Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/0cd5c1cb229cf925e3bf3a6840faa2a5b62b9cd7.roa
File:                     0cd5c1cb229cf925e3bf3a6840faa2a5b62b9cd7.roa (raw, json)
Hash identifier:          UaoQh4V7XTq6aoJLT9AuIymFie7zr1efRGCukbHv5LY=
Subject key identifier:   22:DB:50:D0:17:9A:9C:98:3D:5A:95:06:07:74:31:8E:99:AB:2E:DB
Certificate issuer:       /CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Certificate serial:       126525
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/0cd5c1cb229cf925e3bf3a6840faa2a5b62b9cd7.roa
Signing time:             Wed 08 Dec 2021 16:22:43 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     7438
IP address blocks:        200.36.161.0/24 maxlen: 24
                          200.36.162.0/24 maxlen: 24
                          200.36.163.0/24 maxlen: 24
                          200.36.164.0/24 maxlen: 24
                          200.36.166.0/23 maxlen: 23
                          200.36.166.0/24 maxlen: 24
                          200.36.167.0/24 maxlen: 24
                          200.36.168.0/24 maxlen: 24
                          200.36.169.0/24 maxlen: 24
                          200.36.170.0/24 maxlen: 24
                          200.36.171.0/24 maxlen: 24
                          200.36.172.0/24 maxlen: 24
                          200.36.173.0/24 maxlen: 24
                          200.36.174.0/24 maxlen: 24
                          200.36.175.0/24 maxlen: 24
                          200.36.176.0/24 maxlen: 24
                          200.36.177.0/24 maxlen: 24
                          200.36.178.0/23 maxlen: 23
                          200.36.178.0/24 maxlen: 24
                          200.36.180.0/23 maxlen: 23
                          200.36.180.0/24 maxlen: 24
                          200.36.182.0/23 maxlen: 23
                          200.36.182.0/24 maxlen: 24
                          200.36.183.0/24 maxlen: 24
                          200.36.184.0/22 maxlen: 22
                          200.36.184.0/24 maxlen: 24
                          200.36.185.0/24 maxlen: 24
                          200.36.186.0/23 maxlen: 23
                          200.36.186.0/24 maxlen: 24
                          200.36.187.0/24 maxlen: 24
                          200.36.188.0/22 maxlen: 22
                          200.36.188.0/23 maxlen: 23
                          200.36.189.0/24 maxlen: 24
                          200.36.190.0/23 maxlen: 24
                          200.36.190.0/24 maxlen: 24
                          200.36.191.0/24 maxlen: 24
                          200.39.0.0/23 maxlen: 23
                          200.39.11.0/24 maxlen: 24
                          200.39.13.0/24 maxlen: 24
                          200.39.14.0/23 maxlen: 23
                          200.39.14.0/24 maxlen: 24
                          200.39.15.0/24 maxlen: 24
                          200.39.17.0/24 maxlen: 24
                          200.39.18.0/24 maxlen: 24
                          200.39.2.0/24 maxlen: 24
                          200.39.20.0/24 maxlen: 24
                          200.39.21.0/24 maxlen: 24
                          200.39.22.0/24 maxlen: 24
                          200.39.23.0/24 maxlen: 24
                          200.39.24.0/22 maxlen: 22
                          200.39.24.0/24 maxlen: 24
                          200.39.25.0/24 maxlen: 24
                          200.39.26.0/24 maxlen: 24
                          200.39.28.0/23 maxlen: 23
                          200.39.28.0/24 maxlen: 24
                          200.39.29.0/24 maxlen: 24
                          200.39.30.0/24 maxlen: 24
                          200.39.31.0/24 maxlen: 24
                          200.39.7.0/24 maxlen: 24
                          200.39.8.0/24 maxlen: 24
                          200.39.9.0/24 maxlen: 24
                          200.76.80.0/21 maxlen: 21
                          200.76.82.0/24 maxlen: 24
                          200.76.88.0/23 maxlen: 23
                          200.76.90.0/23 maxlen: 24
                          200.76.92.0/22 maxlen: 22
                          201.162.128.0/18 maxlen: 18
                          201.162.128.0/20 maxlen: 20
                          201.162.128.0/21 maxlen: 21
                          201.162.136.0/21 maxlen: 24
                          201.162.144.0/24 maxlen: 24
                          201.162.162.0/24 maxlen: 24
                          201.162.178.0/24 maxlen: 24
                          201.162.191.0/24 maxlen: 24
                          201.162.192.0/23 maxlen: 23
                          201.162.192.0/24 maxlen: 24
                          201.162.193.0/24 maxlen: 24
