Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e996419f-f2bb-4b9f-9855-1423154abbbe/7f743b4d4acadc4fd07b37d9a6f1387b2e82eb7f.roa
File:                     7f743b4d4acadc4fd07b37d9a6f1387b2e82eb7f.roa (raw, json)
Hash identifier:          mXfKxsUeDZ9/XUCDt6WD9IdKqyR+mUkyRtUeX1h6vKw=
Subject key identifier:   B7:8B:AF:76:7C:1A:E5:C7:D9:7A:FC:43:6A:1E:88:BE:26:61:4C:CC
Certificate issuer:       /CN=39073eec304c8ab3529f304e195b5403c9a33b05
Certificate serial:       114421
Authority key identifier: 17:98:67:57:43:99:C5:89:E5:EF:72:DD:79:F2:CA:2F:FE:41:B7:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39073eec304c8ab3529f304e195b5403c9a33b05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e996419f-f2bb-4b9f-9855-1423154abbbe/7f743b4d4acadc4fd07b37d9a6f1387b2e82eb7f.roa
Signing time:             Wed 06 Oct 2021 16:48:49 +0000
ROA not before:           Wed 06 Oct 2021 03:00:00 +0000
ROA not after:            Fri 06 Oct 2023 03:00:00 +0000
asID:                     265768
IP address blocks:        131.196.0.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1131553 (0x114421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39073eec304c8ab3529f304e195b5403c9a33b05
        Validity
            Not Before: Oct  6 03:00:00 2021 GMT
            Not After : Oct  6 03:00:00 2023 GMT
        Subject: CN=7f743b4d4acadc4fd07b37d9a6f1387b2e82eb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:48:5c:67:5c:9d:9d:df:20:28:f4:d7:ab:12:
                    d1:5c:e8:35:c9:0f:de:bb:fe:21:d3:9d:5a:18:40:
                    6f:23:8a:fb:81:56:68:60:3e:c5:fe:b1:22:fd:94:
                    05:4a:b7:76:f8:0c:23:32:a1:c7:fe:95:23:ed:0f:
                    ac:9c:ef:fc:82:8d:a1:18:c6:62:77:0d:88:ec:55:
                    8c:73:a2:b3:be:01:5b:f6:ce:f8:66:85:59:69:6d:
                    ca:09:08:c0:c9:39:b6:55:a5:84:0f:24:0b:2d:a1:
                    b7:97:c9:aa:b1:8f:c4:e1:82:bf:53:d1:99:95:11:
                    b0:e4:e6:62:ed:78:95:42:37:61:b6:21:6c:69:a9:
                    75:5e:6d:80:22:53:64:9d:d5:3f:3b:5d:d3:14:d8:
                    20:db:f5:6a:ff:11:a2:19:b9:cf:bb:56:90:13:b8:
                    03:04:c5:cc:5f:96:6a:74:41:23:e4:0c:7d:f2:4f:
                    13:91:81:23:21:ad:ae:d2:e0:44:db:33:e0:5d:9a:
                    18:f2:e8:bc:65:85:c6:53:83:24:5b:e0:68:e3:ef:
                    31:d0:4a:b5:46:30:35:9c:7c:10:ca:60:e3:ac:2b:
                    7f:cd:97:c4:d5:7f:c8:43:91:90:fa:aa:f8:8d:2c:
                    e4:f6:71:ef:d1:07:89:27:ad:3f:9f:17:31:f0:7a:
                    ba:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8B:AF:76:7C:1A:E5:C7:D9:7A:FC:43:6A:1E:88:BE:26:61:4C:CC
            X509v3 Authority Key Identifier:
                keyid:17:98:67:57:43:99:C5:89:E5:EF:72:DD:79:F2:CA:2F:FE:41:B7:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39073eec304c8ab3529f304e195b5403c9a33b05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e996419f-f2bb-4b9f-9855-1423154abbbe/7f743b4d4acadc4fd07b37d9a6f1387b2e82eb7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e996419f-f2bb-4b9f-9855-1423154abbbe/39073eec304c8ab3529f304e195b5403c9a33b05.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:32:65:b3:e1:24:dc:7c:17:f5:ac:54:c6:9a:d8:67:3a:00:
         ea:32:11:3c:65:86:7a:cd:02:05:e0:f4:6e:be:8f:68:b2:5c:
         76:b3:b4:98:40:7f:0a:f5:3e:40:a6:d8:e8:a7:e2:d5:69:3f:
         58:ea:ed:de:3b:78:54:26:25:15:d2:85:be:b0:9f:dd:d6:49:
         6d:2a:bb:f4:17:ee:9c:2c:b5:9a:46:a0:d7:94:f4:5a:6c:ce:
         23:de:df:b9:99:9c:d9:71:4e:22:7a:97:45:10:79:dc:09:4d:
         e2:a2:80:0a:e7:d7:cb:9d:a4:d2:0b:2d:42:c7:56:2c:83:30:
         f0:03:49:b6:4b:cf:51:f0:b7:2c:20:6b:fc:42:e8:51:9b:1f:
         28:84:ba:e4:ad:0f:3e:fb:ca:74:d9:6a:85:93:0d:a0:ed:a8:
         7e:97:00:93:ef:69:be:a4:55:77:b8:8c:f4:95:17:b4:0d:93:
         ba:b5:4e:04:4e:d3:8c:d7:f4:e5:cd:70:34:74:5d:d4:95:d4:
         41:f8:11:ef:00:cd:bd:34:ae:92:ac:a0:f4:4c:dd:68:ee:71:
         fa:7f:67:df:36:43:4c:67:81:02:16:30:f6:94:13:35:15:b4:
         c2:10:47:91:9c:af:93:2f:9f:fa:90:b8:76:e6:a6:5c:84:80:
         fd:7e:9c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:57 2023 by rpki-client on console-ams.rpki-client.org