Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/c2829fbf038e061bb83f09b6ea8a37e9249c66b0.roa
File:                     c2829fbf038e061bb83f09b6ea8a37e9249c66b0.roa (raw, json)
Hash identifier:          v8o68joIYuPKhXfJU3iKM8bpBjO0YfyB8F2WdcXULSA=
Subject key identifier:   20:5D:87:5E:3F:35:52:CC:5A:56:72:2B:BC:35:74:BC:A0:5F:43:A4
Certificate issuer:       /CN=ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8
Certificate serial:       1A2B94
Authority key identifier: 89:45:5B:B7:4F:80:8D:EB:D1:D4:05:DA:C8:34:E4:27:DC:2B:30:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/c2829fbf038e061bb83f09b6ea8a37e9249c66b0.roa
Signing time:             Fri 26 Aug 2022 21:13:22 +0000
ROA not before:           Wed 03 Nov 2021 21:00:23 +0000
ROA not after:            Tue 03 Nov 2026 21:00:23 +0000
asID:                     265696
IP address blocks:        131.196.210.0/23 maxlen: 23
                          131.196.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1715092 (0x1a2b94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8
        Validity
            Not Before: Nov  3 21:00:23 2021 GMT
            Not After : Nov  3 21:00:23 2026 GMT
        Subject: CN=c2829fbf038e061bb83f09b6ea8a37e9249c66b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:9a:c0:e5:e5:39:4d:80:12:0c:4e:b3:dd:
                    55:d0:c6:69:22:96:cc:93:41:7e:8f:da:b6:30:ae:
                    b9:32:6c:d1:ce:15:00:1d:24:92:ad:76:99:91:df:
                    03:18:cf:ed:fe:7e:54:eb:48:a6:93:8b:1d:64:61:
                    e9:76:10:df:ec:42:89:ef:85:53:7b:a0:ce:41:bc:
                    ba:f0:a9:3f:80:ec:30:c2:9a:e3:61:e5:90:22:fe:
                    8b:07:1b:40:97:b8:a1:8f:9f:17:c9:81:c5:db:98:
                    29:de:2b:a0:38:47:72:03:b4:8a:bf:81:f0:51:f7:
                    f3:cc:5f:61:59:1d:4d:40:a6:19:dc:a0:10:e7:c3:
                    ea:b2:a8:ef:68:11:3b:a7:63:a3:77:78:5e:ba:87:
                    80:74:32:6e:ae:bf:7e:55:05:88:19:77:3b:4c:31:
                    09:66:b2:0e:b5:89:05:9c:7e:ee:cd:78:fd:29:c3:
                    4a:52:70:84:3d:a3:5a:d8:04:7f:01:55:29:73:2f:
                    5a:44:52:c9:7d:95:d0:3e:35:7c:27:2b:61:17:83:
                    69:4c:58:b4:25:26:21:38:87:75:c8:d3:f1:49:8d:
                    60:45:2b:dc:9e:da:b5:9e:29:f4:41:42:dc:74:a4:
                    2f:f5:4a:90:d4:db:b6:1d:bb:51:8c:3d:51:86:d0:
                    c3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5D:87:5E:3F:35:52:CC:5A:56:72:2B:BC:35:74:BC:A0:5F:43:A4
            X509v3 Authority Key Identifier:
                keyid:89:45:5B:B7:4F:80:8D:EB:D1:D4:05:DA:C8:34:E4:27:DC:2B:30:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/c2829fbf038e061bb83f09b6ea8a37e9249c66b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:13:c2:a9:7d:20:af:80:1f:8b:41:bc:a1:7a:18:47:b9:fa:
