIVNQ=
Subject key identifier:   98:16:14:EC:9B:52:9A:09:A0:CB:65:63:10:E2:C8:86:E7:3A:EE:BD
Certificate issuer:       /CN=72dcf4f6ae59843fdce24c28f903c9595129b623
Certificate serial:       041B
Authority key identifier: 89:86:D7:8F:18:A2:0B:CB:15:07:EB:D2:31:2C:0D:8E:09:AD:2E:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72dcf4f6ae59843fdce24c28f903c9595129b623.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/b9dc204db69b792070f7357b7bdc0472da968bb3.roa
Signing time:             Thu 25 Nov 2021 14:18:01 +0000
ROA not before:           Thu 25 Nov 2021 03:00:00 +0000
ROA not after:            Sat 25 Nov 2023 03:00:00 +0000
asID:                     271867
IP address blocks:        200.36.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1051 (0x41b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72dcf4f6ae59843fdce24c28f903c9595129b623
        Validity
            Not Before: Nov 25 03:00:00 2021 GMT
            Not After : Nov 25 03:00:00 2023 GMT
        Subject: CN=b9dc204db69b792070f7357b7bdc0472da968bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4d:b5:8e:c4:1f:81:53:c9:24:65:e8:bd:d5:
                    3e:24:ef:d7:97:8a:ec:00:4d:42:9d:20:84:90:66:
                    dc:bf:8f:f4:9b:48:2a:e4:94:f6:10:bc:15:c5:f3:
                    93:f1:04:46:4c:f3:4a:0f:08:b8:a0:e0:75:3f:0a:
                    df:b5:df:f5:07:0d:df:d6:78:dc:6f:44:28:e6:f0:
                    6b:50:c6:b5:e7:67:d3:0d:62:62:f5:ed:ea:8a:03:
                    1a:f9:ce:b9:97:bd:d8:90:04:c5:b6:d2:dd:7e:61:
                    f6:74:ff:09:68:da:e5:92:e7:40:34:71:2b:24:3b:
                    10:ea:24:c2:b7:b1:a0:22:67:31:a8:c0:61:f6:f7:
                    c7:f3:aa:e2:bd:97:36:87:5b:72:fa:f5:2e:12:6c:
                    05:8b:20:95:5a:f9:34:53:df:5a:05:d7:be:0a:05:
                    6b:17:93:e9:7e:5a:4c:0e:73:08:54:c3:24:0b:a1:
                    40:a7:da:bf:55:d2:e1:4d:85:45:f9:a9:41:c6:e2:
                    ea:65:07:c2:e2:aa:b2:63:2f:51:20:9e:3f:0f:99:
                    56:8f:10:9d:cd:a3:c4:e9:64:fe:27:00:0f:bf:c9:
                    0c:33:26:7d:fa:78:42:2c:0b:8c:bc:69:65:0a:76:
                    d5:41:3d:e0:e2:ee:d7:73:a1:ad:8d:49:7c:ec:bb:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:16:14:EC:9B:52:9A:09:A0:CB:65:63:10:E2:C8:86:E7:3A:EE:BD
            X509v3 Authority Key Identifier:
                keyid:89:86:D7:8F:18:A2:0B:CB:15:07:EB:D2:31:2C:0D:8E:09:AD:2E:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72dcf4f6ae59843fdce24c28f903c9595129b623.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/b9dc204db69b792070f7357b7bdc0472da968bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/72dcf4f6ae59843fdce24c28f903c9595129b623.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:a7:bc:2f:e1:54:6f:99:a4:ae:57:cd:8c:98:2f:54:77:c3:
         62:b5:8d:6a:01:01:29:3e:b4:36:9f:d5:33:90:1a:14:6c:af:
         28:8a:74:e3:5d:d8:7c:04:e6:b4:ae:2b:5f:7c:20:36:6f:32:
         7c:28:c3:dd:87:48:27:8d:46:39:10:8a:51:d1:ef:3f:70:d2:
         c4:f4:9a:d3:75:d9:df:4f:6a:82:c2:14:de:ba:d3:e6:39:62:
         bf:85:f6:2f:0e:6d:d6:a5:4d:f3:93:fa:2c:75:e0:fb:8c:81:
         ce:4d:bd:76:8b:17:ec:7e:6b:e8:04:52:19:7a:0c:e0:70:a6:
         9e:c2:e6:8f:db:6e:f5:d5:82:00:a8:13:cc:e5:da:e3:a0:a1:
         af:17:25:2d:42:32:4e:42:8d:d4:e5:18:37:15:77:3c:6f:a5:
         d7:22:27:99:56:ba:38:28:76:40:71:ce:13:f8:4f:7c:31:6f:
         96:af:a5:64:6a:ca:52:0a:c1:03:28:28:08:41:0b:12:9a:bd:
         68:d8:c9:43:bd:f3:4d:a9:7b:a6:0a:53:e5:cb:8e:34:44:e1:
         00:80:57:c5:74:34:33:bf:74:95:6d:e3:73:2e:2a:8c:cc:68:
         67:37:a5:82:f2:2a:00:97:e8:72:9e:0d:c2:1f:9b:da:2f:e0:
         24:66:ee:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 08:05:42 2023 by rpki-client on console-fra.rpki-client.org