Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/cc66137d43fa0469e17986395e12f4527f019a57.roa
File:                     cc66137d43fa0469e17986395e12f4527f019a57.roa (raw, json)
Hash identifier:          5U+tn6PaG3HioDSpSKfmM5aMfbyCe9Rq/t+LnPvEZ0s=
Subject key identifier:   61:1D:A6:8A:E4:DC:B6:4C:D8:28:C2:C2:66:F1:B3:10:20:5F:91:3D
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       0D80F7
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/cc66137d43fa0469e17986395e12f4527f019a57.roa
Signing time:             Wed 24 Mar 2021 14:40:20 +0000
ROA not before:           Wed 24 Mar 2021 14:40:20 +0000
ROA not after:            Tue 24 Mar 2026 14:40:20 +0000
asID:                     264668
IP address blocks:        167.250.180.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884983 (0xd80f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: Mar 24 14:40:20 2021 GMT
            Not After : Mar 24 14:40:20 2026 GMT
        Subject: CN=cc66137d43fa0469e17986395e12f4527f019a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:d7:73:57:23:69:43:35:22:79:ce:db:e8:
                    4c:4e:08:ce:2c:d1:f1:6b:f0:91:37:85:d3:57:89:
                    6e:16:6e:33:ce:59:b8:87:03:d6:a5:33:59:14:ea:
                    a1:ac:07:38:12:34:e8:21:29:86:b5:f5:c2:c0:9e:
                    33:a2:8f:e2:a7:eb:fb:2d:8d:2e:e7:82:6d:87:da:
                    2c:4f:25:9e:ce:84:62:27:76:83:8a:15:a4:64:71:
                    a3:be:51:9b:9e:a2:b7:1f:56:70:04:4e:3e:50:fc:
                    0a:de:8d:e6:5a:f2:4c:fd:aa:cb:5f:18:3b:9b:1f:
                    bc:af:80:f3:21:84:fd:cc:e3:13:28:4f:67:5c:d6:
                    8c:7b:bb:ba:f3:c6:e3:72:03:db:a4:13:d1:dd:d4:
                    92:e0:61:2c:2e:14:80:8a:e7:e4:97:57:b6:b5:b7:
                    81:e9:6e:65:d5:cd:23:7e:b3:97:88:e1:7b:7e:d6:
                    eb:f2:2c:99:bb:2a:08:af:a0:c6:d1:20:7f:8d:e8:
                    5e:23:2e:c5:2e:00:b0:e3:39:13:c9:ab:b9:95:af:
                    11:30:00:dd:10:b2:ab:b2:c5:cf:ae:d5:ea:d7:d0:
                    ce:7f:6f:66:6a:77:ab:c6:be:6b:11:b9:05:e3:62:
                    fc:e0:11:ad:4b:b4:9f:47:65:5e:e2:6d:66:56:d0:
                    01:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1D:A6:8A:E4:DC:B6:4C:D8:28:C2:C2:66:F1:B3:10:20:5F:91:3D
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/cc66137d43fa0469e17986395e12f4527f019a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:3c:ab:0b:1f:6d:44:d3:a0:3d:01:c7:17:e8:f3:ff:b4:76:
         0a:bc:10:61:50:1a:b7:b2:68:5e:cf:00:1c:38:dc:6d:98:91:
         ae:40:53:91:eb:2b:ad:0f:e6:05:6e:6d:8b:79:df:68:2f:51:
         91:61:62:44:3d:13:21:05:6f:3a:b7:a5:74:cc:25:71:4c:1d:
         e1:76:47:eb:7d:4e:1a:77:6b:52:c6:31:70:df:e8:30:66:9b:
         65:92:91:50:78:bb:ea:54:c7:04:e8:2d:a0:a7:a5:f2:83:a5:
         2f:85:cd:96:99:d5:2a:9d:16:01:1f:da:49:3c:a1:c0:ca:c5:
         92:93:11:41:37:04:bb:a4:0c:ee:67:a6:39:3b:26:c6:91:98:
         b0:09:50:a9:60:6e:f4:09:6d:df:64:6f:d4:c2:6d:70:5c:8b:
         0c:96:c9:54:17:af:bb:2d:50:59:21:c3:db:f6:ac:ef:87:4b:
         5a:a8:65:fb:75:2f:da:83:e7:00:62:8a:98:27:52:9b:0e:aa:
         d1:6a:8e:f5:db:75:b5:0a:99:92:c4:d5:c7:79:65:98:56:c6:
         19:78:42:c6:c8:4a:5e:9e:d8:78:26:6b:43:9a:d4:65:2d:90:
         da:08:f2:ad:d8:f8:f5:c5:f6:26:4c:a9:f7:cf:90:94:f7:ad:
         b9:f4:40:92
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDYD3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
M2Q2MDAyMjc2ZTIyOTUyMDBjODVhNjYxMjljNDJlNGQ0ODNjMzQwHhcNMjEwMzI0
MTQ0MDIwWhcNMjYwMzI0MTQ0MDIwWjAzMTEwLwYDVQQDEyhjYzY2MTM3ZDQzZmEw
NDY5ZTE3OTg2Mzk1ZTEyZjQ1MjdmMDE5YTU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvMHXc1cjaUM1InnO2+hMTgjOLNHxa/CRN4XTV4luFm4zzlm4
hwPWpTNZFOqhrAc4EjToISmGtfXCwJ4zoo/ip+v7LY0u54Jth9osTyWezoRiJ3aD
ihWkZHGjvlGbnqK3H1ZwBE4+UPwK3o3mWvJM/arLXxg7mx+8r4DzIYT9zOMTKE9n
XNaMe7u688bjcgPbpBPR3dSS4GEsLhSAiufkl1e2tbeB6W5l1c0jfrOXiOF7ftbr
8iyZuyoIr6DG0SB/jeheIy7FLgCw4zkTyau5la8RMADdELKrssXPrtXq19DOf29m
anerxr5rEbkF42L84BGtS7SfR2Ve4m1mVtABmwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGEdpork3LZM2CjCwmbxsxAgX5E9MB8GA1UdIwQYMBaAFDAh+wtyXfK860HI
D7qAy4I4YPkKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWIzZDYw
MDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2MzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTI2M2RjNTctZTExYy00NjA4LTlhZjItYmRmYjE2
ZTIxNmRjL2NjNjYxMzdkNDNmYTA0NjllMTc5ODYzOTVlMTJmNDUyN2YwMTlhNTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMjYzZGM1Ny1lMTFjLTQ2MDgtOWFmMi1iZGZi
MTZlMjE2ZGMvOWIzZDYwMDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2Mz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqf6tDANBgkqhkiG9w0BAQsFAAOCAQEAMTyrCx9tRNOgPQHH
F+jz/7R2CrwQYVAat7JoXs8AHDjcbZiRrkBTkesrrQ/mBW5ti3nfaC9RkWFiRD0T
IQVvOreldMwlcUwd4XZH631OGndrUsYxcN/oMGabZZKRUHi76lTHBOgtoKel8oOl
L4XNlpnVKp0WAR/aSTyhwMrFkpMRQTcEu6QM7memOTsmxpGYsAlQqWBu9Alt32Rv
1MJtcFyLDJbJVBevuy1QWSHD2/as74dLWqhl+3Uv2oPnAGKKmCdSmw6q0WqO9dt1
tQqZksTVx3llmFbGGXhCxshKXp7YeCZrQ5rUZS2Q2gjyrdj49cX2Jkyp98+QlPet
ufRAkg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org