Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/3eebd9bd1fac67853040f6346233ecdb1ab162e8.roa
File:                     3eebd9bd1fac67853040f6346233ecdb1ab162e8.roa (raw, json)
Hash identifier:          AKTz39i6jl01mA6VKB+v3wA9fIz8UB8G09SMdxMZaVo=
Subject key identifier:   1D:9D:C4:A2:37:6E:D4:A7:38:5E:19:B4:76:5E:1E:47:94:9B:46:40
Certificate issuer:       /CN=a7526df002a574a7e96f1fd69133114135b1b5ee
Certificate serial:       0171
Authority key identifier: A6:56:B4:C3:93:21:23:14:A5:C4:B8:95:1B:73:4A:BC:70:A2:37:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7526df002a574a7e96f1fd69133114135b1b5ee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/3eebd9bd1fac67853040f6346233ecdb1ab162e8.roa
Signing time:             Tue 07 Sep 2021 12:48:12 +0000
ROA not before:           Tue 07 Sep 2021 03:00:00 +0000
ROA not after:            Thu 07 Sep 2023 03:00:00 +0000
asID:                     271973
IP address blocks:        201.222.43.0/24 maxlen: 24
                          2803:b810::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7526df002a574a7e96f1fd69133114135b1b5ee
        Validity
            Not Before: Sep  7 03:00:00 2021 GMT
            Not After : Sep  7 03:00:00 2023 GMT
        Subject: CN=3eebd9bd1fac67853040f6346233ecdb1ab162e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a3:0a:af:59:8c:4a:95:08:0a:fd:22:a7:85:
                    5c:4e:c1:2e:05:dc:0c:74:48:02:b1:d8:6a:47:89:
                    ce:f8:b4:5a:e8:9d:8f:94:6c:e8:61:87:36:cf:43:
                    5f:7b:7a:61:8f:3d:2e:7c:10:0e:50:3a:45:56:4d:
                    82:37:f5:eb:c3:bc:a0:97:7c:45:14:02:eb:b0:cf:
                    24:9d:18:9d:c2:0f:e1:32:6a:8b:ee:f7:37:db:20:
                    ee:7e:fa:ac:d7:99:3f:3a:52:ed:5b:a6:15:f2:19:
                    09:6a:09:76:b9:70:95:06:b8:22:ba:a7:bc:7b:33:
                    fb:74:35:23:03:85:0d:c0:7f:f9:8e:f7:38:af:12:
                    48:4c:a1:78:fc:10:83:6d:ca:c2:28:03:e3:73:ac:
                    12:7a:3f:da:81:4a:28:0b:13:1e:78:56:58:61:e1:
                    82:ce:19:82:4b:b5:c3:58:9d:b7:0c:eb:dd:b3:a2:
                    5e:8a:df:13:51:d9:6e:59:13:3f:bf:db:a7:f4:a3:
                    61:99:b4:83:99:d9:f2:bc:c1:de:ef:d0:a0:64:d0:
                    15:78:7c:56:8f:dc:97:ff:28:35:b2:50:83:98:4c:
                    b3:c8:7c:b2:80:7b:c9:6a:86:6e:bd:bc:02:79:2f:
                    a7:7d:78:ac:42:52:51:41:92:a5:d0:23:88:fd:33:
                    00:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9D:C4:A2:37:6E:D4:A7:38:5E:19:B4:76:5E:1E:47:94:9B:46:40
            X509v3 Authority Key Identifier:
                keyid:A6:56:B4:C3:93:21:23:14:A5:C4:B8:95:1B:73:4A:BC:70:A2:37:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7526df002a574a7e96f1fd69133114135b1b5ee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/3eebd9bd1fac67853040f6346233ecdb1ab162e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/a7526df002a574a7e96f1fd69133114135b1b5ee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.43.0/24
