Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/809a1af0013fe52aff7b4c523f1ea24e89e7bef4.roa
File:                     809a1af0013fe52aff7b4c523f1ea24e89e7bef4.roa (raw, json)
Hash identifier:          3ZC3O19oy5sSMWvSysvXelQT537C8rWgGpk+jq/iPMM=
Subject key identifier:   A7:86:96:0F:AE:DB:A5:51:EE:49:83:1F:4C:7E:30:06:AA:C3:72:DA
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D8BC0
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/809a1af0013fe52aff7b4c523f1ea24e89e7bef4.roa
Signing time:             Wed 24 Mar 2021 14:35:13 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        200.93.160.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887744 (0xd8bc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=809a1af0013fe52aff7b4c523f1ea24e89e7bef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:96:b4:5e:85:fb:6f:a6:9e:b9:e5:01:22:
                    ba:07:e4:ff:57:8e:83:be:fe:12:ad:f8:8d:59:c6:
                    23:f5:18:f8:f3:04:ff:58:7f:02:51:df:fa:80:bf:
                    89:e0:f6:25:05:a4:30:5d:b5:b7:79:66:17:6d:6b:
                    13:33:2f:c9:68:5a:b6:30:c8:4c:ce:04:d9:8d:a5:
                    de:51:75:da:8f:21:7b:68:09:40:68:c5:72:94:d0:
                    03:d9:a4:5a:f0:1a:06:c8:0c:7d:08:7f:2e:2e:b3:
                    f1:b8:75:35:93:d4:02:f7:14:11:b6:29:6c:7f:5d:
                    ac:91:50:63:c0:f3:67:b9:e7:10:c4:0a:f9:4f:c8:
                    9f:5a:35:38:ff:5e:ad:21:31:1e:79:42:11:c5:ec:
                    43:05:d7:22:b9:31:e9:7b:85:10:ab:8f:db:00:e8:
                    6b:71:0d:32:97:23:ec:eb:26:0a:65:00:3e:86:80:
                    0d:b9:7d:f5:71:02:2b:81:89:0e:b1:f3:c2:af:88:
                    27:99:15:81:e9:30:a6:8d:f9:dc:97:df:14:e7:42:
                    9f:bc:52:9e:2c:25:91:2b:c6:c3:f8:cc:57:42:f3:
                    37:6d:db:1e:58:e2:97:78:fb:b5:89:7c:f3:59:d3:
                    2d:64:ec:e9:d5:11:88:ec:30:1a:1b:9c:79:48:56:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:86:96:0F:AE:DB:A5:51:EE:49:83:1F:4C:7E:30:06:AA:C3:72:DA
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/809a1af0013fe52aff7b4c523f1ea24e89e7bef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b6:17:ec:0e:9b:e3:ac:47:c1:66:99:82:b9:46:1d:96:e9:b3:
         da:a3:f0:44:09:54:0f:ad:9e:b2:66:41:a0:bb:f9:ac:07:63:
         34:af:d6:8a:a5:07:7d:c7:98:07:3f:5a:b2:b5:e9:0a:f7:f6:
         43:55:17:8b:7f:1f:d7:c9:46:0f:3b:c5:e3:a7:95:97:81:40:
         66:e1:e1:60:87:a9:fa:e3:3b:d6:2f:0c:71:6d:a7:9e:2c:d8:
         c5:68:a5:33:88:db:dd:f3:41:87:d4:f0:76:03:e3:d2:01:0c:
         c4:5f:93:57:f6:18:65:96:dd:e4:0c:88:c8:fc:b5:eb:86:e5:
         e7:73:62:10:76:23:ad:27:a2:89:7c:0b:e3:97:88:8c:dd:6c:
         60:17:aa:01:b7:62:04:1f:66:a7:82:7e:63:4f:0e:4e:be:14:
         b5:73:03:1f:d3:60:3d:6b:ae:53:41:c6:0b:ba:ca:58:e2:cb:
         02:07:60:21:ad:e5:ef:79:55:5a:ad:48:b7:77:ca:b3:ba:d0:
         9f:76:ee:9b:a1:89:0c:b1:ff:6a:2c:38:32:d1:4c:f5:5b:0a:
         f3:8e:bf:fd:71:e0:02:69:a1:9c:9f:94:e9:b0:00:82:7f:f4:
         51:9c:d7:d1:d0:99:4e:d0:a2:d2:bb:73:4f:15:0c:f5:38:c1:
         62:16:24:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org