Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/5ed1d9abbbf51219174a5ec44da25dbc19d8653f.roa
File:                     5ed1d9abbbf51219174a5ec44da25dbc19d8653f.roa (raw, json)
Hash identifier:          tammXIjJnZFiIZGYsPdJMe+e+9rWaJw0/IuUNHJGZuc=
Subject key identifier:   B8:25:9E:4C:AA:CB:D3:C1:57:7B:6D:1B:0C:64:3E:06:A4:78:6A:3D
Certificate issuer:       /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial:       0D6C90
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/5ed1d9abbbf51219174a5ec44da25dbc19d8653f.roa
Signing time:             Wed 24 Mar 2021 14:37:27 +0000
ROA not before:           Wed 24 Mar 2021 14:37:27 +0000
ROA not after:            Tue 24 Mar 2026 14:37:27 +0000
asID:                     11830
IP address blocks:        181.193.0.0/16 maxlen: 24
                          181.194.0.0/15 maxlen: 24
                          200.91.64.0/18 maxlen: 24
                          200.91.128.0/18 maxlen: 24
                          201.191.0.0/16 maxlen: 24
                          201.192.0.0/12 maxlen: 24
                          201.237.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879760 (0xd6c90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
        Validity
            Not Before: Mar 24 14:37:27 2021 GMT
            Not After : Mar 24 14:37:27 2026 GMT
        Subject: CN=5ed1d9abbbf51219174a5ec44da25dbc19d8653f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:34:c6:48:27:81:c8:0e:02:e1:52:dc:ba:
                    b6:94:67:45:69:20:8a:15:cc:fa:5d:90:1d:8a:03:
                    ec:f7:40:21:a0:2a:a4:8a:9c:6e:24:9d:17:cf:a3:
                    8d:41:82:8f:7a:74:40:59:6d:82:e7:9d:05:fb:a0:
                    e9:8b:93:37:7d:26:7d:74:3e:fe:24:69:ec:e1:72:
                    7f:ae:10:9d:c6:10:93:9f:48:eb:b0:e4:7b:fb:11:
                    fe:3b:90:9f:f1:70:ba:4b:2b:84:7b:c4:9d:c5:34:
                    98:18:9f:e0:71:bc:ee:4e:ee:02:1b:69:09:31:76:
                    2c:08:38:7f:df:c1:f0:39:2c:3a:7c:90:a6:2e:50:
                    fd:fa:1b:51:fc:ce:1b:e4:cc:29:fc:9d:ae:e6:6d:
                    4e:13:ca:47:81:7c:05:52:5a:58:0b:68:30:24:6e:
                    8f:4c:b7:7f:ed:d0:79:e1:12:a6:b2:4c:46:ec:3e:
                    f8:6b:05:1a:bb:70:59:97:fb:09:f2:e3:f2:d3:f7:
                    4b:96:36:f8:d3:a5:a0:19:49:b2:13:1f:d0:0a:e9:
                    b5:d4:c9:ab:5b:87:4a:f6:69:aa:16:86:54:49:bf:
                    26:00:d8:99:98:ff:20:c4:d3:25:85:91:c9:a0:9d:
                    22:eb:b2:1f:98:50:be:da:08:84:08:74:69:1c:51:
                    5d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:25:9E:4C:AA:CB:D3:C1:57:7B:6D:1B:0C:64:3E:06:A4:78:6A:3D
            X509v3 Authority Key Identifier:
                keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/5ed1d9abbbf51219174a5ec44da25dbc19d8653f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.193.0.0-181.195.255.255
