Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/bd67e3718efcc07848a24b242b4ee93e7a4975ba.roa
File:                     bd67e3718efcc07848a24b242b4ee93e7a4975ba.roa (raw, json)
Hash identifier:          JYZLDrrOa/2Nn6QG5bD+P55iXkiAomyJM+R2zCBosLo=
Subject key identifier:   79:C4:BB:8F:F9:D8:5C:D3:8F:CF:35:39:DA:B5:91:A1:5B:E8:BD:9C
Certificate issuer:       /CN=3070426b746ffaf94407f39e1e550bba97179b09
Certificate serial:       099AC2
Authority key identifier: 4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/bd67e3718efcc07848a24b242b4ee93e7a4975ba.roa
Signing time:             Tue 26 Oct 2021 06:06:12 +0000
ROA not before:           Tue 26 Oct 2021 02:00:00 +0000
ROA not after:            Mon 26 Oct 2026 02:00:00 +0000
asID:                     265540
IP address blocks:        200.63.40.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629442 (0x99ac2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3070426b746ffaf94407f39e1e550bba97179b09
        Validity
            Not Before: Oct 26 02:00:00 2021 GMT
            Not After : Oct 26 02:00:00 2026 GMT
        Subject: CN=bd67e3718efcc07848a24b242b4ee93e7a4975ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:89:4d:d2:90:14:21:93:1e:a0:de:2f:cb:cd:
                    6b:4f:a9:c9:20:77:f6:de:2b:c3:94:56:62:33:9b:
                    0b:fa:72:b7:2f:26:d4:c4:3b:c0:5e:8e:4a:b5:00:
                    00:f7:cb:2a:9a:51:9d:a0:90:d2:e6:25:ca:1f:98:
                    6a:1a:91:96:fa:c0:38:67:1a:4f:67:e1:5b:c8:ba:
                    37:e5:9d:5a:2c:df:62:b6:48:c4:9a:94:86:d5:84:
                    cf:dd:1a:68:d1:ff:35:d9:ed:61:f6:da:17:f8:07:
                    d6:7b:d8:18:1b:97:a0:ce:ce:1f:23:14:0f:40:a1:
                    09:86:11:2f:3a:9a:14:e9:9a:1e:e2:77:a1:71:7c:
                    84:fb:bf:7d:1a:d8:84:89:58:e3:30:ca:b0:14:5e:
                    5e:08:cd:73:2a:f6:6f:e2:1e:08:4d:c6:d5:4c:74:
                    5c:ba:f4:41:81:c6:18:40:22:67:c1:2c:dd:1c:17:
                    fc:7e:13:f6:07:9d:95:27:a2:e4:01:11:86:3a:0a:
                    9d:5c:c8:4b:72:14:3d:b1:93:de:e0:fe:82:64:1d:
                    b1:30:e8:09:65:fd:80:7b:1f:cc:dd:82:b2:ed:29:
                    d3:e5:8b:34:fb:30:fa:ce:5a:c6:e2:5c:97:cd:c2:
                    05:e3:da:06:10:da:38:2e:64:11:2f:85:92:be:ad:
                    23:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C4:BB:8F:F9:D8:5C:D3:8F:CF:35:39:DA:B5:91:A1:5B:E8:BD:9C
            X509v3 Authority Key Identifier:
                keyid:4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/bd67e3718efcc07848a24b242b4ee93e7a4975ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/3070426b746ffaf94407f39e1e550bba97179b09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:d3:46:10:2c:1b:38:bf:de:73:cc:2a:77:39:f5:42:25:4c:
