Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/ae4f6283ff43e74de9ac4de4fdbe7240d4e03f3e.roa
File:                     ae4f6283ff43e74de9ac4de4fdbe7240d4e03f3e.roa (raw, json)
Hash identifier:          RerA0SGi1CsjCT2kK6Ssc81svjbeHVo4gS2lWZbq618=
Subject key identifier:   1A:18:A3:17:D1:37:E3:A1:AF:E7:FE:1E:00:A7:78:47:D7:3A:64:EF
Certificate issuer:       /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial:       17F639
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/ae4f6283ff43e74de9ac4de4fdbe7240d4e03f3e.roa
Signing time:             Tue 07 Jun 2022 20:03:36 +0000
ROA not before:           Tue 07 Jun 2022 03:00:00 +0000
ROA not after:            Fri 07 Jun 2024 03:00:00 +0000
asID:                     198949
IP address blocks:        200.91.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1570361 (0x17f639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
        Validity
            Not Before: Jun  7 03:00:00 2022 GMT
            Not After : Jun  7 03:00:00 2024 GMT
        Subject: CN=ae4f6283ff43e74de9ac4de4fdbe7240d4e03f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b0:07:5a:c1:8b:ee:8a:f3:62:8e:61:50:87:
                    18:c9:48:4b:15:08:93:bc:0b:7e:66:04:9b:64:08:
                    ca:e4:67:24:d1:1c:89:fb:ac:63:49:8b:64:97:bd:
                    0c:71:7c:3e:e6:79:88:90:52:07:8c:e2:83:c5:e3:
                    33:ba:12:ca:19:7b:71:aa:b6:2c:9e:4e:c1:49:40:
                    19:2e:7b:10:88:94:8c:b6:bb:39:4b:93:c2:b3:f6:
                    97:0f:d1:89:fc:73:9e:98:e4:58:04:d1:98:66:d7:
                    a9:29:a5:f4:17:5a:c3:6e:0f:2b:d7:72:82:1b:c1:
                    5d:40:33:1d:37:29:e6:8f:f5:dd:ea:c8:a0:66:86:
                    b6:76:d2:62:f9:d1:b5:2a:a8:0f:38:cb:eb:d0:cd:
                    6e:e9:0f:ae:36:3c:72:8d:47:e6:af:25:cc:c3:5e:
                    92:0e:aa:04:4e:0b:52:42:fb:3a:84:82:1b:cb:39:
                    03:94:32:a7:c1:39:d7:95:15:62:54:00:9e:86:06:
                    c4:7e:55:4f:70:39:9f:76:37:c8:dd:5f:ad:84:69:
                    46:2d:36:82:93:84:26:31:47:e2:9f:68:53:e9:9a:
                    90:b4:55:27:9e:50:39:bf:88:34:da:70:13:60:97:
                    dc:5e:20:c3:46:e3:9a:ac:05:f4:d2:4a:56:6f:8a:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:18:A3:17:D1:37:E3:A1:AF:E7:FE:1E:00:A7:78:47:D7:3A:64:EF
            X509v3 Authority Key Identifier:
                keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/ae4f6283ff43e74de9ac4de4fdbe7240d4e03f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ff:cf:85:d6:17:e4:8c:a0:b8:b1:7a:7b:3f:17:f2:2a:11:
