Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/0d8b4a129aa7d36b0c74cdeb77365a92b8cca3f8.roa
File:                     0d8b4a129aa7d36b0c74cdeb77365a92b8cca3f8.roa (raw, json)
Hash identifier:          L6Hf8DgAaEKGwZMnN0mmrm/cHagXDOgNHd1iV4pdUU4=
Subject key identifier:   57:B4:D3:C3:8D:1F:37:21:31:18:17:A6:46:D0:94:D1:49:76:E1:43
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       01FBE5
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/0d8b4a129aa7d36b0c74cdeb77365a92b8cca3f8.roa
Signing time:             Mon 29 Nov 2021 18:57:28 +0000
ROA not before:           Mon 29 Nov 2021 03:00:00 +0000
ROA not after:            Wed 29 Nov 2023 03:00:00 +0000
asID:                     27768
IP address blocks:        201.217.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130021 (0x1fbe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 29 03:00:00 2021 GMT
            Not After : Nov 29 03:00:00 2023 GMT
        Subject: CN=0d8b4a129aa7d36b0c74cdeb77365a92b8cca3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f9:65:3b:b2:b5:03:2a:39:af:95:4b:5f:65:
                    b8:0e:69:73:92:50:90:e0:69:17:69:0e:fd:25:3f:
                    8e:04:85:bd:70:ba:4d:f0:d3:7f:bd:63:30:18:4a:
                    8c:d1:ad:25:bd:1e:ba:3a:07:ec:b5:09:f9:52:e3:
                    4e:f8:3d:16:03:ac:96:23:df:1f:fd:35:c5:1a:33:
                    83:0c:78:8c:d1:5e:32:9f:05:c5:32:7f:7f:60:21:
                    41:ec:db:f6:09:44:b6:fb:33:c4:2b:71:88:cd:b1:
                    54:4a:a5:59:df:53:76:0d:ae:78:a4:6b:82:a0:f2:
                    59:cf:9f:06:18:0c:c2:b9:bf:08:b7:e5:ce:f6:4a:
                    e7:44:6e:3b:87:75:7e:52:cd:9d:e8:cc:9c:76:b4:
                    d3:11:53:01:f9:68:25:21:66:c8:49:51:37:9c:22:
                    bb:72:11:25:ff:f3:75:c0:c9:4c:c1:8e:92:72:f0:
                    e9:b4:c1:63:eb:63:44:22:ac:bc:49:46:96:5e:73:
                    4c:77:fd:34:07:a3:4c:7b:dd:c1:4a:ca:63:8f:93:
                    2d:86:1a:9e:ab:64:a4:59:5d:35:1f:af:09:71:d8:
                    aa:11:bf:78:dc:d6:5c:6b:05:c1:e7:90:c4:9a:0d:
                    ce:e7:f9:64:40:19:83:25:27:d1:96:86:91:8f:ef:
                    33:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B4:D3:C3:8D:1F:37:21:31:18:17:A6:46:D0:94:D1:49:76:E1:43
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/0d8b4a129aa7d36b0c74cdeb77365a92b8cca3f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:83:08:c1:0e:95:81:35:40:97:d2:2e:80:04:92:37:2a:d2:
         74:78:33:ea:ad:4c:32:35:d2:d1:4f:b3:fc:8c:3b:a8:69:ef:
         f0:f5:2e:a6:16:1c:53:61:b4:98:d2:54:12:50:25:a1:59:fe:
         13:1c:22:7d:09:af:ac:9e:16:17:d4:c5:cd:f7:1a:b0:90:05:
         3f:18:ea:15:36:50:61:26:da:04:56:89:4c:e5:82:f4:79:ad:
         fa:00:c9:36:ff:20:d5:bf:71:cd:f1:66:f6:6b:26:fa:dc:d9:
         f0:86:09:6c:93:b9:14:63:f6:d1:6a:5a:27:9f:ff:4f:e6:36:
         0a:81:4f:36:69:eb:d5:da:bb:1a:da:b0:a1:ea:7c:ba:61:f8:
         37:1f:c4:69:9f:2f:d1:ce:69:e1:fe:b9:a4:4d:6b:0a:04:f7:
         4b:7e:66:22:14:d6:d2:a4:4a:49:80:17:d1:3b:b6:31:16:1c:
         be:38:e9:8e:fd:d1:7c:9e:d8:00:94:0e:e0:3b:e5:1e:11:7c:
         a5:f5:55:be:da:20:ad:0c:d7:fd:4a:93:2c:bd:15:04:4e:a0:
         a1:06:63:da:1e:5a:cc:2d:ed:c3:39:1e:11:9b:10:53:68:22:
         7b:05:db:d7:6b:d4:5e:30:e4:2d:15:8e:e0:78:c1:9e:70:1c:
         3d:bb:db:8f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAfvlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
NjlmYjM4N2JlZmM5NmYwMTlkMDE0YzZlNTIzNGQwOTU1NTUzYTkwHhcNMjExMTI5
MDMwMDAwWhcNMjMxMTI5MDMwMDAwWjAzMTEwLwYDVQQDEygwZDhiNGExMjlhYTdk
MzZiMGM3NGNkZWI3NzM2NWE5MmI4Y2NhM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh/llO7K1Ayo5r5VLX2W4DmlzklCQ4GkXaQ79JT+OBIW9cLpN
8NN/vWMwGEqM0a0lvR66OgfstQn5UuNO+D0WA6yWI98f/TXFGjODDHiM0V4ynwXF
Mn9/YCFB7Nv2CUS2+zPEK3GIzbFUSqVZ31N2Da54pGuCoPJZz58GGAzCub8It+XO
9krnRG47h3V+Us2d6MycdrTTEVMB+WglIWbISVE3nCK7chEl//N1wMlMwY6ScvDp
tMFj62NEIqy8SUaWXnNMd/00B6NMe93BSspjj5Mthhqeq2SkWV01H68JcdiqEb94
3NZcawXB55DEmg3O5/lkQBmDJSfRloaRj+8znwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFe008ONHzchMRgXpkbQlNFJduFDMB8GA1UdIwQYMBaAFAyFBRRHaAvbICkP
JHQ1FbXmEmp/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTQ2OWZi
Mzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNhOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTRhZDY4ZTMtYTdmMC00ZDUxLTg2NTgtY2NmOWMy
NmQzZWE3LzBkOGI0YTEyOWFhN2QzNmIwYzc0Y2RlYjc3MzY1YTkyYjhjY2EzZjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNGFkNjhlMy1hN2YwLTRkNTEtODY1OC1jY2Y5
YzI2ZDNlYTcvOTQ2OWZiMzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNh
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnZMjANBgkqhkiG9w0BAQsFAAOCAQEAIYMIwQ6VgTVAl9Iu
gASSNyrSdHgz6q1MMjXS0U+z/Iw7qGnv8PUuphYcU2G0mNJUElAloVn+ExwifQmv
rJ4WF9TFzfcasJAFPxjqFTZQYSbaBFaJTOWC9Hmt+gDJNv8g1b9xzfFm9msm+tzZ
8IYJbJO5FGP20WpaJ5//T+Y2CoFPNmnr1dq7Gtqwoep8umH4Nx/EaZ8v0c5p4f65
pE1rCgT3S35mIhTW0qRKSYAX0Tu2MRYcvjjpjv3RfJ7YAJQO4DvlHhF8pfVVvtog
rQzX/UqTLL0VBE6goQZj2h5azC3twzkeEZsQU2giewXb12vUXjDkLRWO4HjBnnAc
Pbvbjw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org