Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/3aae36b8481d52911e5b65e77c866c3abf99b8f1.roa
File:                     3aae36b8481d52911e5b65e77c866c3abf99b8f1.roa (raw, json)
Hash identifier:          KbG+WnUsFa4XJxZP9TepGlynq/X0gDKNMX03ejJvxUI=
Subject key identifier:   FD:DA:CD:6C:6E:69:B7:E7:D5:93:56:09:98:5B:D5:8B:B3:4F:37:93
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       0D9004
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/3aae36b8481d52911e5b65e77c866c3abf99b8f1.roa
Signing time:             Thu 25 Mar 2021 00:24:16 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     264668
IP address blocks:        200.24.128.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888836 (0xd9004)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=3aae36b8481d52911e5b65e77c866c3abf99b8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:f3:bb:d2:8e:b0:70:09:3c:0e:fb:6d:d1:
                    99:43:52:1c:85:8f:a8:26:32:d8:92:3f:74:ac:59:
                    bf:f5:63:14:fa:f4:8f:9b:9d:ad:56:34:d7:a7:9c:
                    e4:d2:34:72:c1:93:36:6d:a6:df:93:fa:3e:d3:fa:
                    de:72:fe:59:cd:5d:49:4b:35:6c:b5:0e:b7:da:c5:
                    19:9b:c3:b7:69:37:31:76:ef:31:67:f6:8f:40:ae:
                    2d:96:d4:f3:4b:a1:2d:86:65:68:21:78:ef:b0:c1:
                    ae:90:09:e0:a6:db:a7:8e:c2:b2:7f:f5:ae:c3:cb:
                    54:47:34:3b:9d:64:f0:c3:a5:c9:75:8e:62:5a:99:
                    e5:e7:a1:04:29:0e:a6:e6:b6:dc:0b:fb:8d:2d:5a:
                    1b:70:4b:2c:54:f4:64:80:6c:ef:6d:5e:7b:50:f5:
                    78:ea:34:87:8a:91:49:01:c8:a2:99:e2:82:94:57:
                    6c:6c:df:7b:36:e0:83:96:cf:59:34:c5:8d:2c:80:
                    09:f7:85:37:57:c0:d0:f1:e8:9c:aa:c5:cd:31:74:
                    79:ce:0c:45:ec:35:5c:9a:2b:d6:07:97:14:98:72:
                    76:5f:45:06:e9:b1:0e:4c:c5:65:97:27:9d:2b:92:
                    e0:e4:7c:4f:ff:39:2d:3a:e3:5e:3d:43:97:49:52:
                    ab:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DA:CD:6C:6E:69:B7:E7:D5:93:56:09:98:5B:D5:8B:B3:4F:37:93
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/3aae36b8481d52911e5b65e77c866c3abf99b8f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:c1:95:f4:e1:6b:a6:68:55:d6:b1:dc:2a:f1:09:04:a5:05:
         eb:02:26:13:78:2a:44:2a:22:5b:64:65:71:8f:5b:b8:8c:9e:
         9f:f5:11:45:c3:7b:d2:e3:39:74:47:10:44:b7:cf:ba:f3:9e:
         3f:ac:b0:59:ed:5e:cd:2d:b7:06:4d:d2:55:11:74:09:7a:0c:
         cd:aa:76:e0:e8:d2:3b:08:4c:52:44:bb:69:9d:59:23:25:34:
         33:82:8d:be:4d:3d:06:7d:e1:54:4d:25:50:a5:db:2b:46:20:
         2f:be:0a:7b:da:22:b3:8c:15:0d:85:bd:16:4a:d5:e5:68:ed:
         40:37:e8:6d:0b:8a:ba:f6:bf:02:73:99:c4:17:5e:12:00:f6:
         8b:35:ad:79:e0:c0:8b:a3:15:81:ba:e1:87:55:e3:31:2a:a8:
         5c:11:05:52:34:b8:fc:38:91:eb:b0:b0:47:f6:55:ba:fc:ec:
         63:4a:63:57:72:cc:5e:40:5f:06:c1:cc:00:4e:e9:86:56:d4:
         19:e7:89:24:b2:c2:9e:3f:24:19:48:44:0e:4a:d0:9a:4a:9f:
         c7:95:e5:12:51:99:c0:1d:65:07:e2:40:f4:06:7d:fc:7d:63:
         f0:89:67:17:00:e0:ad:df:c9:01:7a:a1:38:4f:f1:79:b2:f4:
         de:bc:19:08
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDZAEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
M2Q2MDAyMjc2ZTIyOTUyMDBjODVhNjYxMjljNDJlNGQ0ODNjMzQwHhcNMjEwMzI0
MDMwMDAwWhcNMjMwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygzYWFlMzZiODQ4MWQ1
MjkxMWU1YjY1ZTc3Yzg2NmMzYWJmOTliOGYxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmt3zu9KOsHAJPA77bdGZQ1IchY+oJjLYkj90rFm/9WMU+vSP
m52tVjTXp5zk0jRywZM2babfk/o+0/recv5ZzV1JSzVstQ632sUZm8O3aTcxdu8x
Z/aPQK4tltTzS6EthmVoIXjvsMGukAngptunjsKyf/Wuw8tURzQ7nWTww6XJdY5i
Wpnl56EEKQ6m5rbcC/uNLVobcEssVPRkgGzvbV57UPV46jSHipFJAciimeKClFds
bN97NuCDls9ZNMWNLIAJ94U3V8DQ8eicqsXNMXR5zgxF7DVcmivWB5cUmHJ2X0UG
6bEOTMVllyedK5Lg5HxP/zktOuNePUOXSVKrswIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFP3azWxuabfn1ZNWCZhb1YuzTzeTMB8GA1UdIwQYMBaAFDAh+wtyXfK860HI
D7qAy4I4YPkKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWIzZDYw
MDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2MzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTI2M2RjNTctZTExYy00NjA4LTlhZjItYmRmYjE2
ZTIxNmRjLzNhYWUzNmI4NDgxZDUyOTExZTViNjVlNzdjODY2YzNhYmY5OWI4ZjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMjYzZGM1Ny1lMTFjLTQ2MDgtOWFmMi1iZGZi
MTZlMjE2ZGMvOWIzZDYwMDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2Mz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBcgYgDANBgkqhkiG9w0BAQsFAAOCAQEAKsGV9OFrpmhV1rHc
KvEJBKUF6wImE3gqRCoiW2RlcY9buIyen/URRcN70uM5dEcQRLfPuvOeP6ywWe1e
zS23Bk3SVRF0CXoMzap24OjSOwhMUkS7aZ1ZIyU0M4KNvk09Bn3hVE0lUKXbK0Yg
L74Ke9ois4wVDYW9FkrV5WjtQDfobQuKuva/AnOZxBdeEgD2izWteeDAi6MVgbrh
h1XjMSqoXBEFUjS4/DiR67CwR/ZVuvzsY0pjV3LMXkBfBsHMAE7phlbUGeeJJLLC
nj8kGUhEDkrQmkqfx5XlElGZwB1lB+JA9AZ9/H1j8IlnFwDgrd/JAXqhOE/xebL0
3rwZCA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org