                IPv6:
                  2803:b810::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:3e:5e:09:6c:58:ee:a0:23:92:ea:0b:6d:10:5a:3e:00:11:
         54:cb:c9:aa:0f:7f:f9:b6:43:92:74:a9:0c:6f:00:c2:bd:4e:
         a1:1b:bf:09:a4:61:1c:cf:90:f0:f9:00:73:3e:a0:f4:01:4c:
         a5:d1:c6:bf:41:38:2d:73:be:97:d8:fd:fd:f4:ac:e0:37:4f:
         43:f7:84:a1:4b:dd:37:73:ad:dc:d4:9b:df:07:8a:31:03:3b:
         05:e3:1f:a4:98:ba:0f:44:54:7d:5f:12:25:aa:ad:36:73:cd:
         68:de:3f:6b:dd:29:22:28:0d:5a:27:a4:02:34:a3:03:57:5e:
         5e:ac:92:9b:a4:d5:ff:b3:ab:16:f9:ba:7e:f5:7f:6a:60:3c:
         37:e6:89:9c:59:30:37:dd:83:78:19:ea:48:99:14:1c:3a:ac:
         e9:76:49:7b:55:66:9f:cd:56:7e:a5:9d:54:1a:4f:e0:c3:ce:
         5b:81:3e:46:70:04:6d:7a:5f:e9:d4:00:f8:27:16:12:4f:e0:
         7d:12:77:8f:47:f2:1d:48:57:d9:76:9f:bd:04:af:32:36:03:
         d3:2e:c0:85:ec:1f:5c:4e:78:bc:73:ba:b9:d6:dd:cc:35:5d:
         35:a3:28:ce:61:69:6f:6b:46:3e:60:2a:e6:18:ce:5a:d8:7b:
         d8:61:2c:e6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYTc1
MjZkZjAwMmE1NzRhN2U5NmYxZmQ2OTEzMzExNDEzNWIxYjVlZTAeFw0yMTA5MDcw
MzAwMDBaFw0yMzA5MDcwMzAwMDBaMDMxMTAvBgNVBAMTKDNlZWJkOWJkMWZhYzY3
ODUzMDQwZjYzNDYyMzNlY2RiMWFiMTYyZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCKowqvWYxKlQgK/SKnhVxOwS4F3Ax0SAKx2GpHic74tFronY+U
bOhhhzbPQ197emGPPS58EA5QOkVWTYI39evDvKCXfEUUAuuwzySdGJ3CD+Eyaovu
9zfbIO5++qzXmT86Uu1bphXyGQlqCXa5cJUGuCK6p7x7M/t0NSMDhQ3Af/mO9ziv
EkhMoXj8EINtysIoA+NzrBJ6P9qBSigLEx54Vlhh4YLOGYJLtcNYnbcM692zol6K
3xNR2W5ZEz+/26f0o2GZtIOZ2fK8wd7v0KBk0BV4fFaP3Jf/KDWyUIOYTLPIfLKA
e8lqhm69vAJ5L6d9eKxCUlFBkqXQI4j9MwBXAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUHZ3Eojdu1Kc4Xhm0dl4eR5SbRkAwHwYDVR0jBBgwFoAUpla0w5MhIxSlxLiV
G3NKvHCiNyYwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9hNzUyNmRm
MDAyYTU3NGE3ZTk2ZjFmZDY5MTMzMTE0MTM1YjFiNWVlLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9jYzQ5OTZhOC03Njc3LTRjMWMtYjMxMy0wMTFmMjU3
NjRmYTUvM2VlYmQ5YmQxZmFjNjc4NTMwNDBmNjM0NjIzM2VjZGIxYWIxNjJlOC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2NjNDk5NmE4LTc2NzctNGMxYy1iMzEzLTAxMWYy
NTc2NGZhNS9hNzUyNmRmMDAyYTU3NGE3ZTk2ZjFmZDY5MTMzMTE0MTM1YjFiNWVl
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQAyd4rMA0EAgACMAcDBQAoA7gQMA0GCSqGSIb3DQEBCwUAA4IB
AQA0Pl4JbFjuoCOS6gttEFo+ABFUy8mqD3/5tkOSdKkMbwDCvU6hG78JpGEcz5Dw
+QBzPqD0AUyl0ca/QTgtc76X2P399KzgN09D94ShS903c63c1JvfB4oxAzsF4x+k
mLoPRFR9XxIlqq02c81o3j9r3SkiKA1aJ6QCNKMDV15erJKbpNX/s6sW+bp+9X9q
YDw35omcWTA33YN4GepImRQcOqzpdkl7VWafzVZ+pZ1UGk/gw85bgT5GcARtel/p
1AD4JxYST+B9EnePR/IdSFfZdp+9BK8yNgPTLsCF7B9cTni8c7q51t3MNV01oyjO
YWlva0Y+YCrmGM5a2HvYYSzm
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-fra.rpki-client.org