Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/25d5a10dd22dd53df5878920b73999dd8030f8f2.roa
File:                     25d5a10dd22dd53df5878920b73999dd8030f8f2.roa (raw, json)
Hash identifier:          sUAQY5YJeIYN4XyvlVsN3I8oDWs5WKnpo22SXeIX9So=
Subject key identifier:   60:FB:91:15:67:23:F0:2D:8A:2F:58:CE:CC:CB:C0:1A:89:3C:B8:F3
Certificate issuer:       /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial:       1446E5
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/25d5a10dd22dd53df5878920b73999dd8030f8f2.roa
Signing time:             Sun 08 Oct 2023 18:13:07 +0000
ROA not before:           Sat 07 Oct 2023 18:13:07 +0000
ROA not after:            Wed 08 Oct 2025 18:13:07 +0000
asID:                     61317
IP address blocks:        200.26.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1328869 (0x1446e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
        Validity
            Not Before: Oct  7 18:13:07 2023 GMT
            Not After : Oct  8 18:13:07 2025 GMT
        Subject: CN=25d5a10dd22dd53df5878920b73999dd8030f8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0d:58:e2:b8:7e:17:36:70:f2:bf:44:42:e3:
                    45:86:55:82:80:a5:b4:42:a0:30:9a:f9:08:9b:07:
                    5e:c8:93:22:2a:70:7f:81:0e:7a:7c:c3:09:58:5e:
                    7c:4a:4b:d9:9b:28:fb:57:9b:fe:3b:f5:5b:83:9a:
                    e3:92:98:6a:a3:c0:fb:f4:02:62:bb:75:61:4f:05:
                    bb:6c:45:08:f0:3f:90:2f:ee:96:3d:d4:c8:ba:8a:
                    86:f9:be:79:99:90:07:12:69:21:8f:68:3c:f2:a0:
                    f9:79:ac:4c:45:a0:13:25:91:58:aa:6e:90:01:0e:
                    a9:11:2d:ed:2e:ff:62:73:04:7c:8a:c2:0f:08:6d:
                    2f:14:ba:af:dc:a0:3c:df:23:49:89:7c:ae:80:9d:
                    90:04:81:6c:06:ed:dc:20:4f:dd:43:14:f5:50:a4:
                    5b:39:b2:0b:39:e1:bc:8f:de:45:9d:0b:46:83:a8:
                    66:ff:ab:27:85:6f:5f:3e:89:38:26:c5:81:dd:b5:
                    7e:e6:41:22:9a:4e:2d:a4:1f:92:fa:eb:98:60:f0:
                    09:64:b0:5d:ac:2f:aa:e5:45:2f:27:ee:1e:6c:a4:
                    f1:c2:c0:88:60:d1:04:a3:5e:d9:91:22:2c:63:ad:
                    94:92:28:8c:72:96:24:8b:1b:2e:f2:0e:58:9c:11:
                    50:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FB:91:15:67:23:F0:2D:8A:2F:58:CE:CC:CB:C0:1A:89:3C:B8:F3
            X509v3 Authority Key Identifier:
                keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/25d5a10dd22dd53df5878920b73999dd8030f8f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:71:0b:c5:6a:6a:31:44:93:b2:4a:9c:3d:18:11:19:b3:82:
         72:c9:97:c6:0e:9a:f6:8b:49:c4:55:00:63:91:47:93:e8:bf:
         47:94:76:01:e3:a3:01:ad:c4:12:d6:e7:4b:b4:1a:52:1b:ce:
         93:04:4e:10:87:b0:70:70:13:6e:6d:82:c6:99:de:23:40:0d:
         39:88:d6:65:2f:c7:e6:49:eb:a9:e8:0d:37:ca:5b:c5:a2:6a:
         5a:06:be:c8:21:c6:25:6d:87:f7:f1:34:f2:4b:06:62:7e:f1:
         86:4f:66:80:cd:2c:87:d2:c4:21:1a:91:cd:7d:45:92:d6:bf:
         c4:81:67:e2:89:aa:c2:3d:49:79:42:21:25:8c:0d:8b:4f:f6:
         6d:1c:e2:9c:41:51:ed:39:ef:e2:27:15:75:f6:1a:4f:49:2d:
         c0:03:48:7b:f5:b6:92:4c:81:8d:9d:b4:81:5e:fc:a2:35:1f:
         66:41:4f:69:2c:54:52:16:c6:9b:d2:bf:3d:9a:97:55:9e:61:
         9c:78:27:15:24:4b:c3:95:5d:63:0e:31:9e:c6:a0:3d:ca:28:
         69:a9:8b:25:d6:31:e9:7f:ae:c6:64:77:97:96:03:5a:ce:29:
         66:c1:11:ba:64:4b:92:90:d8:5b:4a:97:0d:22:a8:4b:43:c5:
         f1:15:c9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 11:48:12 2023 by rpki-client on console-fra.rpki-client.org