Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/b3ed8eff0708954e882c89e1659a4ae5eb6547f3.roa
File:                     b3ed8eff0708954e882c89e1659a4ae5eb6547f3.roa (raw, json)
Hash identifier:          VskE+j9G0O/oGB0swHWjRCTYovlVZPEoxAPHr93/+UE=
Subject key identifier:   F4:C8:C3:1E:7E:A3:33:8E:25:F3:F4:FD:19:33:8B:5E:89:92:D4:D5
Certificate issuer:       /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial:       100A94
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/b3ed8eff0708954e882c89e1659a4ae5eb6547f3.roa
Signing time:             Mon 05 Jul 2021 18:47:48 +0000
ROA not before:           Mon 05 Jul 2021 03:00:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        200.14.205.0/24 maxlen: 24
                          200.14.206.0/23 maxlen: 24
                          200.14.231.0/24 maxlen: 24
                          200.14.232.0/21 maxlen: 21
                          200.14.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1051284 (0x100a94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
        Validity
            Not Before: Jul  5 03:00:00 2021 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject: CN=b3ed8eff0708954e882c89e1659a4ae5eb6547f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:8d:a3:0d:64:f1:69:cf:81:4c:1f:83:a7:
                    ac:6a:5b:06:a4:44:01:85:35:c8:b1:ad:8f:c6:98:
                    9d:ba:80:ce:40:17:ff:25:5f:5e:84:e1:52:a4:91:
                    4b:eb:03:3b:83:69:85:12:19:57:2e:64:fa:d5:9c:
                    93:32:49:50:eb:9b:00:fe:f1:53:8b:86:11:e3:d4:
                    e3:e3:a7:d9:56:a1:b4:ab:32:0e:f8:49:d8:43:3d:
                    dd:b1:8a:bf:43:e9:7e:3a:dd:dc:6c:ef:be:6f:48:
                    00:06:61:50:e9:89:72:1e:3a:bb:46:9d:3c:db:d9:
                    3e:68:21:0b:7a:99:a7:ad:3a:3f:08:57:c4:bb:66:
                    f2:9d:ce:f2:f4:25:f3:42:60:6e:05:68:cd:12:0a:
                    5e:2b:fb:51:cd:15:0f:4d:b0:85:93:b6:f8:47:86:
                    6f:85:95:43:f5:4a:03:05:b5:bf:c0:28:84:db:80:
                    c0:2b:7a:83:c3:f3:34:e9:dc:c1:7b:27:99:d1:61:
                    c3:93:5b:ca:55:df:e2:f4:4e:83:6f:68:7a:1d:d8:
                    a5:db:65:89:ee:94:b1:f0:61:cb:2b:fb:1a:d7:81:
                    fa:99:16:cb:5b:47:53:8b:89:44:8d:7a:6c:25:9e:
                    3b:87:61:51:4a:52:c8:ce:98:ac:35:25:50:f1:9c:
                    c5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C8:C3:1E:7E:A3:33:8E:25:F3:F4:FD:19:33:8B:5E:89:92:D4:D5
            X509v3 Authority Key Identifier:
                keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/b3ed8eff0708954e882c89e1659a4ae5eb6547f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.205.0-200.14.207.255
                  200.14.231.0-200.14.239.255
                  200.14.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:ea:f4:a4:10:13:6e:10:bf:c9:33:22:a9:b5:9f:28:45:71:
         e4:1f:65:3e:62:88:74:65:47:f5:f3:e9:9a:18:90:b4:d2:0d:
         93:b4:ad:3d:73:24:40:65:c0:51:9f:5d:0e:7b:ce:63:cd:57:
         67:6c:e9:cd:49:3e:68:22:a8:8f:41:69:a6:07:53:49:b8:37:
         65:3b:47:38:96:50:0f:93:61:de:78:ea:c4:dc:9d:d5:8c:45:
         87:c3:96:d9:fd:1b:7c:57:7d:91:96:e7:2b:f6:af:69:17:44:
         83:4e:1d:6b:1b:e0:ff:ae:b2:16:5e:6b:85:9b:a4:10:33:f4:
         4c:57:ee:b6:52:b0:65:b1:8b:6d:83:41:fd:66:6d:94:e4:94:
         e4:34:72:17:4f:c5:6d:bb:49:a9:95:ce:57:17:80:d2:42:f1:
         b1:99:f9:06:81:04:63:e7:2c:fe:85:b3:be:47:e5:a0:16:3c:
         5b:12:b1:b2:a0:f0:a6:72:2e:39:e9:9b:3f:bc:95:23:8a:1a:
         0b:60:d8:f3:8d:32:b7:6b:31:56:34:2e:69:61:b3:42:81:2b:
         c8:f6:61:d7:0b:f2:c8:24:ec:58:ec:b5:68:8a:8b:ca:bf:76:
         c4:ad:09:1e:8d:0f:a7:bd:6c:87:26:03:30:e8:3c:02:ee:d5:
         99:d4:d0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org