Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/f965d6f0526989ef39b7ca0cfea07b716cf458b6.roa
File:                     f965d6f0526989ef39b7ca0cfea07b716cf458b6.roa (raw, json)
Hash identifier:          mMXksYYA4ne6D/opoXvLtUgafI9cfpCYpfjTU6cAd7U=
Subject key identifier:   3D:6A:EE:07:1A:A8:55:4E:68:9A:2D:12:5F:47:09:D9:22:BC:52:56
Certificate issuer:       /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial:       18A1C3
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/f965d6f0526989ef39b7ca0cfea07b716cf458b6.roa
Signing time:             Thu 23 Jun 2022 04:04:33 +0000
ROA not before:           Thu 23 Jun 2022 03:00:00 +0000
ROA not after:            Sun 23 Jun 2024 03:00:00 +0000
asID:                     6429
IP address blocks:        200.14.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614275 (0x18a1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
        Validity
            Not Before: Jun 23 03:00:00 2022 GMT
            Not After : Jun 23 03:00:00 2024 GMT
        Subject: CN=f965d6f0526989ef39b7ca0cfea07b716cf458b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:cb:05:2e:2d:43:42:85:b2:10:d5:e5:39:
                    64:ac:83:69:c8:6b:97:2c:0f:14:c6:bd:af:00:dc:
                    0b:76:b0:5c:19:0e:07:98:f4:02:7d:82:f0:24:31:
                    f1:f5:3e:9f:58:80:71:9c:0c:6c:60:8e:19:6e:bc:
                    b3:67:eb:ec:0b:24:de:37:f6:64:1f:03:7c:dd:2f:
                    de:6a:7a:9b:c2:eb:34:bb:8b:0c:39:07:19:3e:bb:
                    8f:b3:e9:70:7c:bb:d2:28:49:66:40:7b:51:f3:81:
                    27:da:9d:82:6e:8c:e0:1d:86:fd:ed:0f:54:c5:21:
                    dd:9c:65:76:58:67:cd:87:cc:db:d3:8d:01:f2:b7:
                    f8:6c:62:dc:31:37:32:76:0a:0d:b6:23:e0:f3:89:
                    43:ad:fc:04:94:47:07:13:bd:7d:6c:9a:7e:f2:c6:
                    a9:51:b7:87:d0:ce:69:8c:26:04:71:ea:14:26:95:
                    70:9c:2e:5d:62:a2:f9:fe:b1:43:e5:7b:fd:fd:8c:
                    3c:ac:48:4e:cf:dd:df:8e:59:1c:42:3d:aa:b6:93:
                    74:0d:5d:a5:72:16:00:0f:3c:00:cb:fd:9e:6e:b8:
                    a0:32:48:47:5f:8c:1a:78:93:0e:f5:34:3f:12:6e:
                    1f:d3:ab:05:ae:86:a0:6c:48:ef:b2:1e:0a:b8:79:
                    d6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6A:EE:07:1A:A8:55:4E:68:9A:2D:12:5F:47:09:D9:22:BC:52:56
            X509v3 Authority Key Identifier:
                keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/f965d6f0526989ef39b7ca0cfea07b716cf458b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:35:24:a5:70:47:96:b9:ef:2c:ad:59:cd:63:5a:f3:44:7a:
         07:86:34:60:74:f3:5a:23:15:c1:7e:00:b8:38:c9:46:82:c3:
         50:8a:5e:7f:18:27:67:cb:e9:81:d5:40:59:50:03:bc:f8:35:
         68:44:e9:67:30:5e:2b:c5:ee:e2:18:79:fb:fc:dc:89:f3:b0:
         c3:49:d6:ee:72:d2:e9:e3:57:59:58:ad:a9:10:bd:4e:2e:5c:
         b9:cf:78:2a:cd:d6:a4:54:fe:b8:cb:9c:94:76:85:4b:cb:14:
         68:88:f3:6b:4e:ba:ed:12:2b:cd:83:71:03:76:cb:4d:4e:84:
         76:f4:cf:50:8c:c6:04:98:69:00:70:82:d4:17:c7:8e:cb:e9:
         27:ce:76:eb:fa:a5:0e:71:d3:8c:6a:0a:97:cf:1d:6a:62:4a:
         d8:66:71:0a:d2:13:f3:55:dc:a0:66:83:0b:a5:27:25:d6:9a:
         96:7d:32:91:82:4b:68:5c:41:e8:85:cd:50:0f:3a:26:56:83:
         69:66:71:5f:66:d9:b5:78:ad:65:01:21:db:18:5c:0a:79:e7:
         5f:22:9b:79:9f:06:58:4d:8a:3a:fa:26:2e:ef:11:ee:c1:27:
         96:ad:f9:98:ae:64:83:a0:e7:84:12:13:35:d1:e9:92:63:bf:
         b4:79:09:0f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGKHDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh
YTM0Y2U5M2FjYmZlNzBjNGRlNjQ1MzhkY2EwODk0YjY3MGYwZDIwHhcNMjIwNjIz
MDMwMDAwWhcNMjQwNjIzMDMwMDAwWjAzMTEwLwYDVQQDEyhmOTY1ZDZmMDUyNjk4
OWVmMzliN2NhMGNmZWEwN2I3MTZjZjQ1OGI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1fHLBS4tQ0KFshDV5TlkrINpyGuXLA8Uxr2vANwLdrBcGQ4H
mPQCfYLwJDHx9T6fWIBxnAxsYI4ZbryzZ+vsCyTeN/ZkHwN83S/eanqbwus0u4sM
OQcZPruPs+lwfLvSKElmQHtR84En2p2CbozgHYb97Q9UxSHdnGV2WGfNh8zb040B
8rf4bGLcMTcydgoNtiPg84lDrfwElEcHE719bJp+8sapUbeH0M5pjCYEceoUJpVw
nC5dYqL5/rFD5Xv9/Yw8rEhOz93fjlkcQj2qtpN0DV2lchYADzwAy/2ebrigMkhH
X4waeJMO9TQ/Em4f06sFroagbEjvsh4KuHnW+wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFD1q7gcaqFVOaJotEl9HCdkivFJWMB8GA1UdIwQYMBaAFF+F026iJxQ1QEkZ
je07lBYn/dU1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2FhMzRj
ZTkzYWNiZmU3MGM0ZGU2NDUzOGRjYTA4OTRiNjcwZjBkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTRlNDM3NDMtY2ViYi00ZjI5LTk1NmUtMzYwZDhk
MjIwZjU0L2Y5NjVkNmYwNTI2OTg5ZWYzOWI3Y2EwY2ZlYTA3YjcxNmNmNDU4YjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNGU0Mzc0My1jZWJiLTRmMjktOTU2ZS0zNjBk
OGQyMjBmNTQvN2FhMzRjZTkzYWNiZmU3MGM0ZGU2NDUzOGRjYTA4OTRiNjcwZjBk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgO3jANBgkqhkiG9w0BAQsFAAOCAQEAUTUkpXBHlrnvLK1Z
zWNa80R6B4Y0YHTzWiMVwX4AuDjJRoLDUIpefxgnZ8vpgdVAWVADvPg1aETpZzBe
K8Xu4hh5+/zcifOww0nW7nLS6eNXWVitqRC9Ti5cuc94Ks3WpFT+uMuclHaFS8sU
aIjza0667RIrzYNxA3bLTU6EdvTPUIzGBJhpAHCC1BfHjsvpJ8526/qlDnHTjGoK
l88damJK2GZxCtIT81XcoGaDC6UnJdaaln0ykYJLaFxB6IXNUA86JlaDaWZxX2bZ
tXitZQEh2xhcCnnnXyKbeZ8GWE2KOvomLu8R7sEnlq35mK5kg6DnhBITNdHpkmO/
tHkJDw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org