Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/dcbbd326610f07cf592bef769ff6b5530351e9c8.roa
File:                     dcbbd326610f07cf592bef769ff6b5530351e9c8.roa (raw, json)
Hash identifier:          BFHFQpkLqQblMdENbBR8fjS1i+lgXFj+A/WIiXqNazc=
Subject key identifier:   2E:4C:80:11:A0:8B:26:7D:A4:14:39:02:45:52:DA:84:C6:9D:FE:11
Certificate issuer:       /CN=44c0c42f2a746ed7ed4e4598104fe194814c0771
Certificate serial:       2484
Authority key identifier: 3A:79:35:E7:19:90:82:85:A6:E3:77:90:02:EB:0D:E1:81:C4:DC:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c0c42f2a746ed7ed4e4598104fe194814c0771.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/dcbbd326610f07cf592bef769ff6b5530351e9c8.roa
Signing time:             Tue 19 Apr 2022 20:06:59 +0000
ROA not before:           Tue 19 Apr 2022 03:00:00 +0000
ROA not after:            Fri 19 Apr 2024 03:00:00 +0000
asID:                     270027
IP address blocks:        200.233.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9348 (0x2484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c0c42f2a746ed7ed4e4598104fe194814c0771
        Validity
            Not Before: Apr 19 03:00:00 2022 GMT
            Not After : Apr 19 03:00:00 2024 GMT
        Subject: CN=dcbbd326610f07cf592bef769ff6b5530351e9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:13:32:77:37:3b:b3:dd:b7:d4:5e:16:29:46:
                    1b:41:6f:1a:51:d6:9c:5b:c7:ea:fd:27:e1:34:f7:
                    7b:16:a3:9a:e9:fc:e6:79:36:61:07:c8:6c:13:8e:
                    82:14:a4:ab:94:7a:90:20:6e:91:f5:37:9a:98:04:
                    a1:4a:78:6a:76:fe:b0:1b:6c:72:48:4f:7b:bb:a2:
                    30:2b:68:62:50:53:38:f1:17:24:f4:30:8d:53:61:
                    3d:98:e5:85:c3:00:f8:46:19:29:72:79:61:4d:0d:
                    07:ae:52:cc:19:1d:ca:66:e8:fd:8d:d8:b0:56:c7:
                    70:84:58:19:df:23:b5:9c:7f:95:f4:76:b5:65:d0:
                    b2:4a:43:da:47:4f:c0:f2:26:5d:23:72:55:5d:b9:
                    2e:b9:b9:44:2f:30:0c:33:f9:2c:37:82:68:14:81:
                    03:f8:fa:4d:a9:69:51:26:40:05:21:dd:2d:89:b9:
                    e0:3f:a4:1d:9c:87:49:fb:45:c8:c0:23:fa:d6:6b:
                    7d:65:93:ae:d0:1f:b7:1a:cb:a0:49:b9:c6:f2:61:
                    64:09:eb:50:aa:f3:4c:85:be:c6:b3:c1:40:ca:b5:
                    02:05:55:a8:20:25:03:66:b5:86:29:59:bc:2e:4d:
                    1c:6b:76:f6:40:f0:f6:9a:15:ca:8a:79:1e:26:0d:
                    f0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4C:80:11:A0:8B:26:7D:A4:14:39:02:45:52:DA:84:C6:9D:FE:11
            X509v3 Authority Key Identifier:
                keyid:3A:79:35:E7:19:90:82:85:A6:E3:77:90:02:EB:0D:E1:81:C4:DC:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c0c42f2a746ed7ed4e4598104fe194814c0771.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/dcbbd326610f07cf592bef769ff6b5530351e9c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/44c0c42f2a746ed7ed4e4598104fe194814c0771.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:9f:d6:10:ad:f7:ce:9a:c9:7c:e2:88:7e:e3:43:49:b3:2b:
         12:a5:a1:f4:23:2c:25:8d:00:4f:54:ae:12:1b:44:44:2a:19:
         c5:ed:7f:ef:2a:ba:9c:ba:f8:43:99:65:1d:49:f5:5d:e4:0f:
         fe:c6:02:3e:b2:4c:9d:c5:e3:c3:79:85:b1:94:38:42:9f:8c:
         da:98:4b:a5:85:a8:dd:73:cb:a4:37:ba:7a:87:13:c7:c1:3a:
         d4:f0:2a:10:1f:b6:a1:f6:61:35:ca:fc:fb:12:51:f6:7a:ae:
         2f:d3:dc:2f:0f:ea:26:38:73:e2:c6:e9:c3:7b:fc:41:3b:df:
         d3:dc:0d:ea:2b:49:ed:fb:2b:f8:68:17:f7:35:eb:73:c1:20:
         8b:f9:7f:31:4d:3d:ef:49:7d:43:45:7e:cf:03:0d:70:d8:be:
         45:d3:71:4b:fe:2a:a4:1c:e6:2a:5b:c6:e9:64:9b:91:9d:a7:
         c7:b2:f6:06:ce:fb:94:83:01:df:1e:96:02:f9:79:9c:73:f3:
         2a:23:22:17:4a:85:8d:a1:ed:c0:66:4d:2e:3f:18:09:14:f9:
         0d:58:d4:ae:6c:4a:18:b0:aa:cc:eb:a7:99:b2:f6:f3:78:6f:
         f1:4c:80:0f:6a:54:12:2d:a5:50:db:3d:4f:b4:18:a7:92:9a:
         f3:f4:59:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 21:42:57 2023 by rpki-client on console-ams.rpki-client.org