Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/39de5a56b245a958e27a1f867a479ab310da1688.roa
File:                     39de5a56b245a958e27a1f867a479ab310da1688.roa (raw, json)
Hash identifier:          deEJSVl0ce2KHLddkA/kS/byZpM2+4lewRnLHN7cnok=
Subject key identifier:   FD:A9:10:48:64:9C:82:C5:FA:60:25:4E:9D:9C:54:85:51:15:FC:02
Certificate issuer:       /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial:       1304F5
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/39de5a56b245a958e27a1f867a479ab310da1688.roa
Signing time:             Wed 23 Aug 2023 16:38:03 +0000
ROA not before:           Tue 22 Aug 2023 16:38:03 +0000
ROA not after:            Sat 23 Aug 2025 16:38:03 +0000
asID:                     834
IP address blocks:        200.26.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1246453 (0x1304f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
        Validity
            Not Before: Aug 22 16:38:03 2023 GMT
            Not After : Aug 23 16:38:03 2025 GMT
        Subject: CN=39de5a56b245a958e27a1f867a479ab310da1688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c2:5d:2a:0d:aa:7b:5b:88:8a:63:57:1b:44:
                    9d:47:10:ae:99:b6:b0:ed:e9:28:4e:e1:fe:e3:56:
                    0b:d1:3f:72:6c:77:da:c8:7a:3d:70:26:ee:ec:a6:
                    2d:6e:65:a5:e2:a7:74:9b:a1:18:03:72:79:b0:ae:
                    42:b1:7b:ee:cd:dd:e4:b6:6b:e8:19:b7:0b:b6:78:
                    e7:4f:5e:62:98:50:2d:5b:63:ab:e5:38:58:1a:48:
                    96:32:75:df:39:46:e9:cf:18:50:52:2a:7a:a6:a0:
                    ba:ad:e6:e5:85:15:fb:21:53:cd:43:a9:f9:4f:35:
                    74:f8:5b:b2:14:76:8c:72:fa:c0:0d:7d:f5:5c:6b:
                    68:a4:72:5a:d8:57:ba:b5:fb:05:14:ff:02:56:6d:
                    8f:70:03:70:1d:d3:e6:39:68:b6:79:9c:7f:b3:4e:
                    2f:15:c3:42:7a:37:be:ba:17:18:57:98:83:70:8e:
                    ba:cc:2c:71:d6:81:89:1e:6e:ba:ed:9e:80:9b:7a:
                    39:78:d1:1a:6e:b7:77:10:b3:16:e1:21:64:61:83:
                    71:67:7e:c2:64:fd:85:36:6f:ef:75:2d:a6:80:9a:
                    38:12:cc:c4:89:fe:2f:71:64:35:9e:46:7d:fe:b6:
                    73:c3:70:18:7c:be:2d:d3:b1:f1:db:3b:8b:09:96:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A9:10:48:64:9C:82:C5:FA:60:25:4E:9D:9C:54:85:51:15:FC:02
            X509v3 Authority Key Identifier:
                keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/39de5a56b245a958e27a1f867a479ab310da1688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:08:00:5e:52:1a:38:ff:54:6f:43:de:87:a5:e2:29:45:37:
         26:65:2e:71:cf:ff:d5:b8:9e:4d:ff:be:6d:94:68:6b:9d:19:
         ec:26:e3:7e:a3:c4:ee:a2:ef:f4:e2:df:cb:16:81:4f:24:4c:
         d7:41:af:40:14:7e:57:62:94:6e:b6:b7:19:b5:6c:63:62:e9:
         cf:7b:31:5d:9f:6b:e3:76:5f:ac:2c:e1:d3:4c:88:e0:25:06:
         07:1a:f4:98:cf:1f:78:c7:bb:f9:f8:b5:e7:22:88:6d:3b:59:
         c9:1c:b6:87:ff:04:c5:3a:99:41:cf:89:06:5d:8e:d3:df:e9:
         a1:97:2b:2b:a2:d0:35:85:4f:a1:14:69:ae:3f:81:2c:d0:5d:
         93:16:10:c5:62:9f:8f:3c:0c:0b:4d:b2:4e:b7:25:19:74:c7:
         27:48:a2:d2:61:6d:94:c9:dc:68:2f:a6:cd:01:03:c9:e3:c2:
         80:e0:26:fd:80:e2:1b:52:45:3c:a8:d4:bc:16:7f:ed:55:dc:
         15:3c:9a:55:06:ee:09:d3:02:4c:ea:f2:c8:2b:87:85:b4:44:
         f2:cd:6b:6a:06:8c:20:77:63:a1:87:eb:e1:52:cc:bf:d4:8a:
         e7:d1:7d:3b:9f:9f:0b:c0:bf:7f:f8:a1:37:38:89:96:7e:bb:
         ca:c5:7b:4a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEwT1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ0
MDdjNzI1Mzc1MTlmMTE1NTNjN2VlOWViODNiYWEwNDIzMzQzODAwHhcNMjMwODIy
MTYzODAzWhcNMjUwODIzMTYzODAzWjAzMTEwLwYDVQQDEygzOWRlNWE1NmIyNDVh
OTU4ZTI3YTFmODY3YTQ3OWFiMzEwZGExNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzcJdKg2qe1uIimNXG0SdRxCumbaw7ekoTuH+41YL0T9ybHfa
yHo9cCbu7KYtbmWl4qd0m6EYA3J5sK5CsXvuzd3ktmvoGbcLtnjnT15imFAtW2Or
5ThYGkiWMnXfOUbpzxhQUip6pqC6reblhRX7IVPNQ6n5TzV0+FuyFHaMcvrADX31
XGtopHJa2Fe6tfsFFP8CVm2PcANwHdPmOWi2eZx/s04vFcNCeje+uhcYV5iDcI66
zCxx1oGJHm667Z6Am3o5eNEabrd3ELMW4SFkYYNxZ37CZP2FNm/vdS2mgJo4EszE
if4vcWQ1nkZ9/rZzw3AYfL4t07Hx2zuLCZZGJwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFP2pEEhknILF+mAlTp2cVIVRFfwCMB8GA1UdIwQYMBaAFES9j+Pv+NwHJZzf
vifQjIvl5UfbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDQwN2M3
MjUzNzUxOWYxMTU1M2M3ZWU5ZWI4M2JhYTA0MjMzNDM4MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjcxMjMwY2UtYTk1MC00YTBiLWI4Y2QtMGY0Y2Q4
ZWIzMjE5LzM5ZGU1YTU2YjI0NWE5NThlMjdhMWY4NjdhNDc5YWIzMTBkYTE2ODgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNzEyMzBjZS1hOTUwLTRhMGItYjhjZC0wZjRj
ZDhlYjMyMTkvZDQwN2M3MjUzNzUxOWYxMTU1M2M3ZWU5ZWI4M2JhYTA0MjMzNDM4
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgavDANBgkqhkiG9w0BAQsFAAOCAQEARwgAXlIaOP9Ub0Pe
h6XiKUU3JmUucc//1bieTf++bZRoa50Z7CbjfqPE7qLv9OLfyxaBTyRM10GvQBR+
V2KUbra3GbVsY2Lpz3sxXZ9r43ZfrCzh00yI4CUGBxr0mM8feMe7+fi15yKIbTtZ
yRy2h/8ExTqZQc+JBl2O09/poZcrK6LQNYVPoRRprj+BLNBdkxYQxWKfjzwMC02y
TrclGXTHJ0ii0mFtlMncaC+mzQEDyePCgOAm/YDiG1JFPKjUvBZ/7VXcFTyaVQbu
CdMCTOryyCuHhbRE8s1ragaMIHdjoYfr4VLMv9SK59F9O5+fC8C/f/ihNziJln67
ysV7Sg==
-----END CERTIFICATE-----
Generated at Mon Oct 23 12:00:46 2023 by rpki-client on console-fra.rpki-client.org