Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/edc9030e9b36a006774d6d08b26784afde55f382.roa
File:                     edc9030e9b36a006774d6d08b26784afde55f382.roa (raw, json)
Hash identifier:          MRTV36tqS2GJrCM/9OXGPkqOSKu7bxvdILMjE8Gj/FU=
Subject key identifier:   47:76:68:88:DA:00:16:6B:D8:8A:48:2C:25:5B:62:81:66:C0:7F:BD
Certificate issuer:       /CN=3070426b746ffaf94407f39e1e550bba97179b09
Certificate serial:       09A6E6
Authority key identifier: 4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/edc9030e9b36a006774d6d08b26784afde55f382.roa
Signing time:             Tue 26 Oct 2021 06:43:04 +0000
ROA not before:           Tue 26 Oct 2021 02:00:00 +0000
ROA not after:            Mon 26 Oct 2026 02:00:00 +0000
asID:                     265540
IP address blocks:        200.63.44.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632550 (0x9a6e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3070426b746ffaf94407f39e1e550bba97179b09
        Validity
            Not Before: Oct 26 02:00:00 2021 GMT
            Not After : Oct 26 02:00:00 2026 GMT
        Subject: CN=edc9030e9b36a006774d6d08b26784afde55f382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8f:5b:9c:89:2f:31:8f:29:3b:f8:21:63:f0:
                    bd:f1:2a:bd:b3:e9:6f:39:05:ac:ab:db:3b:41:2b:
                    af:c8:b1:04:4e:65:bc:60:26:22:68:6e:22:51:5d:
                    8c:4a:66:00:be:57:fe:d2:68:3c:db:d1:a4:14:36:
                    4d:58:c0:e5:b1:d2:1d:79:09:3d:ea:ac:a9:4b:d8:
                    4f:2b:cf:84:08:c9:fe:8f:e9:61:a2:d7:57:40:ea:
                    92:6f:24:1f:b5:57:02:dd:d0:45:40:25:9a:e5:74:
                    32:3e:12:cb:33:56:d9:c0:35:b6:05:2c:34:69:1f:
                    1b:c4:14:af:d1:5e:d4:53:be:36:36:63:b7:1f:17:
                    0c:15:30:39:4a:47:ef:c3:a0:76:d3:a3:9e:b5:0e:
                    a7:91:21:fe:4a:7e:0f:b0:e3:88:51:04:55:62:3e:
                    35:e0:23:b5:e6:49:75:b4:60:9a:dc:63:1f:ea:9a:
                    0e:98:35:6d:b9:63:b8:7d:80:a1:3f:e4:5d:d2:73:
                    2f:6b:b4:f8:9b:c4:e0:36:bd:47:c1:a0:3b:16:03:
                    86:2d:84:de:a1:07:1a:2e:a2:8d:3f:23:6e:47:4c:
                    cc:ad:c8:4b:c4:59:06:ee:e7:37:dd:3e:a0:93:f4:
                    2c:ac:37:7e:b9:f4:ff:ef:b6:45:70:cf:30:e7:9c:
                    69:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:76:68:88:DA:00:16:6B:D8:8A:48:2C:25:5B:62:81:66:C0:7F:BD
            X509v3 Authority Key Identifier:
                keyid:4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/edc9030e9b36a006774d6d08b26784afde55f382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/3070426b746ffaf94407f39e1e550bba97179b09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:75:eb:f1:d6:cf:50:a5:82:9d:d1:e6:c8:54:d9:9d:48:05:
         d3:c5:7f:0a:b9:f4:f7:29:01:44:c9:ca:d3:15:b5:fa:86:1d:
         cf:e3:60:dc:4d:b3:97:8f:42:c0:6f:4f:1a:2e:9c:00:71:17:
         59:4f:68:7b:7d:8d:d6:f9:e9:fb:24:7e:55:26:cc:0e:dc:53:
         32:f4:c4:4d:3d:06:ef:c1:92:5e:e8:10:dd:f5:57:a4:87:87:
         96:db:0f:88:e9:4e:93:f2:a6:29:b3:95:b6:47:03:88:62:46:
         a9:33:33:42:a5:5b:32:a8:dc:3c:1a:cb:fa:87:6e:9e:17:74:
         cc:b9:c6:f4:5f:ef:df:35:4c:a8:f1:5a:ab:84:57:f2:aa:13:
         43:5e:64:cc:81:ea:f9:5c:a7:20:a1:67:3e:16:34:9b:21:51:
         4d:94:d0:1a:76:60:63:6e:9f:4e:58:51:23:63:f3:49:80:62:
         6a:be:0c:1d:b3:a1:26:4b:67:17:83:cc:63:87:e5:65:a4:34:
         8d:d0:a0:46:19:85:e4:05:f3:e0:1c:cd:ad:bf:01:41:d1:b4:
         21:78:d0:fe:75:35:29:a2:07:c3:0c:c4:3b:79:ea:fa:96:cb:
         e6:51:e3:03:2e:10:a5:f6:3c:3f:06:4d:5a:05:9f:c2:00:94:
         89:50:f7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 16:52:43 2023 by rpki-client on console-ams.rpki-client.org