         8d:49:b1:bc:01:73:61:fa:5c:df:ae:20:a5:d3:a8:47:1f:23:
         99:e9:24:b1:62:b9:6e:54:a4:45:b2:d7:62:37:41:d5:86:e5:
         58:17:ea:c8:e6:cf:8e:20:a6:53:17:62:d5:9c:b9:54:32:87:
         e7:49:4b:6a:7d:9e:74:3e:b5:78:d1:c6:49:93:b0:8b:a3:d1:
         a0:5d:a5:4b:44:f3:57:f2:95:fc:8f:c6:91:af:18:da:74:fa:
         a4:cc:4c:b5:a6:e4:ce:2e:11:09:d5:b1:09:b4:0f:9b:a0:df:
         24:12:36:68:ca:b2:33:78:20:6d:9f:8d:ba:78:a6:4c:0c:9b:
         f1:84:8b:1e:c6:4c:e7:70:e9:54:c6:20:fc:21:74:4c:7b:79:
         a3:08:54:b5:c5:68:c0:ce:59:a3:8c:f1:9c:90:fe:0c:a7:f0:
         d7:33:01:50:e4:70:03:ef:73:8c:72:a7:7f:35:c0:f0:e0:7f:
         8a:f0:7b:e5:d0:4e:b6:08:1f:bd:12:13:5e:fb:23:23:76:f9:
         b8:98:f2:44:98:41:75:a9:bb:20:9d:c1:4d:ea:1e:da:10:e3:
         ea:f7:60:9b:ca:cd:e7:2d:21:ed:3a:92:98:65:b2:19:5e:f5:
         59:de:42:04
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCZrCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMw
NzA0MjZiNzQ2ZmZhZjk0NDA3ZjM5ZTFlNTUwYmJhOTcxNzliMDkwHhcNMjExMDI2
MDIwMDAwWhcNMjYxMDI2MDIwMDAwWjAzMTEwLwYDVQQDEyhiZDY3ZTM3MThlZmNj
MDc4NDhhMjRiMjQyYjRlZTkzZTdhNDk3NWJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjIlN0pAUIZMeoN4vy81rT6nJIHf23ivDlFZiM5sL+nK3LybU
xDvAXo5KtQAA98sqmlGdoJDS5iXKH5hqGpGW+sA4ZxpPZ+FbyLo35Z1aLN9itkjE
mpSG1YTP3Rpo0f812e1h9toX+AfWe9gYG5egzs4fIxQPQKEJhhEvOpoU6Zoe4neh
cXyE+799GtiEiVjjMMqwFF5eCM1zKvZv4h4ITcbVTHRcuvRBgcYYQCJnwSzdHBf8
fhP2B52VJ6LkARGGOgqdXMhLchQ9sZPe4P6CZB2xMOgJZf2Aex/M3YKy7SnT5Ys0
+zD6zlrG4lyXzcIF49oGENo4LmQRL4WSvq0jTQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHnEu4/52FzTj881Odq1kaFb6L2cMB8GA1UdIwQYMBaAFEsHlZsbu1/z9cR9
xmwzuTc7/O8nMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzA3MDQy
NmI3NDZmZmFmOTQ0MDdmMzllMWU1NTBiYmE5NzE3OWIwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzBlZGZiMjQtYmU4OS00ZTY3LWFlMDgtZGQ3ZWRj
NTY2NmVhL2JkNjdlMzcxOGVmY2MwNzg0OGEyNGIyNDJiNGVlOTNlN2E0OTc1YmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMGVkZmIyNC1iZTg5LTRlNjctYWUwOC1kZDdl
ZGM1NjY2ZWEvMzA3MDQyNmI3NDZmZmFmOTQ0MDdmMzllMWU1NTBiYmE5NzE3OWIw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8g/KDANBgkqhkiG9w0BAQsFAAOCAQEAlNNGECwbOL/ec8wq
dzn1QiVMjUmxvAFzYfpc364gpdOoRx8jmekksWK5blSkRbLXYjdB1YblWBfqyObP
jiCmUxdi1Zy5VDKH50lLan2edD61eNHGSZOwi6PRoF2lS0TzV/KV/I/Gka8Y2nT6
pMxMtabkzi4RCdWxCbQPm6DfJBI2aMqyM3ggbZ+NunimTAyb8YSLHsZM53DpVMYg
/CF0THt5owhUtcVowM5Zo4zxnJD+DKfw1zMBUORwA+9zjHKnfzXA8OB/ivB75dBO
tggfvRITXvsjI3b5uJjyRJhBdam7IJ3BTeoe2hDj6vdgm8rN5y0h7TqSmGWyGV71
Wd5CBA==
-----END CERTIFICATE-----
Generated at Fri Aug 18 16:48:52 2023 by rpki-client on console-fra.rpki-client.org