         d7:1f:76:78:5b:a2:18:29:32:26:c3:98:5d:ad:aa:f9:9b:d1:
         b8:5b:82:e4:eb:4a:8b:71:3e:59:fa:5e:1c:5e:ee:2c:4d:40:
         3c:b6:5d:0f:a4:f2:7e:4b:10:1f:d2:1a:b1:ac:4a:31:b7:e2:
         a9:64:f3:c0:ac:6f:20:3d:d3:cc:e4:b2:78:ed:07:a3:6f:9a:
         81:03:20:de:a5:9c:d2:02:c1:79:87:c1:20:fd:f3:22:ed:d2:
         3e:71:97:3c:65:ab:02:97:4d:f0:8a:dd:fe:9c:b3:f6:dc:d5:
         fb:34:5c:bc:d5:73:5c:ca:62:49:69:58:1a:4e:bd:37:1d:0e:
         e6:3d:15:aa:c3:fe:80:59:ec:42:c4:cb:b1:13:a4:e4:eb:90:
         e2:14:6b:a1:2d:b3:d2:86:a3:44:38:af:ac:49:b2:12:8e:18:
         37:4c:7a:33:03:b2:69:92:0e:b6:8f:28:bb:fd:02:fd:0c:c0:
         ad:f1:a2:0c:fe:69:49:9c:3b:47:e8:be:e3:a6:47:9e:f0:7b:
         ac:fa:60:02:71:c4:44:62:30:eb:51:b6:a6:ee:62:d0:d4:24:
         97:f2:b1:07:2f:f9:14:c2:7d:2e:5a:6f:49:6b:27:bf:13:0c:
         2d:55:19:22
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGiuUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFk
YTBhOGIxYjQ2MTIxZDhkY2EwN2I0ZTVlMWVmZDIwYjUwZDYwZDgwHhcNMjExMTAz
MjEwMDIzWhcNMjYxMTAzMjEwMDIzWjAzMTEwLwYDVQQDEyhjMjgyOWZiZjAzOGUw
NjFiYjgzZjA5YjZlYThhMzdlOTI0OWM2NmIwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtbaawOXlOU2AEgxOs91V0MZpIpbMk0F+j9q2MK65MmzRzhUA
HSSSrXaZkd8DGM/t/n5U60imk4sdZGHpdhDf7EKJ74VTe6DOQby68Kk/gOwwwprj
YeWQIv6LBxtAl7ihj58XyYHF25gp3iugOEdyA7SKv4HwUffzzF9hWR1NQKYZ3KAQ
58PqsqjvaBE7p2Ojd3heuoeAdDJurr9+VQWIGXc7TDEJZrIOtYkFnH7uzXj9KcNK
UnCEPaNa2AR/AVUpcy9aRFLJfZXQPjV8JythF4NpTFi0JSYhOId1yNPxSY1gRSvc
ntq1nin0QULcdKQv9UqQ1Nu2HbtRjD1RhtDDkQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCBdh14/NVLMWlZyK7w1dLygX0OkMB8GA1UdIwQYMBaAFIlFW7dPgI3r0dQF
2sg05CfcKzBUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWRhMGE4
YjFiNDYxMjFkOGRjYTA3YjRlNWUxZWZkMjBiNTBkNjBkOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTQ0ODZlY2YtNTU5MC00ZTczLWEyOWQtMjgwODMy
NzJiYTVhL2MyODI5ZmJmMDM4ZTA2MWJiODNmMDliNmVhOGEzN2U5MjQ5YzY2YjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNDQ4NmVjZi01NTkwLTRlNzMtYTI5ZC0yODA4
MzI3MmJhNWEvYWRhMGE4YjFiNDYxMjFkOGRjYTA3YjRlNWUxZWZkMjBiNTBkNjBk
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAYPE0jANBgkqhkiG9w0BAQsFAAOCAQEAHxPCqX0gr4Afi0G8
oXoYR7n61x92eFuiGCkyJsOYXa2q+ZvRuFuC5OtKi3E+WfpeHF7uLE1APLZdD6Ty
fksQH9IasaxKMbfiqWTzwKxvID3TzOSyeO0Ho2+agQMg3qWc0gLBeYfBIP3zIu3S
PnGXPGWrApdN8Ird/pyz9tzV+zRcvNVzXMpiSWlYGk69Nx0O5j0VqsP+gFnsQsTL
sROk5OuQ4hRroS2z0oajRDivrEmyEo4YN0x6MwOyaZIOto8ou/0C/QzArfGiDP5p
SZw7R+i+46ZHnvB7rPpgAnHERGIw61G2pu5i0NQkl/KxBy/5FMJ9LlpvSWsnvxMM
LVUZIg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:49 2023 by rpki-client on console-ams.rpki-client.org