Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/8e9ce48b74fd072725c3a2f4944b385eedbc0bb9.roa
File:                     8e9ce48b74fd072725c3a2f4944b385eedbc0bb9.roa (raw, json)
Hash identifier:          VSTxh95oFk8sDhPGjN0kmqfSUDFr34zH851MIKh6kE8=
Subject key identifier:   01:1D:98:EC:B9:14:15:E5:8D:93:50:5F:32:9B:D1:3C:D1:D2:9E:FB
Certificate issuer:       /CN=44c0c42f2a746ed7ed4e4598104fe194814c0771
Certificate serial:       28F8
Authority key identifier: 3A:79:35:E7:19:90:82:85:A6:E3:77:90:02:EB:0D:E1:81:C4:DC:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c0c42f2a746ed7ed4e4598104fe194814c0771.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/8e9ce48b74fd072725c3a2f4944b385eedbc0bb9.roa
Signing time:             Tue 19 Apr 2022 20:07:29 +0000
ROA not before:           Tue 19 Apr 2022 03:00:00 +0000
ROA not after:            Fri 19 Apr 2024 03:00:00 +0000
asID:                     270027
IP address blocks:        200.233.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10488 (0x28f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c0c42f2a746ed7ed4e4598104fe194814c0771
        Validity
            Not Before: Apr 19 03:00:00 2022 GMT
            Not After : Apr 19 03:00:00 2024 GMT
        Subject: CN=8e9ce48b74fd072725c3a2f4944b385eedbc0bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:bf:76:0c:1c:da:df:ba:83:07:4e:66:b1:
                    11:5b:1f:8b:f6:94:f7:c7:79:c0:16:4b:7f:d2:4e:
                    88:76:e5:f5:87:74:36:e4:d3:e3:3a:dc:7c:ad:52:
                    b8:1a:85:59:99:f8:dd:58:ba:13:85:fc:bd:2f:8a:
                    73:25:92:fb:a4:df:19:a2:5e:f7:b9:73:72:bd:d2:
                    5e:35:24:e1:84:6c:28:d8:74:6f:02:20:57:4b:6c:
                    7c:d5:56:54:08:56:fb:cf:71:e8:36:9d:97:98:ed:
                    1f:a7:40:19:b9:7e:74:c5:81:f4:63:46:09:40:d4:
                    5f:5a:c7:0f:2b:1d:a1:03:aa:ab:e5:11:ed:fe:55:
                    92:c1:30:85:cb:7a:56:5b:77:06:33:d5:38:bb:8b:
                    47:3a:d8:5e:a6:da:9c:8b:33:a0:7e:ec:44:e9:14:
                    a2:1a:cc:cf:1d:df:81:91:cc:8d:96:c1:5e:49:e8:
                    51:0d:2a:f8:b1:92:dc:d9:e2:77:5e:5f:44:dd:18:
                    ac:f9:f3:f9:ee:ac:97:19:2a:c0:1a:07:58:1e:2e:
                    bf:9f:c6:bb:ee:96:83:e0:6c:4b:34:fa:e2:fc:6f:
                    26:a0:c0:61:c0:c0:e5:14:d2:33:68:b2:cd:1f:8c:
                    be:88:d0:f0:c5:5f:38:91:22:07:1b:1e:cc:64:04:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1D:98:EC:B9:14:15:E5:8D:93:50:5F:32:9B:D1:3C:D1:D2:9E:FB
            X509v3 Authority Key Identifier:
                keyid:3A:79:35:E7:19:90:82:85:A6:E3:77:90:02:EB:0D:E1:81:C4:DC:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c0c42f2a746ed7ed4e4598104fe194814c0771.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/8e9ce48b74fd072725c3a2f4944b385eedbc0bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/44c0c42f2a746ed7ed4e4598104fe194814c0771.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:70:32:db:2e:42:29:a8:36:8a:df:46:03:a0:86:ed:2b:e2:
         f4:ca:a9:85:19:47:25:87:b6:2c:d5:50:c0:ae:91:26:da:81:
         11:df:18:bf:70:24:d8:f3:0a:67:ae:24:28:64:ae:09:45:19:
         4f:24:45:94:9e:c5:df:15:65:5f:12:5c:36:6c:8c:65:b5:b7:
         d4:76:81:39:c5:9a:df:39:8a:e7:85:05:80:f4:1c:f8:09:c1:
         3d:eb:55:76:ad:c9:4a:a4:02:85:59:ac:9f:2d:e5:d0:b5:c4:
         69:6a:c5:2a:77:bc:b7:b3:5f:a2:29:43:e3:a7:70:c6:53:13:
         fe:c9:31:2b:5a:9a:91:c5:dd:e4:2b:3a:e4:31:50:dc:a5:cf:
         bb:6d:08:18:b6:08:a0:18:1a:76:d4:25:6e:a3:6e:a6:75:e2:
         0e:29:ac:59:89:92:d9:1a:43:f8:75:48:8e:da:76:ea:19:dc:
         2b:f6:c3:66:90:9b:39:ce:3b:05:0c:de:1d:92:19:c0:fe:4f:
         9d:4b:f2:95:d4:54:d8:3f:53:00:90:c6:64:ef:79:37:4c:db:
         01:7d:cd:2c:ec:bf:17:9e:5e:7f:a3:a0:cb:63:b3:9b:11:3b:
         5f:31:0e:ff:f2:f5:e7:a3:d9:18:43:1e:3c:da:6d:9a:61:b5:
         19:a1:e2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 21:44:13 2023 by rpki-client on console-fra.rpki-client.org