         2e:d7:97:ec:3b:a6:53:bb:71:8e:3e:51:4d:cf:f7:df:74:3b:
         d2:fa:fd:4d:e7:16:1d:f4:96:6f:a1:36:8a:97:cf:e2:00:77:
         5f:54:cd:60:3c:9d:31:76:0e:dc:da:96:f1:08:7f:7a:31:27:
         df:27:c4:ab:8b:8d:b7:29:da:61:05:82:f0:76:33:cb:6d:f4:
         a3:1a:11:eb:8c:d5:4e:25:3a:01:da:a3:f3:e0:6c:ca:f8:16:
         b2:6b:22:c0:6a:70:fb:ad:df:75:15:12:4e:10:2d:3b:71:91:
         8e:34:b0:12:9d:93:be:90:1d:c2:35:32:db:88:07:2a:24:4e:
         48:f4:86:9b:86:96:b2:aa:5c:2f:a9:c3:19:b2:d9:0d:bb:7c:
         d8:16:7b:0b:a2:ff:63:d8:6e:55:79:89:f7:c7:d3:a1:7b:fd:
         a2:f0:7c:e2:7b:15:8e:2e:a9:cf:0d:77:61:82:4a:74:b9:5e:
         df:ab:9f:e5:7b:ec:66:89:84:f6:76:d6:ff:34:fe:ac:b8:2b:
         eb:2a:24:53:9b:98:6c:9a:db:f0:36:8c:ff:57:da:10:6d:8e:
         71:6f:ba:b8:59:12:86:c1:5a:8c:d4:49:a7:d5:13:e9:eb:31:
         70:b1:df:34
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDF/Y5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM3
YzE1ZmFmYTMwYmZjZDc5YmY5OTUxMjYyNTczMTU4ZDk4YTI3NWUwHhcNMjIwNjA3
MDMwMDAwWhcNMjQwNjA3MDMwMDAwWjAzMTEwLwYDVQQDEyhhZTRmNjI4M2ZmNDNl
NzRkZTlhYzRkZTRmZGJlNzI0MGQ0ZTAzZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxLAHWsGL7orzYo5hUIcYyUhLFQiTvAt+ZgSbZAjK5Gck0RyJ
+6xjSYtkl70McXw+5nmIkFIHjOKDxeMzuhLKGXtxqrYsnk7BSUAZLnsQiJSMtrs5
S5PCs/aXD9GJ/HOemORYBNGYZtepKaX0F1rDbg8r13KCG8FdQDMdNynmj/Xd6sig
Zoa2dtJi+dG1KqgPOMvr0M1u6Q+uNjxyjUfmryXMw16SDqoETgtSQvs6hIIbyzkD
lDKnwTnXlRViVACehgbEflVPcDmfdjfI3V+thGlGLTaCk4QmMUfin2hT6ZqQtFUn
nlA5v4g02nATYJfcXiDDRuOarAX00kpWb4oUXwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBoYoxfRN+Ohr+f+HgCneEfXOmTvMB8GA1UdIwQYMBaAFKGwewo8koNx/Cou
jrXotarzdPBHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzdjMTVm
YWZhMzBiZmNkNzliZjk5NTEyNjI1NzMxNThkOThhMjc1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmI2YTNhY2MtMmE0Yy00ZmJjLWEyYTYtOTUwZmQx
ZTI2NjdkL2FlNGY2MjgzZmY0M2U3NGRlOWFjNGRlNGZkYmU3MjQwZDRlMDNmM2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYjZhM2FjYy0yYTRjLTRmYmMtYTJhNi05NTBm
ZDFlMjY2N2QvYzdjMTVmYWZhMzBiZmNkNzliZjk5NTEyNjI1NzMxNThkOThhMjc1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhbnjANBgkqhkiG9w0BAQsFAAOCAQEAiv/PhdYX5IyguLF6
ez8X8ioRLteX7DumU7txjj5RTc/333Q70vr9TecWHfSWb6E2ipfP4gB3X1TNYDyd
MXYO3NqW8Qh/ejEn3yfEq4uNtynaYQWC8HYzy230oxoR64zVTiU6Adqj8+BsyvgW
smsiwGpw+63fdRUSThAtO3GRjjSwEp2TvpAdwjUy24gHKiROSPSGm4aWsqpcL6nD
GbLZDbt82BZ7C6L/Y9huVXmJ98fToXv9ovB84nsVji6pzw13YYJKdLle36uf5Xvs
ZomE9nbW/zT+rLgr6yokU5uYbJrb8DaM/1faEG2OcW+6uFkShsFajNRJp9UT6esx
cLHfNA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-fra.rpki-client.org