Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/cbd40256537d55d17d8c3d94cb2c82c52ead9623.roa
File:                     cbd40256537d55d17d8c3d94cb2c82c52ead9623.roa (raw, json)
Hash identifier:          roAAdi/DCPSp+0xd05sN9kcV7TqybQw0ytTTcqG652I=
Subject key identifier:   83:D1:10:0A:6A:6A:4A:86:C1:AE:FC:F5:31:16:4C:B4:82:A2:75:58
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D8507
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/cbd40256537d55d17d8c3d94cb2c82c52ead9623.roa
Signing time:             Wed 24 Mar 2021 14:35:12 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        200.69.112.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886023 (0xd8507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=cbd40256537d55d17d8c3d94cb2c82c52ead9623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ab:d8:23:a4:34:21:0f:0e:d5:91:4f:8f:81:
                    60:f0:e3:9d:a8:82:ee:3f:af:e8:13:24:be:b4:66:
                    97:14:59:7b:94:dc:93:df:ec:16:e1:d4:da:23:4d:
                    36:87:a9:01:46:05:0b:ac:b2:cd:68:39:5d:a3:d2:
                    3f:51:14:d1:bc:b7:1b:3a:90:32:b1:09:a8:6f:64:
                    40:86:de:20:af:bf:14:84:78:10:9f:96:e8:f0:87:
                    6b:25:e8:d8:dc:7a:46:26:6b:a2:4c:1c:3d:91:aa:
                    b4:73:f0:5b:65:e0:67:25:77:ec:b3:4e:63:33:26:
                    0f:df:24:c2:e0:3a:8a:1f:5d:55:51:37:d8:4a:50:
                    86:5d:0f:57:59:13:96:04:84:39:c1:cd:15:98:b4:
                    be:94:15:0a:4b:9e:c1:5b:d4:5d:f9:ea:37:be:82:
                    3e:96:8d:d8:f9:03:0a:a9:38:9c:b2:04:8c:16:61:
                    c3:11:27:b5:c1:79:46:48:f0:9c:c2:f8:c9:93:1f:
                    11:bd:ba:84:b5:fa:32:57:12:dd:25:61:29:37:8e:
                    78:63:3b:37:67:1a:e6:4c:1d:4f:54:08:ce:b8:ce:
                    8b:26:52:97:5e:cf:50:0b:cf:2d:f8:f8:0a:7a:e2:
                    b0:57:a4:fd:51:50:e4:63:80:0e:9a:eb:9a:b4:b3:
                    fd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D1:10:0A:6A:6A:4A:86:C1:AE:FC:F5:31:16:4C:B4:82:A2:75:58
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/cbd40256537d55d17d8c3d94cb2c82c52ead9623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:5f:96:14:0d:e1:90:fa:56:82:36:cc:77:f8:9b:21:09:d0:
         31:9f:db:86:e6:79:a2:77:09:52:00:19:3b:f5:3e:05:83:42:
         56:ae:fd:9e:b9:37:71:5b:d5:ac:8b:ba:40:df:eb:23:89:9f:
         ed:32:f5:9e:38:05:4d:ec:29:0e:bd:38:d6:67:a0:fe:09:3c:
         af:c5:4a:e8:3a:8e:e0:83:ed:db:93:97:f6:e6:7d:d1:ee:77:
         ff:17:93:c6:0c:27:40:75:ab:17:05:2e:e3:c1:2d:c6:08:9f:
         57:2e:d4:4e:52:6f:2f:c3:bf:35:ce:8f:f5:5b:b4:1a:d3:bb:
         a0:12:2c:6c:34:08:18:df:71:8c:99:12:57:81:a3:61:61:5f:
         a8:bf:a8:ff:b6:8b:7a:12:6e:59:bf:ed:ea:f9:41:66:58:4e:
         c0:2b:e9:8f:00:5d:91:9d:e8:34:0f:0d:09:97:35:9d:bd:70:
         b6:6b:e4:42:0b:39:95:cf:ee:74:1e:20:b5:f2:7d:80:0a:f0:
         f9:a4:8b:0e:51:a1:ac:3d:d9:77:09:22:64:39:01:24:1d:02:
         88:da:6e:82:8b:2e:3e:7d:82:66:97:10:27:1e:1a:00:07:75:
         fd:cb:3a:f0:56:18:9f:f2:a1:b6:39:75:ce:3f:dc:c2:0c:cb:
         33:68:46:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-fra.rpki-client.org