                  200.91.64.0-200.91.191.255
                  201.191.0.0-201.207.255.255
                  201.237.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9e:46:0d:55:2f:0e:70:92:ed:48:31:1f:74:81:89:21:23:7e:
         ee:00:dc:e7:6c:6a:aa:0b:e9:8d:a9:14:5e:e4:b7:a4:6b:8d:
         b5:1d:18:74:c9:c9:cc:ac:f9:9d:21:6b:ab:83:99:5e:4f:ff:
         2a:b5:5e:d5:0c:2b:79:ed:73:53:2b:1f:9b:f8:76:7e:7c:4f:
         f6:e3:19:59:34:9c:f5:d5:d4:3c:b1:29:8e:1a:14:17:eb:66:
         97:38:46:27:aa:6e:38:c9:ab:ad:0e:36:8b:ce:0a:a1:f1:cc:
         2e:d6:3e:82:86:8e:ca:ab:2f:ec:70:fc:6d:35:57:12:6d:28:
         95:3f:41:cc:c7:5f:a1:2d:a2:b1:61:ca:1b:9f:36:c1:84:e1:
         f1:bd:89:84:13:77:88:1d:68:56:c2:76:b3:bb:b2:21:98:c5:
         e3:ea:9f:c7:ec:cd:25:b4:4b:8e:79:ee:2b:7b:b4:d8:d5:f2:
         93:5a:a0:77:3b:a2:43:b9:e0:5a:0c:9d:41:85:d8:ed:18:50:
         59:19:20:88:37:1d:a0:17:17:5e:e0:65:13:68:3d:fe:d9:1a:
         b8:76:76:b7:af:09:7c:90:f1:99:e2:0e:11:bf:08:1d:37:6a:
         5c:04:56:27:f3:73:94:23:93:48:9e:34:a2:d1:65:45:7f:3b:
         fc:6a:e2:fa
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIDDWyQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM3
YzE1ZmFmYTMwYmZjZDc5YmY5OTUxMjYyNTczMTU4ZDk4YTI3NWUwHhcNMjEwMzI0
MTQzNzI3WhcNMjYwMzI0MTQzNzI3WjAzMTEwLwYDVQQDEyg1ZWQxZDlhYmJiZjUx
MjE5MTc0YTVlYzQ0ZGEyNWRiYzE5ZDg2NTNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApp40xkgngcgOAuFS3Lq2lGdFaSCKFcz6XZAdigPs90AhoCqk
ipxuJJ0Xz6ONQYKPenRAWW2C550F+6Dpi5M3fSZ9dD7+JGns4XJ/rhCdxhCTn0jr
sOR7+xH+O5Cf8XC6SyuEe8SdxTSYGJ/gcbzuTu4CG2kJMXYsCDh/38HwOSw6fJCm
LlD9+htR/M4b5Mwp/J2u5m1OE8pHgXwFUlpYC2gwJG6PTLd/7dB54RKmskxG7D74
awUau3BZl/sJ8uPy0/dLljb406WgGUmyEx/QCum11MmrW4dK9mmqFoZUSb8mANiZ
mP8gxNMlhZHJoJ0i67IfmFC+2giECHRpHFFdxQIDAQABo4ICgDCCAnwwHQYDVR0O
BBYEFLglnkyqy9PBV3ttGwxkPgakeGo9MB8GA1UdIwQYMBaAFKGwewo8koNx/Cou
jrXotarzdPBHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzdjMTVm
YWZhMzBiZmNkNzliZjk5NTEyNjI1NzMxNThkOThhMjc1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmI2YTNhY2MtMmE0Yy00ZmJjLWEyYTYtOTUwZmQx
ZTI2NjdkLzVlZDFkOWFiYmJmNTEyMTkxNzRhNWVjNDRkYTI1ZGJjMTlkODY1M2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYjZhM2FjYy0yYTRjLTRmYmMtYTJhNi05NTBm
ZDFlMjY2N2QvYzdjMTVmYWZhMzBiZmNkNzliZjk5NTEyNjI1NzMxNThkOThhMjc1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBEBggrBgEFBQcBBwEB/wQ1
MDMwMQQCAAEwKzAKAwMAtcEDAwK1wDAMAwQGyFtAAwQGyFuAMAoDAwDJvwMDBMnA
AwMAye0wDQYJKoZIhvcNAQELBQADggEBAJ5GDVUvDnCS7UgxH3SBiSEjfu4A3Ods
aqoL6Y2pFF7kt6RrjbUdGHTJycys+Z0ha6uDmV5P/yq1XtUMK3ntc1MrH5v4dn58
T/bjGVk0nPXV1DyxKY4aFBfrZpc4RieqbjjJq60ONovOCqHxzC7WPoKGjsqrL+xw
/G01VxJtKJU/QczHX6EtorFhyhufNsGE4fG9iYQTd4gdaFbCdrO7siGYxePqn8fs
zSW0S4557it7tNjV8pNaoHc7okO54FoMnUGF2O0YUFkZIIg3HaAXF17gZRNoPf7Z
Grh2drevCXyQ8ZniDhG/CB03alwEVifzc5Qjk0ieNKLRZUV/O/xq4vo=
-----END CERTIFICATE-----
Generated at Thu Sep 14 20:57:43 2023 by rpki-client on console-fra.rpki-client.org