Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/ecf58f001a23d9fa43bd77766e5b2859bff6a66a.roa
File:                     ecf58f001a23d9fa43bd77766e5b2859bff6a66a.roa (raw, json)
Hash identifier:          G18t06SKfbwns7xHUU8OTPvcAj1An29ZQAkVVFa7K2Q=
Subject key identifier:   B8:52:D2:68:4F:2E:D8:9C:9E:49:7C:80:F8:B3:C0:19:02:E5:D4:69
Certificate issuer:       /CN=ead29b83faed797d3bc08fb554018f7693cf4391
Certificate serial:       02F7
Authority key identifier: 0F:3D:8B:4D:45:D9:21:4A:E8:7D:88:E1:84:55:53:02:7A:05:64:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ead29b83faed797d3bc08fb554018f7693cf4391.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/ecf58f001a23d9fa43bd77766e5b2859bff6a66a.roa
Signing time:             Tue 02 Aug 2022 15:31:36 +0000
ROA not before:           Tue 02 Aug 2022 03:00:00 +0000
ROA not after:            Fri 02 Aug 2024 03:00:00 +0000
asID:                     10964
IP address blocks:        200.31.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759 (0x2f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead29b83faed797d3bc08fb554018f7693cf4391
        Validity
            Not Before: Aug  2 03:00:00 2022 GMT
            Not After : Aug  2 03:00:00 2024 GMT
        Subject: CN=ecf58f001a23d9fa43bd77766e5b2859bff6a66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:94:b3:fd:a4:01:c0:43:a9:c0:19:64:cf:
                    28:30:59:dc:08:c3:b6:ec:d0:52:b1:ec:ca:a7:6e:
                    80:23:df:ab:f3:6d:de:36:03:a6:08:2c:b6:29:9f:
                    f2:dc:44:1e:43:cc:75:cd:f5:73:d0:da:ec:99:ff:
                    d1:62:38:7f:c0:f2:3b:33:3b:e0:88:b5:04:4f:42:
                    17:d6:05:ec:e2:8b:b3:26:cf:41:1a:91:e8:c9:7a:
                    71:39:c6:07:29:8a:f7:77:4b:c8:ac:73:3b:ec:3e:
                    80:54:6e:6a:07:8e:fa:a4:f3:e8:b7:01:cd:c2:51:
                    c3:04:3c:95:74:0a:3a:c7:51:68:0e:3c:d5:b2:97:
                    ed:89:0b:5e:f7:14:69:1e:6b:65:78:13:68:fe:6d:
                    38:a5:b7:b0:1a:d8:5b:46:56:e4:e2:14:41:3e:1d:
                    00:8e:39:0b:96:e1:04:09:74:99:2b:5c:cb:52:2c:
                    ad:dd:44:f4:99:f8:55:8c:74:1b:96:e8:70:06:69:
                    af:91:a0:90:0f:c2:bc:09:c2:8a:89:4c:64:d9:9e:
                    4d:83:be:a9:17:c0:c7:31:5f:33:56:b6:c8:b1:bb:
                    0f:14:75:15:92:50:2b:62:05:e9:ea:a6:40:88:68:
                    c4:02:09:d6:20:a1:3d:b6:d8:ee:4a:9e:a5:9a:d3:
                    7b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:52:D2:68:4F:2E:D8:9C:9E:49:7C:80:F8:B3:C0:19:02:E5:D4:69
            X509v3 Authority Key Identifier:
                keyid:0F:3D:8B:4D:45:D9:21:4A:E8:7D:88:E1:84:55:53:02:7A:05:64:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ead29b83faed797d3bc08fb554018f7693cf4391.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/ecf58f001a23d9fa43bd77766e5b2859bff6a66a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/ead29b83faed797d3bc08fb554018f7693cf4391.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:70:41:ba:03:ba:07:53:3c:bc:ff:c6:66:78:e3:0e:e3:1f:
