Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/4b359a19435c6b2ad8d73e16dc587c888cb51e8c.roa
File:                     4b359a19435c6b2ad8d73e16dc587c888cb51e8c.roa (raw, json)
Hash identifier:          NEeZ57vDm7jV7L3e5tE57tragilnY7ckGqjDNrQPi4w=
Subject key identifier:   F9:39:D6:9B:DE:4B:D2:DA:75:B9:ED:75:EE:58:BC:06:FA:2C:4F:EE
Certificate issuer:       /CN=3070426b746ffaf94407f39e1e550bba97179b09
Certificate serial:       09A1E0
Authority key identifier: 4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/4b359a19435c6b2ad8d73e16dc587c888cb51e8c.roa
Signing time:             Tue 26 Oct 2021 06:42:07 +0000
ROA not before:           Tue 26 Oct 2021 02:00:00 +0000
ROA not after:            Mon 26 Oct 2026 02:00:00 +0000
asID:                     265540
IP address blocks:        200.63.40.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631264 (0x9a1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3070426b746ffaf94407f39e1e550bba97179b09
        Validity
            Not Before: Oct 26 02:00:00 2021 GMT
            Not After : Oct 26 02:00:00 2026 GMT
        Subject: CN=4b359a19435c6b2ad8d73e16dc587c888cb51e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:01:47:a0:fb:bf:f7:09:9c:65:49:4f:10:
                    53:d0:62:72:aa:bf:2e:97:76:8b:c9:11:35:f1:9c:
                    ed:0b:4c:21:c5:ad:8b:bb:19:93:53:94:6e:2f:70:
                    66:66:21:f4:9b:51:c0:fb:4a:b9:69:ea:39:41:d4:
                    5f:05:44:50:2f:39:0e:30:6e:9a:be:81:8f:f7:e7:
                    87:58:fc:3e:49:60:09:a1:29:af:27:ad:54:eb:6b:
                    99:70:82:7d:65:be:e3:64:6c:f8:65:e1:e8:9e:c2:
                    79:f3:5d:e3:13:b4:ac:a8:05:6e:cf:62:97:df:e0:
                    17:29:94:93:18:5c:60:f2:4f:6c:7a:2c:81:31:4f:
                    46:05:f7:d2:60:46:e5:09:d7:10:49:1b:a1:9d:7e:
                    a1:d0:0d:bd:28:ac:f0:48:ca:74:22:0b:40:ac:4e:
                    20:57:4c:52:db:d8:a9:7b:a6:16:bd:79:2a:af:da:
                    fe:72:7f:85:59:dc:22:9a:0d:f6:fd:e9:83:22:f6:
                    a0:21:8d:cf:20:ec:85:4e:9e:30:a7:04:6c:0d:fe:
                    ac:ba:f9:1d:fc:07:b6:e1:8e:9f:71:4a:b8:5d:4c:
                    86:3c:49:5e:1b:a4:75:b4:80:16:58:22:8d:85:c5:
                    7e:f0:69:f2:a6:4b:ce:56:9a:d7:61:bf:65:dd:5f:
                    d3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:39:D6:9B:DE:4B:D2:DA:75:B9:ED:75:EE:58:BC:06:FA:2C:4F:EE
            X509v3 Authority Key Identifier:
                keyid:4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/4b359a19435c6b2ad8d73e16dc587c888cb51e8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/3070426b746ffaf94407f39e1e550bba97179b09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:d8:20:87:26:88:e2:a9:b3:ea:37:2a:a5:f2:5f:08:c4:91:
         81:84:c7:e0:a4:6d:1b:d0:09:20:fe:62:95:91:78:88:97:4c:
         9c:5f:08:d6:53:72:7b:bb:a2:64:4b:e6:65:44:37:e4:84:9f:
         f2:bb:f7:39:94:85:b7:ab:ae:f1:1c:35:d6:d4:42:fd:7d:6c:
         2d:ae:bc:d3:ed:b3:cd:f9:d0:a0:8e:5b:a3:45:2b:cd:a2:10:
         9c:d4:7c:bd:43:3a:4b:e3:b2:66:6a:b2:f2:f7:07:00:42:0f:
         3a:46:f2:21:8e:8f:1f:44:e8:b0:09:76:18:8e:6c:11:d1:8c:
         98:de:cb:c7:49:f5:c8:70:15:21:bf:2a:a5:f3:ce:97:7d:09:
         3b:0c:9c:b9:3f:c6:ec:58:76:58:15:5d:77:6c:67:7f:7f:17:
         82:24:0a:da:f5:0a:7c:67:9e:14:84:b3:07:fd:f6:18:be:08:
         a1:41:d9:89:3d:33:88:0b:ba:c3:a0:26:74:2e:40:c6:e2:b1:
         39:3e:ff:e3:94:12:12:1a:93:d6:eb:f9:3e:f7:5f:3f:b3:a1:
         40:12:85:83:db:6c:c1:d0:1e:50:30:81:3c:8d:df:c2:15:91:
         c0:ee:a1:0f:09:18:a0:e4:17:73:cf:6f:0e:db:ed:a9:dd:8c:
         a8:50:1c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 16:52:43 2023 by rpki-client on console-ams.rpki-client.org