Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/d773b5ecd8c6c4b6d81580009a96c56821dd0d8c.roa
File:                     d773b5ecd8c6c4b6d81580009a96c56821dd0d8c.roa (raw, json)
Hash identifier:          Ch/KWG64iCtOSYphLS+D2ieTGXvsvWA8n+z0P6fToCk=
Subject key identifier:   66:1D:83:AA:1C:07:04:76:A5:BB:DB:F1:63:16:E8:07:82:11:E4:67
Certificate issuer:       /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial:       0D79D5
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/d773b5ecd8c6c4b6d81580009a96c56821dd0d8c.roa
Signing time:             Wed 24 Mar 2021 14:33:08 +0000
ROA not before:           Wed 24 Mar 2021 14:33:08 +0000
ROA not after:            Tue 24 Mar 2026 14:33:08 +0000
asID:                     264714
IP address blocks:        200.14.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 04:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883157 (0xd79d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
        Validity
            Not Before: Mar 24 14:33:08 2021 GMT
            Not After : Mar 24 14:33:08 2026 GMT
        Subject: CN=d773b5ecd8c6c4b6d81580009a96c56821dd0d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:1b:17:8a:f8:96:9f:07:d0:d2:2f:07:36:
                    8c:07:3f:b2:9b:d0:73:92:de:18:5f:26:fa:af:8e:
                    a5:8f:8b:5e:9e:38:d2:4f:90:8e:91:9f:af:66:82:
                    06:77:a9:6d:b2:f3:fd:18:fa:47:41:d0:74:72:9b:
                    01:81:d3:ce:d7:07:05:f0:bf:2c:87:bf:15:65:4a:
                    b1:0e:40:a2:4e:84:a0:e6:d3:b9:f9:e9:42:b9:e4:
                    73:f1:73:e9:8a:97:ca:17:f9:57:ee:c9:b8:54:87:
                    02:59:44:47:8a:01:9d:8d:ff:1b:34:10:95:83:44:
                    2b:57:85:6d:a6:e8:1a:e4:36:d1:41:b7:3c:dd:1b:
                    5c:5a:ab:1e:fd:ef:23:e6:83:39:18:8a:e0:7b:a7:
                    38:b8:48:a2:9e:e7:38:ff:4b:a2:e5:3f:0b:4b:9b:
                    17:0f:70:13:b8:58:b9:52:db:09:4f:82:2a:b3:53:
                    90:23:24:06:c3:24:6d:32:94:d6:00:6d:88:58:f2:
                    ca:33:5b:c9:2f:99:64:7e:91:74:a4:32:3b:9f:98:
                    06:54:b2:90:5f:a4:ec:be:fd:6b:77:77:e4:60:89:
                    b3:35:db:9e:af:b3:ab:98:72:52:33:e5:3a:70:56:
                    0f:9e:30:bf:0c:e0:de:ec:6b:a4:08:ce:5e:77:b1:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1D:83:AA:1C:07:04:76:A5:BB:DB:F1:63:16:E8:07:82:11:E4:67
            X509v3 Authority Key Identifier:
                keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/d773b5ecd8c6c4b6d81580009a96c56821dd0d8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:6b:1d:c1:d8:6c:d1:f5:1c:d6:2f:01:01:8b:1f:f0:86:a3:
         23:02:93:36:69:75:9d:d8:7f:99:2f:67:c0:8d:78:68:d9:17:
         dd:1b:1c:f7:fe:2d:8d:af:71:75:2a:5e:57:d5:b1:38:19:b9:
         6d:03:ef:dd:d3:b6:47:0f:8d:ad:ef:a3:86:19:92:76:28:92:
         29:6e:e1:f9:73:dc:a7:46:36:d7:d4:50:82:b5:bb:e8:84:8e:
         34:61:38:40:45:b5:9b:65:58:84:fa:5b:48:ab:3f:ef:02:b6:
         30:1f:28:8d:3e:3d:0f:88:ce:38:7e:23:3e:20:f2:f7:5c:ec:
         82:41:ba:7b:c3:27:3c:98:9c:30:5e:e6:db:15:e4:a2:4c:cb:
         71:39:53:12:a1:f6:39:e7:07:41:91:46:48:0d:e8:92:be:50:
         ac:58:02:60:89:56:74:1a:c9:57:c2:e0:27:ca:12:59:95:be:
         ad:40:25:86:12:13:eb:52:ef:73:41:06:b1:2a:bc:ed:76:91:
         e1:6a:55:3b:41:6d:ea:38:e4:03:e3:0f:4c:de:e3:62:59:3a:
         3f:c7:7e:bf:5b:b5:8e:90:bd:c7:b6:98:3a:20:e3:cd:8a:d2:
         28:2f:cb:8f:d5:a9:8c:5f:41:74:66:d2:85:59:10:e2:23:53:
         b5:1d:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 08:44:04 2024 by rpki-client on console-ams.rpki-client.org