                          201.162.194.0/24 maxlen: 24
                          201.162.224.0/23 maxlen: 23
                          201.162.224.0/24 maxlen: 24
                          201.162.236.0/24 maxlen: 24
                          201.162.247.0/24 maxlen: 24
                          201.166.128.0/19 maxlen: 19
                          201.166.128.0/20 maxlen: 20
                          201.166.128.0/22 maxlen: 22
                          201.166.132.0/24 maxlen: 24
                          201.166.133.0/24 maxlen: 24
                          201.166.137.0/24 maxlen: 24
                          201.166.144.0/20 maxlen: 20
                          201.166.148.0/22 maxlen: 22
                          201.166.151.0/24 maxlen: 24
                          201.166.160.0/20 maxlen: 20
                          201.166.168.0/24 maxlen: 24
                          201.166.169.0/24 maxlen: 24
                          201.166.175.0/24 maxlen: 24
                          201.166.176.0/21 maxlen: 21
                          201.166.176.0/24 maxlen: 24
                          201.166.177.0/24 maxlen: 24
                          201.166.178.0/24 maxlen: 24
                          201.166.180.0/22 maxlen: 24
                          201.166.184.0/21 maxlen: 21
                          201.166.188.0/24 maxlen: 24
                          201.166.189.0/24 maxlen: 24
                          201.166.190.0/24 maxlen: 24
                          201.166.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1205541 (0x126525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=0cd5c1cb229cf925e3bf3a6840faa2a5b62b9cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:5c:1e:5a:b6:df:47:0f:2b:2d:ee:8f:55:
                    83:fd:c2:0e:2f:dc:0c:68:95:4e:f4:9c:eb:0d:a2:
                    27:b4:91:b6:54:c4:d6:aa:71:4c:0b:8d:ce:dc:ca:
                    8e:90:c0:81:d8:74:da:49:21:16:0d:8d:c2:19:09:
                    72:76:8e:7e:20:13:a1:7e:19:3a:4a:74:d2:6e:90:
                    5b:9f:09:eb:3b:e3:2f:25:4f:24:f6:7e:27:17:f4:
                    ca:2c:76:9b:a6:46:ca:50:59:f7:af:7f:f7:42:44:
                    ff:54:bf:25:5e:84:a2:b8:93:3d:3b:99:57:98:9a:
                    d1:ab:4b:a1:c3:4e:7b:eb:4c:7b:e4:e5:e3:6c:b7:
                    b6:af:a9:97:af:f4:4f:e3:a5:db:0e:5c:db:70:b8:
                    7f:5f:d3:41:29:c5:3a:00:63:88:7b:c1:11:df:59:
                    42:e0:b9:ef:1a:40:9b:80:6c:1a:ca:a1:5a:ba:9c:
                    ba:47:ef:cf:11:db:b3:01:02:53:23:1b:22:58:24:
                    35:fd:c4:cd:6e:ed:24:6e:1b:79:86:d6:d7:4c:8e:
                    a4:60:16:38:28:c9:89:b3:a4:69:85:0f:02:35:6f:
                    b7:f0:d4:b5:a6:3e:05:8b:8e:aa:05:5e:0e:c3:08:
                    73:52:47:3d:8c:30:51:09:f1:bc:e3:17:18:7e:ac:
                    fd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DB:50:D0:17:9A:9C:98:3D:5A:95:06:07:74:31:8E:99:AB:2E:DB
            X509v3 Authority Key Identifier:
                keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/0cd5c1cb229cf925e3bf3a6840faa2a5b62b9cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.161.0-200.36.164.255
                  200.36.166.0-200.36.191.255
                  200.39.0.0-200.39.2.255
                  200.39.7.0-200.39.9.255
                  200.39.11.0/24
                  200.39.13.0-200.39.15.255
                  200.39.17.0-200.39.18.255
                  200.39.20.0-200.39.31.255
                  200.76.80.0/20
                  201.162.128.0-201.162.194.255
                  201.162.224.0/23
                  201.162.236.0/24
                  201.162.247.0/24
                  201.166.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         17:b6:6a:9a:c5:f7:ef:bb:b6:5a:fe:ad:36:06:bd:21:d3:57:
         14:a3:64:9b:40:c2:d6:5f:ae:68:b9:8d:95:3a:ad:87:01:79:
         ee:34:7d:21:4c:d5:b6:70:1a:47:bd:94:c7:a9:f4:2c:0a:4e:
         a3:8d:8a:82:31:f6:b2:66:ec:7a:00:1c:fd:2a:a1:4a:95:df:
         54:50:1c:35:ac:10:50:9a:77:0f:30:ef:45:0a:f1:b1:2e:bd:
         bd:8e:fa:2a:2d:91:ff:6f:5b:7f:76:fb:28:d9:00:93:1d:ed:
         54:61:30:8b:5d:95:48:d8:e7:eb:4a:64:6b:0e:1f:fd:02:00:
         1d:14:46:e2:a6:f4:ec:aa:ee:c8:a0:74:61:b5:e4:62:29:b0:
         35:22:07:fc:16:de:b1:24:1a:86:ae:75:2f:42:77:f3:fa:9a:
         97:c2:2f:8d:e1:0f:68:2d:05:4c:7d:03:e0:19:65:70:b5:8e:
         53:68:1b:9b:f6:1a:4a:f7:47:df:fc:c0:a7:89:9f:f0:3a:21:
         28:1c:dc:90:94:f9:44:63:fe:0d:e5:7b:6d:1c:e8:85:26:2c:
         9c:59:ad:17:95:38:43:7c:e5:17:2d:b4:0a:62:c9:f6:70:c1:
         40:5d:c4:42:c5:71:e8:d2:74:f3:66:c3:6e:18:be:ca:66:f2:
         e3:a7:eb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:57 2023 by rpki-client on console-ams.rpki-client.org