Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3230f63-4700-49a1-8ecb-c2fbfa2d5851/9960d901cab4bd3f2cce1f05c6aa4008e23cac08.roa
File:                     9960d901cab4bd3f2cce1f05c6aa4008e23cac08.roa (raw, json)
Hash identifier:          wvHFttto8P64XHhg7gztp6rYYkiFIlEftS3tM7mhA1A=
Subject key identifier:   85:E9:49:F2:7F:F7:96:F8:A4:A7:77:D5:98:89:33:21:B4:FA:04:CB
Certificate issuer:       /CN=274527f767243632b3f0f11b242c3ed620970435
Certificate serial:       08974C
Authority key identifier: 58:75:28:27:E2:57:18:BB:FD:5E:05:F9:1F:48:E0:B6:BF:DE:43:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/274527f767243632b3f0f11b242c3ed620970435.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3230f63-4700-49a1-8ecb-c2fbfa2d5851/9960d901cab4bd3f2cce1f05c6aa4008e23cac08.roa
Signing time:             Sat 16 Jul 2022 15:49:06 +0000
ROA not before:           Sat 16 Jul 2022 03:00:00 +0000
ROA not after:            Tue 16 Jul 2024 03:00:00 +0000
asID:                     269909
IP address blocks:        187.62.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563020 (0x8974c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274527f767243632b3f0f11b242c3ed620970435
        Validity
            Not Before: Jul 16 03:00:00 2022 GMT
            Not After : Jul 16 03:00:00 2024 GMT
        Subject: CN=9960d901cab4bd3f2cce1f05c6aa4008e23cac08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:00:70:e3:36:5d:c3:7f:1b:d4:d7:be:72:
                    ae:7c:a2:e1:ab:56:28:23:ac:d9:90:5b:7d:27:b6:
                    18:3f:78:5a:d2:68:61:4e:2d:22:69:d1:15:c9:ef:
                    87:b2:73:5c:ff:c5:f1:bb:2c:4c:0a:cc:32:d2:c5:
                    62:19:4b:4b:4c:b2:99:26:ce:46:80:79:79:a8:de:
                    b3:18:79:ba:7d:b5:1a:92:cc:e9:15:e6:5a:db:aa:
                    58:c8:2a:c1:0a:b9:20:94:43:db:6d:e2:e7:ae:eb:
                    0c:09:b7:88:b2:66:d8:50:cb:52:3f:78:c4:f0:df:
                    10:18:f2:47:92:75:d9:c1:11:97:22:d6:13:a9:57:
                    e0:14:5e:f7:57:21:c9:83:1b:38:72:93:c9:0f:d5:
                    2a:04:56:1c:79:25:d6:86:6b:13:a7:44:ac:23:5a:
                    9d:ed:b5:e0:d7:51:55:5c:b3:f5:99:ee:cc:0a:ee:
                    31:36:45:80:05:12:c7:85:2f:2a:ce:2d:1e:48:c8:
                    c2:45:35:cc:01:22:00:47:49:99:a4:ab:76:b5:e7:
                    4a:f7:1c:55:29:db:0d:0b:0b:97:14:b2:85:f4:e2:
                    2b:d2:2d:26:50:46:9b:36:85:d4:f5:ce:db:9b:14:
                    a7:65:35:3b:33:ad:9b:10:06:28:4b:fb:bb:30:48:
                    de:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E9:49:F2:7F:F7:96:F8:A4:A7:77:D5:98:89:33:21:B4:FA:04:CB
            X509v3 Authority Key Identifier:
                keyid:58:75:28:27:E2:57:18:BB:FD:5E:05:F9:1F:48:E0:B6:BF:DE:43:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/274527f767243632b3f0f11b242c3ed620970435.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3230f63-4700-49a1-8ecb-c2fbfa2d5851/9960d901cab4bd3f2cce1f05c6aa4008e23cac08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3230f63-4700-49a1-8ecb-c2fbfa2d5851/274527f767243632b3f0f11b242c3ed620970435.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:88:d7:c6:31:58:45:14:1f:50:ef:30:67:58:b8:ed:d4:a5:
         30:9a:b7:f7:85:98:48:27:65:a2:29:16:b2:1b:40:d9:e3:e4:
         7b:75:e7:57:bd:bc:9b:f6:3f:b2:a0:bb:a0:cc:e5:7a:34:14:
         41:ed:9c:d9:bf:9d:19:f5:be:7c:e0:69:91:e5:1e:62:5d:2c:
         29:dc:cd:a2:2a:de:e8:08:2d:5f:2c:10:59:67:d4:83:35:fd:
         6e:cd:96:ba:55:b1:5f:60:ac:99:4f:db:94:10:49:ba:f6:80:
         81:8c:71:14:9c:7b:e1:82:cd:1c:4f:b1:d9:18:99:a7:ba:4b:
         37:ac:2b:f6:8b:1b:42:f9:88:19:4f:8a:73:ad:92:92:31:62:
         22:97:76:ac:5a:9f:91:b5:02:24:e6:bb:2c:88:9b:bc:48:c7:
         bb:a3:0f:d7:92:82:3e:cc:ed:37:26:36:06:5d:4f:bc:c6:5e:
         00:8d:b2:11:a6:21:5c:e9:3c:47:3a:c9:fd:e1:72:60:c6:01:
         2f:d1:bb:38:05:3b:3c:53:24:53:88:be:a4:e2:ce:fb:1a:28:
         92:c7:97:f1:0a:78:4f:34:bc:82:d8:cd:23:47:38:bb:28:71:
         f5:9e:da:91:ca:88:db:d1:ac:8b:29:d0:8e:03:f0:c7:72:26:
         80:1f:90:e1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCJdMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI3
NDUyN2Y3NjcyNDM2MzJiM2YwZjExYjI0MmMzZWQ2MjA5NzA0MzUwHhcNMjIwNzE2
MDMwMDAwWhcNMjQwNzE2MDMwMDAwWjAzMTEwLwYDVQQDEyg5OTYwZDkwMWNhYjRi
ZDNmMmNjZTFmMDVjNmFhNDAwOGUyM2NhYzA4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArrEAcOM2XcN/G9TXvnKufKLhq1YoI6zZkFt9J7YYP3ha0mhh
Ti0iadEVye+HsnNc/8XxuyxMCswy0sViGUtLTLKZJs5GgHl5qN6zGHm6fbUakszp
FeZa26pYyCrBCrkglEPbbeLnrusMCbeIsmbYUMtSP3jE8N8QGPJHknXZwRGXItYT
qVfgFF73VyHJgxs4cpPJD9UqBFYceSXWhmsTp0SsI1qd7bXg11FVXLP1me7MCu4x
NkWABRLHhS8qzi0eSMjCRTXMASIAR0mZpKt2tedK9xxVKdsNCwuXFLKF9OIr0i0m
UEabNoXU9c7bmxSnZTU7M62bEAYoS/u7MEjexwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIXpSfJ/95b4pKd31ZiJMyG0+gTLMB8GA1UdIwQYMBaAFFh1KCfiVxi7/V4F
+R9I4La/3kNzMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjc0NTI3
Zjc2NzI0MzYzMmIzZjBmMTFiMjQyYzNlZDYyMDk3MDQzNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTMyMzBmNjMtNDcwMC00OWExLThlY2ItYzJmYmZh
MmQ1ODUxLzk5NjBkOTAxY2FiNGJkM2YyY2NlMWYwNWM2YWE0MDA4ZTIzY2FjMDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMzIzMGY2My00NzAwLTQ5YTEtOGVjYi1jMmZi
ZmEyZDU4NTEvMjc0NTI3Zjc2NzI0MzYzMmIzZjBmMTFiMjQyYzNlZDYyMDk3MDQz
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALs+XzANBgkqhkiG9w0BAQsFAAOCAQEANIjXxjFYRRQfUO8w
Z1i47dSlMJq394WYSCdloikWshtA2ePke3XnV728m/Y/sqC7oMzlejQUQe2c2b+d
GfW+fOBpkeUeYl0sKdzNoire6AgtXywQWWfUgzX9bs2WulWxX2CsmU/blBBJuvaA
gYxxFJx74YLNHE+x2RiZp7pLN6wr9osbQvmIGU+Kc62SkjFiIpd2rFqfkbUCJOa7
LIibvEjHu6MP15KCPsztNyY2Bl1PvMZeAI2yEaYhXOk8RzrJ/eFyYMYBL9G7OAU7
PFMkU4i+pOLO+xookseX8Qp4TzS8gtjNI0c4uyhx9Z7akcqI29GsiynQjgPwx3Im
gB+Q4Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org