Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/2b2beae4561007a0b4a355c078b03fd6d4a136f6.roa
File:                     2b2beae4561007a0b4a355c078b03fd6d4a136f6.roa (raw, json)
Hash identifier:          OcpfSntybyG6xqFjvq+vUdO26G7a7MR6iK3nR5FxSlw=
Subject key identifier:   94:93:8A:8B:C9:82:B9:35:B2:67:76:EE:D4:82:56:45:47:19:4B:4F
Certificate issuer:       /CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
Certificate serial:       1FE1AB
Authority key identifier: FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/2b2beae4561007a0b4a355c078b03fd6d4a136f6.roa
Signing time:             Fri 24 Mar 2023 08:31:53 +0000
ROA not before:           Thu 23 Mar 2023 08:31:53 +0000
ROA not after:            Sat 22 Mar 2025 08:31:53 +0000
asID:                     10617
IP address blocks:        200.69.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2089387 (0x1fe1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
        Validity
            Not Before: Mar 23 08:31:53 2023 GMT
            Not After : Mar 22 08:31:53 2025 GMT
        Subject: CN=2b2beae4561007a0b4a355c078b03fd6d4a136f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:36:03:2d:71:75:56:33:b4:e4:e2:c8:ca:d2:
                    93:bd:e0:e5:99:9e:04:bc:c8:e2:26:46:d5:02:14:
                    31:8d:a2:98:71:0c:eb:e8:0d:51:fc:19:f6:8d:5d:
                    ac:15:0e:d4:46:07:b9:0f:fc:06:78:9b:be:6d:86:
                    76:bb:4c:de:f2:61:73:2a:52:bc:e2:3e:e3:d0:0a:
                    4a:75:45:6b:c7:b5:34:62:c1:93:31:28:71:cc:66:
                    af:13:63:3f:2b:d0:5f:a3:cb:75:ad:69:d8:6f:ae:
                    5f:91:e0:77:87:f7:a6:12:41:c1:31:20:df:6c:a9:
                    81:31:74:4c:01:96:09:be:cf:78:b7:5b:a4:d1:5f:
                    c9:84:49:bf:b4:81:4a:a5:28:dc:b3:b3:85:87:98:
                    4f:f0:6c:6c:2a:a1:f5:bc:a0:c9:f7:9d:df:21:dc:
                    32:96:85:32:85:d6:86:1b:f4:d9:b9:7a:3f:bc:ec:
                    da:d1:9a:1f:59:3d:d1:12:ca:ed:04:6f:29:ba:83:
                    ce:03:a7:f5:80:9e:5e:b1:0f:f6:94:df:78:22:13:
                    ce:ea:5c:89:54:2f:01:07:99:70:ad:6a:49:96:9c:
                    23:e5:55:71:81:b4:26:2b:38:83:a7:40:fd:ae:bb:
                    74:de:38:a0:fa:7f:54:62:8b:78:6f:8c:b0:3d:4b:
                    53:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:93:8A:8B:C9:82:B9:35:B2:67:76:EE:D4:82:56:45:47:19:4B:4F
            X509v3 Authority Key Identifier:
                keyid:FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/2b2beae4561007a0b4a355c078b03fd6d4a136f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:64:7a:91:43:6c:43:a5:65:ed:4c:29:49:db:89:c2:c6:d5:
         28:c7:20:62:2e:71:9c:7b:17:52:83:3c:3b:75:dd:ef:e5:91:
         e0:56:04:fa:4f:1e:83:ff:a7:2d:a8:56:62:15:0e:ca:d6:e6:
         d1:d9:2e:1c:e1:20:e3:a5:0f:8b:08:b0:55:cd:99:f2:32:ae:
         d5:4b:71:05:7d:91:3f:6a:fd:14:bc:20:f0:ea:28:92:80:3b:
         57:92:86:cd:22:47:01:06:55:4b:0b:14:c8:51:3f:4c:2c:81:
         50:d8:b2:ab:44:6a:23:90:15:32:21:1e:02:4a:65:d5:fa:18:
         1f:15:1c:ef:10:f7:97:bc:c3:15:2e:b3:04:e3:32:8f:08:82:
         f3:f4:31:a6:d2:bb:0f:f0:a2:21:e8:1c:39:57:bb:c1:de:58:
         58:a8:a8:68:58:ec:95:ad:f9:46:8e:0b:d3:fd:84:c8:24:52:
         d9:29:7c:d6:aa:5a:78:33:5d:33:c6:93:d0:f0:9e:f0:a9:1c:
         fa:04:77:6c:dd:a1:02:80:b1:7c:af:1d:b4:26:06:39:c9:57:
         18:1a:de:88:a8:4e:50:47:9f:65:fb:fe:80:66:c5:c2:26:5c:
         b7:d6:36:a9:bb:8c:24:47:4c:4d:d9:1b:53:66:68:8a:e5:b5:
         88:68:63:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 19:38:33 2023 by rpki-client on console-fra.rpki-client.org