         10:29:23:b0:ca:30:78:df:67:5a:87:ac:cb:31:27:e6:5c:dc:
         9c:f3:59:66:15:43:9b:66:c9:73:4a:45:50:b1:f9:3f:3b:3e:
         7a:fd:f4:16:26:50:f2:d7:3c:6c:ed:13:c1:82:a6:ae:3c:77:
         89:7d:03:28:b1:d7:fa:a3:a6:f7:27:11:69:38:3a:8b:f2:2c:
         a3:a3:12:29:5d:be:dc:8b:13:32:22:af:ae:46:fc:26:af:a8:
         a7:77:0c:81:7a:61:62:f4:e7:ad:03:45:91:2a:62:12:05:e3:
         50:6b:1e:c8:50:ae:c4:50:5b:ee:5b:3f:1b:8a:a0:06:49:00:
         11:9b:25:db:c0:a1:ae:19:f9:50:e7:29:d9:c0:bc:4e:81:e7:
         df:fc:23:1b:f3:a8:d5:f9:cc:e5:61:b4:31:88:82:8a:e1:17:
         31:48:2e:0a:0a:ef:5f:0f:d9:12:83:87:99:55:02:64:e3:7f:
         2b:8a:56:60:9c:f3:99:1b:89:fa:8b:4e:c6:e5:32:d8:05:79:
         5d:43:21:87:d8:2a:42:91:3c:12:87:e8:4e:4e:ba:0a:a4:98:
         cb:70:2d:4a:d8:66:9e:79:98:04:f5:aa:92:95:c5:ef:0c:ee:
         43:44:77:9f
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAvcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZWFk
MjliODNmYWVkNzk3ZDNiYzA4ZmI1NTQwMThmNzY5M2NmNDM5MTAeFw0yMjA4MDIw
MzAwMDBaFw0yNDA4MDIwMzAwMDBaMDMxMTAvBgNVBAMTKGVjZjU4ZjAwMWEyM2Q5
ZmE0M2JkNzc3NjZlNWIyODU5YmZmNmE2NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxV5Sz/aQBwEOpwBlkzygwWdwIw7bs0FKx7MqnboAj36vzbd42
A6YILLYpn/LcRB5DzHXN9XPQ2uyZ/9FiOH/A8jszO+CItQRPQhfWBezii7Mmz0Ea
kejJenE5xgcpivd3S8isczvsPoBUbmoHjvqk8+i3Ac3CUcMEPJV0CjrHUWgOPNWy
l+2JC173FGkea2V4E2j+bTilt7Aa2FtGVuTiFEE+HQCOOQuW4QQJdJkrXMtSLK3d
RPSZ+FWMdBuW6HAGaa+RoJAPwrwJwoqJTGTZnk2DvqkXwMcxXzNWtsixuw8UdRWS
UCtiBenqpkCIaMQCCdYgoT222O5KnqWa03tZAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUuFLSaE8u2JyeSXyA+LPAGQLl1GkwHwYDVR0jBBgwFoAUDz2LTUXZIUrofYjh
hFVTAnoFZC0wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9lYWQyOWI4
M2ZhZWQ3OTdkM2JjMDhmYjU1NDAxOGY3NjkzY2Y0MzkxLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9kYTYwOTIxOC02YmJlLTRjMDYtYmQyOC00NjJkNzkz
YTg0ZmYvZWNmNThmMDAxYTIzZDlmYTQzYmQ3Nzc2NmU1YjI4NTliZmY2YTY2YS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2RhNjA5MjE4LTZiYmUtNGMwNi1iZDI4LTQ2MmQ3
OTNhODRmZi9lYWQyOWI4M2ZhZWQ3OTdkM2JjMDhmYjU1NDAxOGY3NjkzY2Y0Mzkx
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQEyB/gMA0GCSqGSIb3DQEBCwUAA4IBAQB8cEG6A7oHUzy8/8Zm
eOMO4x8QKSOwyjB432dah6zLMSfmXNyc81lmFUObZslzSkVQsfk/Oz56/fQWJlDy
1zxs7RPBgqauPHeJfQMosdf6o6b3JxFpODqL8iyjoxIpXb7cixMyIq+uRvwmr6in
dwyBemFi9OetA0WRKmISBeNQax7IUK7EUFvuWz8biqAGSQARmyXbwKGuGflQ5ynZ
wLxOgeff/CMb86jV+czlYbQxiIKK4RcxSC4KCu9fD9kSg4eZVQJk438rilZgnPOZ
G4n6i07G5TLYBXldQyGH2CpCkTwSh+hOTroKpJjLcC1K2GaeeZgE9aqSlcXvDO5D
RHef
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:55 2023 by rpki-client on console-ams.rpki-client.org