Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/2e64be8a64592abbb2743299ea1b4528f0d722a6.roa
File:                     2e64be8a64592abbb2743299ea1b4528f0d722a6.roa (raw, json)
Hash identifier:          NjC1N0oAMp0306JPW4t63UYZR1b8rVDksyoBzeLpfZc=
Subject key identifier:   10:86:A1:0F:A9:5F:3E:18:F6:2D:ED:F2:B7:FF:29:0C:83:7C:38:74
Certificate issuer:       /CN=3a61a7a9840080a44173f942095ac78ead239107
Certificate serial:       0C4B16
Authority key identifier: 33:72:18:D6:D3:FD:14:5E:F1:AF:03:0A:D8:7B:62:9B:2B:B2:02:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a61a7a9840080a44173f942095ac78ead239107.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/2e64be8a64592abbb2743299ea1b4528f0d722a6.roa
Signing time:             Fri 30 Sep 2022 03:26:07 +0000
ROA not before:           Sun 08 Aug 2021 03:00:00 +0000
ROA not after:            Thu 08 Aug 2030 03:00:00 +0000
asID:                     64120
IP address blocks:        200.49.240.0/23 maxlen: 23
                          200.49.242.0/24 maxlen: 24
                          200.49.243.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805654 (0xc4b16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a61a7a9840080a44173f942095ac78ead239107
        Validity
            Not Before: Aug  8 03:00:00 2021 GMT
            Not After : Aug  8 03:00:00 2030 GMT
        Subject: CN=2e64be8a64592abbb2743299ea1b4528f0d722a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:2c:12:78:66:a8:5c:a6:63:c0:58:17:db:
                    a3:70:6b:0d:4d:6c:96:01:3d:03:6a:3b:6f:10:98:
                    02:19:d3:2c:40:71:1e:11:21:71:8e:06:72:1f:f6:
                    72:3c:f8:26:53:1d:34:66:47:89:38:a3:33:c5:5d:
                    2b:a9:b7:b0:84:21:a7:08:d6:8b:f2:f3:4c:03:d3:
                    c3:9f:78:36:a8:6f:95:de:e0:2f:1f:ac:3d:8f:54:
                    4c:5d:ce:7a:6e:aa:9c:22:ba:74:80:54:89:de:1e:
                    af:71:62:8a:3e:c6:4d:b0:f9:cd:fb:f5:50:14:8a:
                    94:8c:f1:5b:c3:b2:ae:b0:9b:08:50:72:28:5f:b4:
                    f0:49:8a:be:5c:e7:7c:a2:f9:3f:3b:7d:1f:e8:05:
                    5c:a3:ba:7f:62:43:af:61:11:25:95:d6:57:b8:94:
                    f5:4a:e0:d8:b6:60:a3:03:e7:e2:7a:18:00:5a:5d:
                    3c:40:e3:e1:82:31:fa:f0:4a:91:f3:19:8f:07:1f:
                    51:6b:ff:63:42:e4:f8:b9:b6:74:b6:c0:da:f6:db:
                    11:fb:64:5a:5e:0c:37:bb:0d:ac:d2:b0:df:ad:0e:
                    7e:f9:66:fd:60:5c:9c:39:15:8f:09:4e:56:02:0a:
                    58:fa:fe:11:c8:14:19:1c:7d:cf:af:5d:cf:60:0d:
                    e6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:86:A1:0F:A9:5F:3E:18:F6:2D:ED:F2:B7:FF:29:0C:83:7C:38:74
            X509v3 Authority Key Identifier:
                keyid:33:72:18:D6:D3:FD:14:5E:F1:AF:03:0A:D8:7B:62:9B:2B:B2:02:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a61a7a9840080a44173f942095ac78ead239107.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/2e64be8a64592abbb2743299ea1b4528f0d722a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/3a61a7a9840080a44173f942095ac78ead239107.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:3b:9d:72:91:e3:a3:8e:3e:c6:b6:3a:ef:87:2e:e6:6a:ef:
         14:8f:8c:31:a0:e2:2a:5d:76:f5:94:97:9f:aa:51:43:ee:2b:
         e6:d5:48:24:86:b5:ec:7e:e4:33:97:53:b0:81:5e:6b:3b:98:
         19:07:0f:3d:ca:eb:0a:d9:ba:e0:0e:31:48:75:5b:fc:d8:23:
         c2:0f:4a:5b:bc:81:81:de:6e:61:98:27:a0:66:24:7f:dc:8c:
         e9:fc:d4:7f:fa:e8:d3:65:1e:39:1d:d1:a3:69:f8:88:3a:31:
         a0:de:58:56:7a:ae:aa:01:72:37:59:ab:4f:1d:20:be:40:2b:
         e4:ac:08:21:b6:5d:1d:36:65:1e:a6:49:a8:ea:03:02:f4:fa:
         e8:7d:a7:d7:49:7e:54:f9:a5:30:d4:a3:20:e5:89:e5:04:a5:
         70:76:be:df:b1:6e:8e:cd:78:c9:b1:55:11:b0:37:b2:25:80:
         5f:96:22:8f:c4:86:eb:b2:55:1e:39:50:5f:3a:e2:80:ce:50:
         d9:71:84:b3:af:34:08:7d:f7:30:e3:c2:90:0a:eb:a5:76:3d:
         ab:6d:c7:05:ad:bf:82:47:dd:95:82:9d:a5:d3:22:6b:a8:58:
         41:90:0b:38:96:c9:85:c2:bf:72:b9:30:7e:f2:56:bd:6a:3f:
         03:f0:8e:11
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDEsWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNh
NjFhN2E5ODQwMDgwYTQ0MTczZjk0MjA5NWFjNzhlYWQyMzkxMDcwHhcNMjEwODA4
MDMwMDAwWhcNMzAwODA4MDMwMDAwWjAzMTEwLwYDVQQDEygyZTY0YmU4YTY0NTky
YWJiYjI3NDMyOTllYTFiNDUyOGYwZDcyMmE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvVYsEnhmqFymY8BYF9ujcGsNTWyWAT0DajtvEJgCGdMsQHEe
ESFxjgZyH/ZyPPgmUx00ZkeJOKMzxV0rqbewhCGnCNaL8vNMA9PDn3g2qG+V3uAv
H6w9j1RMXc56bqqcIrp0gFSJ3h6vcWKKPsZNsPnN+/VQFIqUjPFbw7KusJsIUHIo
X7TwSYq+XOd8ovk/O30f6AVco7p/YkOvYRElldZXuJT1SuDYtmCjA+fiehgAWl08
QOPhgjH68EqR8xmPBx9Ra/9jQuT4ubZ0tsDa9tsR+2RaXgw3uw2s0rDfrQ5++Wb9
YFycORWPCU5WAgpY+v4RyBQZHH3Pr13PYA3mJwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBCGoQ+pXz4Y9i3t8rf/KQyDfDh0MB8GA1UdIwQYMBaAFDNyGNbT/RRe8a8D
Cth7YpsrsgJ8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2E2MWE3
YTk4NDAwODBhNDQxNzNmOTQyMDk1YWM3OGVhZDIzOTEwNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjAwNmM1ZjMtYTBjNC00Yjg5LTkxZjctZWE2NDZi
YWQ1NzdmLzJlNjRiZThhNjQ1OTJhYmJiMjc0MzI5OWVhMWI0NTI4ZjBkNzIyYTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMDA2YzVmMy1hMGM0LTRiODktOTFmNy1lYTY0
NmJhZDU3N2YvM2E2MWE3YTk4NDAwODBhNDQxNzNmOTQyMDk1YWM3OGVhZDIzOTEw
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsgx8DANBgkqhkiG9w0BAQsFAAOCAQEAKjudcpHjo44+xrY6
74cu5mrvFI+MMaDiKl129ZSXn6pRQ+4r5tVIJIa17H7kM5dTsIFeazuYGQcPPcrr
Ctm64A4xSHVb/Ngjwg9KW7yBgd5uYZgnoGYkf9yM6fzUf/ro02UeOR3Ro2n4iDox
oN5YVnquqgFyN1mrTx0gvkAr5KwIIbZdHTZlHqZJqOoDAvT66H2n10l+VPmlMNSj
IOWJ5QSlcHa+37Fujs14ybFVEbA3siWAX5Yij8SG67JVHjlQXzrigM5Q2XGEs680
CH33MOPCkArrpXY9q23HBa2/gkfdlYKdpdMia6hYQZALOJbJhcK/crkwfvJWvWo/
A/COEQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:51 2023 by rpki-client on console-ams.rpki-client.org