Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/f5750506279b3dc3f8be4c89aa34f4e577b2dff7.roa
File:                     f5750506279b3dc3f8be4c89aa34f4e577b2dff7.roa (raw, json)
Hash identifier:          BSRxPIGMheV8umhodO9QWtuwPkCTeQ0EV9PlBEEEnU0=
Subject key identifier:   1B:1A:77:EC:23:16:40:5C:D2:B7:BF:4C:B5:68:40:7C:02:FD:86:0A
Certificate issuer:       /CN=82de3982dc3fe10698e2213ddec20b8ab75df7bf
Certificate serial:       0D8EC7
Authority key identifier: AD:2C:98:FD:25:51:E2:8A:30:65:C7:48:5B:5F:46:44:46:B9:7F:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82de3982dc3fe10698e2213ddec20b8ab75df7bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/f5750506279b3dc3f8be4c89aa34f4e577b2dff7.roa
Signing time:             Wed 24 Mar 2021 14:40:37 +0000
ROA not before:           Wed 24 Mar 2021 14:40:36 +0000
ROA not after:            Tue 24 Mar 2026 14:40:36 +0000
asID:                     14522
IP address blocks:        181.175.0.0/16 maxlen: 24
                          186.66.0.0/17 maxlen: 24
                          186.66.128.0/17 maxlen: 24
                          186.68.0.0/15 maxlen: 24
                          186.70.0.0/15 maxlen: 24
                          190.10.128.0/18 maxlen: 24
                          190.10.192.0/18 maxlen: 24
                          190.154.0.0/17 maxlen: 24
                          190.154.128.0/17 maxlen: 24
                          190.155.0.0/17 maxlen: 24
                          190.155.128.0/17 maxlen: 24
                          200.25.128.0/19 maxlen: 24
                          200.25.160.0/19 maxlen: 24
                          200.63.192.0/19 maxlen: 24
                          200.63.224.0/20 maxlen: 24
                          200.63.240.0/20 maxlen: 24
                          200.69.160.0/20 maxlen: 24
                          200.69.176.0/20 maxlen: 24
                          201.217.64.0/19 maxlen: 24
                          201.217.96.0/19 maxlen: 24
                          2800:9a0::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888519 (0xd8ec7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82de3982dc3fe10698e2213ddec20b8ab75df7bf
        Validity
            Not Before: Mar 24 14:40:36 2021 GMT
            Not After : Mar 24 14:40:36 2026 GMT
        Subject: CN=f5750506279b3dc3f8be4c89aa34f4e577b2dff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d9:c9:84:3f:ac:13:55:5f:1b:19:d0:77:66:
                    56:ad:15:07:46:ab:f5:64:2d:60:c7:12:32:8f:b9:
                    58:47:37:4f:83:5d:c5:ca:bd:b4:65:6e:6c:70:fe:
                    17:a6:85:60:06:72:7e:ef:ec:5d:63:1e:7e:65:0a:
                    52:bf:cd:3a:42:83:27:85:e5:36:56:c3:a7:47:4b:
                    f0:0d:43:53:15:3a:3e:b8:49:58:b7:7c:57:06:40:
                    2c:5e:48:fe:81:2a:3d:06:cc:a3:d7:50:c2:ec:76:
                    7c:8e:da:0c:b0:45:80:8f:53:be:e7:0f:cc:18:c0:
                    10:72:bd:17:35:2d:22:9d:98:dc:e4:5f:7a:56:3a:
                    09:f5:fa:1f:69:d2:b0:36:8f:6c:b7:02:a4:ec:2e:
                    b8:60:a9:11:9e:19:f3:39:b8:c4:52:3d:65:15:7f:
                    45:61:ef:1f:1a:46:af:53:9b:de:6d:dd:0b:f3:53:
                    d3:2f:94:07:5f:db:f4:77:10:28:6b:82:8b:b5:23:
                    22:60:07:98:40:56:79:78:04:f2:56:02:78:c0:b3:
                    ad:b4:09:62:b5:0b:9c:07:27:07:fe:71:9e:23:32:
                    c3:35:4f:87:66:0c:14:2d:30:7e:30:53:00:c7:33:
                    2e:d7:67:3f:44:23:cd:7e:ec:8f:fc:ce:d6:a8:dd:
                    3f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1A:77:EC:23:16:40:5C:D2:B7:BF:4C:B5:68:40:7C:02:FD:86:0A
