Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/ba6d5c7ecf040acb183524d6a53110d17bd63f65.roa
File:                     ba6d5c7ecf040acb183524d6a53110d17bd63f65.roa (raw, json)
Hash identifier:          8agpd4SfHcNbCdJerUWHJaBFPj7x2hBngLy17YpyyR8=
Subject key identifier:   8D:3F:5E:82:3E:20:92:C0:2F:C7:7C:D5:AD:79:29:F1:8D:CA:41:2B
Certificate issuer:       /CN=44c0c42f2a746ed7ed4e4598104fe194814c0771
Certificate serial:       3E4E
Authority key identifier: 3A:79:35:E7:19:90:82:85:A6:E3:77:90:02:EB:0D:E1:81:C4:DC:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c0c42f2a746ed7ed4e4598104fe194814c0771.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/ba6d5c7ecf040acb183524d6a53110d17bd63f65.roa
Signing time:             Thu 21 Apr 2022 15:30:58 +0000
ROA not before:           Thu 21 Apr 2022 03:00:00 +0000
ROA not after:            Sun 21 Apr 2024 03:00:00 +0000
asID:                     270027
IP address blocks:        200.233.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15950 (0x3e4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c0c42f2a746ed7ed4e4598104fe194814c0771
        Validity
            Not Before: Apr 21 03:00:00 2022 GMT
            Not After : Apr 21 03:00:00 2024 GMT
        Subject: CN=ba6d5c7ecf040acb183524d6a53110d17bd63f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9a:90:58:22:9d:4f:94:58:be:56:fb:d6:38:
                    81:6a:7a:ad:2c:12:18:67:47:6a:21:b4:99:a3:1b:
                    2c:7f:d9:a6:cc:b4:ca:55:ce:81:30:b4:5c:59:bd:
                    7d:6f:66:11:5b:a3:93:bb:ff:ca:8d:b8:d6:3b:d8:
                    e8:2a:b1:bd:d8:26:7c:66:2b:3b:b0:e8:6f:cc:2a:
                    8a:f2:0e:37:15:41:33:52:e6:99:b3:2c:ae:8a:2b:
                    70:3b:6f:f1:aa:95:e7:e4:63:6e:d3:17:83:49:b1:
                    ef:ef:cf:f0:46:72:16:98:3e:11:fa:27:a3:3b:29:
                    b5:b2:ca:9a:88:ac:d0:2d:c0:96:be:c2:5b:a9:c7:
                    74:d9:d2:a6:39:22:e2:db:43:50:ff:e4:8a:d5:d8:
                    9a:d2:d0:3a:66:b9:22:ac:f5:90:ad:3b:45:85:72:
                    e4:62:df:3f:98:cb:e4:f3:44:1d:64:91:2a:ea:3b:
                    c5:30:1b:0b:d0:fd:dc:d3:53:74:f0:13:de:5d:5d:
                    3b:3e:2f:07:9e:6b:3c:d3:33:fa:6e:dc:16:9d:e8:
                    32:fe:0d:f6:55:60:1d:a1:c0:bf:91:e5:9f:79:c4:
                    5f:04:06:e5:2f:ab:d1:ba:89:82:27:da:9c:df:5e:
                    20:7e:63:20:34:b1:06:88:45:71:7c:9c:74:28:42:
                    b4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3F:5E:82:3E:20:92:C0:2F:C7:7C:D5:AD:79:29:F1:8D:CA:41:2B
            X509v3 Authority Key Identifier:
                keyid:3A:79:35:E7:19:90:82:85:A6:E3:77:90:02:EB:0D:E1:81:C4:DC:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c0c42f2a746ed7ed4e4598104fe194814c0771.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/ba6d5c7ecf040acb183524d6a53110d17bd63f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/44c0c42f2a746ed7ed4e4598104fe194814c0771.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:72:04:1d:35:c6:3b:66:a0:61:44:a3:76:ea:42:8c:c0:38:
         3d:0a:bc:7f:30:fb:21:68:b8:8b:61:8e:a0:a3:36:ab:ad:79:
         e5:04:ee:c2:37:e7:93:dc:47:f9:75:87:98:21:d7:d0:2c:06:
         19:2a:97:fb:11:ab:5b:08:ff:78:f8:05:df:ab:60:95:24:6f:
         d5:ad:f3:6f:29:53:54:93:db:a8:30:3e:ce:bb:69:68:f0:21:
         68:b6:df:2b:5e:dc:ae:75:9e:e4:77:f6:63:9e:37:c2:2e:7b:
         ff:46:9f:68:db:a6:dc:e6:7f:34:00:92:95:d3:8f:c0:e6:1c:
         72:9e:94:62:be:08:76:37:13:05:39:86:8c:95:7b:d7:9d:c5:
         49:26:c7:92:6c:c1:46:cd:e0:7c:4f:d4:63:6a:6f:5c:74:6c:
         ff:fe:42:42:76:bf:94:1e:fd:a2:e1:e8:c7:24:8f:df:19:81:
         de:56:0a:68:36:97:be:1a:28:14:b8:68:da:56:fa:e7:12:a5:
         c0:7f:2c:ce:ee:c8:20:06:13:db:b0:74:b6:4a:01:55:f3:37:
         a8:53:1e:f1:60:30:fb:a6:61:d3:bf:cc:14:0e:dc:b1:e2:fe:
         3f:29:67:2f:a8:a5:da:dd:6a:81:05:2a:6c:3e:82:32:c6:89:
         eb:1d:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 21:44:13 2023 by rpki-client on console-fra.rpki-client.org