            X509v3 Authority Key Identifier:
                keyid:AD:2C:98:FD:25:51:E2:8A:30:65:C7:48:5B:5F:46:44:46:B9:7F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82de3982dc3fe10698e2213ddec20b8ab75df7bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/f5750506279b3dc3f8be4c89aa34f4e577b2dff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/82de3982dc3fe10698e2213ddec20b8ab75df7bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.175.0.0/16
                  186.66.0.0/16
                  186.68.0.0/14
                  190.10.128.0/17
                  190.154.0.0/15
                  200.25.128.0/18
                  200.63.192.0/18
                  200.69.160.0/19
                  201.217.64.0/18
                IPv6:
                  2800:9a0::/29

    Signature Algorithm: sha256WithRSAEncryption
         a3:80:85:75:5f:53:9b:76:4b:01:a5:1c:82:f9:00:d0:5a:82:
         f1:77:f1:0c:08:04:7c:9b:0b:6d:f8:c4:11:ab:a4:ba:57:36:
         02:3e:15:27:bf:91:44:dd:93:5c:d3:29:f7:94:36:5e:6a:44:
         92:c3:85:4f:4e:81:03:c9:a2:37:0e:77:40:53:bf:89:38:55:
         61:72:e2:30:ba:10:16:cc:83:d5:7d:87:46:de:e8:22:98:09:
         82:0c:a3:6f:75:13:2a:88:16:da:0b:af:85:b9:9c:b8:94:75:
         04:9a:8f:ee:10:cc:ec:bf:00:1a:80:e7:8e:c7:98:bc:e6:dd:
         fb:5e:0c:bf:54:86:fa:9a:1b:f0:c4:6a:03:8f:0e:cd:29:da:
         9d:65:c6:83:c9:3b:b5:ec:57:3d:2d:14:dc:bf:50:dd:2c:89:
         40:74:36:9e:e1:19:52:ad:84:d5:e4:e7:49:5e:be:70:b2:a8:
         4f:f4:92:a2:1e:66:a2:d1:52:93:93:63:c3:43:54:99:54:ac:
         cb:04:e4:ff:b4:c2:dd:85:87:88:03:3b:47:2c:9f:78:7d:29:
         94:88:e5:2f:4c:e9:f5:3c:03:dd:f4:a0:6d:da:1a:a6:5a:dc:
         ee:74:96:b9:98:51:1a:15:90:54:de:39:42:f8:68:9a:f6:40:
         76:42:21:f7
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIDDY7HMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgy
ZGUzOTgyZGMzZmUxMDY5OGUyMjEzZGRlYzIwYjhhYjc1ZGY3YmYwHhcNMjEwMzI0
MTQ0MDM2WhcNMjYwMzI0MTQ0MDM2WjAzMTEwLwYDVQQDEyhmNTc1MDUwNjI3OWIz
ZGMzZjhiZTRjODlhYTM0ZjRlNTc3YjJkZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl9nJhD+sE1VfGxnQd2ZWrRUHRqv1ZC1gxxIyj7lYRzdPg13F
yr20ZW5scP4XpoVgBnJ+7+xdYx5+ZQpSv806QoMnheU2VsOnR0vwDUNTFTo+uElY
t3xXBkAsXkj+gSo9Bsyj11DC7HZ8jtoMsEWAj1O+5w/MGMAQcr0XNS0inZjc5F96
VjoJ9fofadKwNo9stwKk7C64YKkRnhnzObjEUj1lFX9FYe8fGkavU5vebd0L81PT
L5QHX9v0dxAoa4KLtSMiYAeYQFZ5eATyVgJ4wLOttAlitQucBycH/nGeIzLDNU+H
ZgwULTB+MFMAxzMu12c/RCPNfuyP/M7WqN0/XwIDAQABo4ICljCCApIwHQYDVR0O
BBYEFBsad+wjFkBc0re/TLVoQHwC/YYKMB8GA1UdIwQYMBaAFK0smP0lUeKKMGXH
SFtfRkRGuX9+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODJkZTM5
ODJkYzNmZTEwNjk4ZTIyMTNkZGVjMjBiOGFiNzVkZjdiZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDM3ODkxZmUtZWVhMy00OGExLWE1MDEtMjU3YWFh
MThkNGJjL2Y1NzUwNTA2Mjc5YjNkYzNmOGJlNGM4OWFhMzRmNGU1NzdiMmRmZjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMzc4OTFmZS1lZWEzLTQ4YTEtYTUwMS0yNTdh
YWExOGQ0YmMvODJkZTM5ODJkYzNmZTEwNjk4ZTIyMTNkZGVjMjBiOGFiNzVkZjdi
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBggrBgEFBQcBBwEB/wRL
MEkwOAQCAAEwMgMDALWvAwMAukIDAwK6RAMEB74KgAMDAb6aAwQGyBmAAwQGyD/A
AwQFyEWgAwQGydlAMA0EAgACMAcDBQMoAAmgMA0GCSqGSIb3DQEBCwUAA4IBAQCj
gIV1X1ObdksBpRyC+QDQWoLxd/EMCAR8mwtt+MQRq6S6VzYCPhUnv5FE3ZNc0yn3
lDZeakSSw4VPToEDyaI3DndAU7+JOFVhcuIwuhAWzIPVfYdG3ugimAmCDKNvdRMq
iBbaC6+FuZy4lHUEmo/uEMzsvwAagOeOx5i85t37Xgy/VIb6mhvwxGoDjw7NKdqd
ZcaDyTu17Fc9LRTcv1DdLIlAdDae4RlSrYTV5OdJXr5wsqhP9JKiHmai0VKTk2PD
Q1SZVKzLBOT/tMLdhYeIAztHLJ94fSmUiOUvTOn1PAPd9KBt2hqmWtzudJa5mFEa
FZBU3jlC+Gia9kB2QiH3
-----END CERTIFICATE-----
Generated at Fri Aug 25 22:23:06 2023 by rpki-client on console-fra.rpki-client.org