Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/5ca3447b17d772879a9c09d518f28a7b012a0731.roa
File:                     5ca3447b17d772879a9c09d518f28a7b012a0731.roa (raw, json)
Hash identifier:          78RC3Er0TOoh+h26rJo/mz/m5ou3japwvOc6OXkF6WE=
Subject key identifier:   91:21:EC:D7:E6:A8:9B:9B:DA:19:53:38:5E:6F:83:AE:57:9A:57:80
Certificate issuer:       /CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Certificate serial:       17918C
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/5ca3447b17d772879a9c09d518f28a7b012a0731.roa
Signing time:             Tue 05 Jul 2022 16:51:26 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     7438
IP address blocks:        200.36.161.0/24 maxlen: 24
                          200.36.162.0/24 maxlen: 24
                          200.36.163.0/24 maxlen: 24
                          200.36.164.0/24 maxlen: 24
                          200.36.166.0/23 maxlen: 23
                          200.36.166.0/24 maxlen: 24
                          200.36.167.0/24 maxlen: 24
                          200.36.168.0/24 maxlen: 24
                          200.36.169.0/24 maxlen: 24
                          200.36.170.0/24 maxlen: 24
                          200.36.171.0/24 maxlen: 24
                          200.36.172.0/24 maxlen: 24
                          200.36.173.0/24 maxlen: 24
                          200.36.174.0/24 maxlen: 24
                          200.36.175.0/24 maxlen: 24
                          200.36.176.0/24 maxlen: 24
                          200.36.177.0/24 maxlen: 24
                          200.36.178.0/23 maxlen: 23
                          200.36.178.0/24 maxlen: 24
                          200.36.180.0/23 maxlen: 23
                          200.36.180.0/24 maxlen: 24
                          200.36.182.0/23 maxlen: 23
                          200.36.182.0/24 maxlen: 24
                          200.36.183.0/24 maxlen: 24
                          200.36.184.0/22 maxlen: 22
                          200.36.184.0/24 maxlen: 24
                          200.36.185.0/24 maxlen: 24
                          200.36.186.0/23 maxlen: 23
                          200.36.186.0/24 maxlen: 24
                          200.36.187.0/24 maxlen: 24
                          200.36.188.0/22 maxlen: 22
                          200.36.188.0/23 maxlen: 23
                          200.36.189.0/24 maxlen: 24
                          200.36.190.0/23 maxlen: 24
                          200.36.190.0/24 maxlen: 24
                          200.36.191.0/24 maxlen: 24
                          200.39.0.0/23 maxlen: 23
                          200.39.11.0/24 maxlen: 24
                          200.39.13.0/24 maxlen: 24
                          200.39.14.0/23 maxlen: 23
                          200.39.14.0/24 maxlen: 24
                          200.39.15.0/24 maxlen: 24
                          200.39.18.0/24 maxlen: 24
                          200.39.2.0/24 maxlen: 24
                          200.39.20.0/24 maxlen: 24
                          200.39.21.0/24 maxlen: 24
                          200.39.22.0/24 maxlen: 24
                          200.39.23.0/24 maxlen: 24
                          200.39.24.0/22 maxlen: 22
                          200.39.25.0/24 maxlen: 24
                          200.39.26.0/24 maxlen: 24
                          200.39.28.0/23 maxlen: 23
                          200.39.28.0/24 maxlen: 24
                          200.39.29.0/24 maxlen: 24
                          200.39.30.0/24 maxlen: 24
                          200.39.31.0/24 maxlen: 24
                          200.39.7.0/24 maxlen: 24
                          200.39.8.0/24 maxlen: 24
                          200.39.9.0/24 maxlen: 24
                          200.76.80.0/21 maxlen: 21
                          200.76.82.0/24 maxlen: 24
                          200.76.88.0/23 maxlen: 23
                          200.76.90.0/23 maxlen: 24
                          200.76.92.0/22 maxlen: 22
                          201.162.128.0/18 maxlen: 18
                          201.162.128.0/20 maxlen: 20
                          201.162.128.0/21 maxlen: 21
                          201.162.136.0/21 maxlen: 24
                          201.162.144.0/24 maxlen: 24
                          201.162.162.0/24 maxlen: 24
                          201.162.178.0/24 maxlen: 24
                          201.162.191.0/24 maxlen: 24
                          201.162.192.0/23 maxlen: 23
                          201.162.192.0/24 maxlen: 24
                          201.162.193.0/24 maxlen: 24
                          201.162.194.0/24 maxlen: 24
                          201.162.224.0/23 maxlen: 23
                          201.162.224.0/24 maxlen: 24
                          201.162.232.0/24 maxlen: 24
                          201.162.233.0/24 maxlen: 24
                          201.162.234.0/24 maxlen: 24
                          201.162.236.0/24 maxlen: 24
                          201.162.247.0/24 maxlen: 24
                          201.166.128.0/19 maxlen: 19
                          201.166.128.0/20 maxlen: 20
                          201.166.128.0/22 maxlen: 22
                          201.166.132.0/24 maxlen: 24
                          201.166.133.0/24 maxlen: 24
                          201.166.137.0/24 maxlen: 24
                          201.166.144.0/20 maxlen: 20
                          201.166.148.0/22 maxlen: 22
                          201.166.151.0/24 maxlen: 24
                          201.166.160.0/20 maxlen: 20
                          201.166.168.0/24 maxlen: 24
                          201.166.169.0/24 maxlen: 24
                          201.166.175.0/24 maxlen: 24
                          201.166.176.0/21 maxlen: 21
                          201.166.176.0/24 maxlen: 24
                          201.166.177.0/24 maxlen: 24
                          201.166.178.0/24 maxlen: 24
                          201.166.180.0/22 maxlen: 24
                          201.166.184.0/21 maxlen: 21
                          201.166.188.0/24 maxlen: 24
                          201.166.189.0/24 maxlen: 24
                          201.166.190.0/24 maxlen: 24
                          201.166.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1544588 (0x17918c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=5ca3447b17d772879a9c09d518f28a7b012a0731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:30:32:78:72:51:15:09:b5:21:a9:5e:bd:
                    13:ff:80:f5:78:49:3d:4a:19:fe:d3:da:1b:71:15:
                    58:ab:2e:d9:e9:df:d1:7f:6c:8e:ac:13:d3:d6:44:
                    2e:2a:57:df:2e:14:52:d5:4f:9d:ef:d6:a2:bf:11:
                    f3:61:1f:23:85:d6:62:ca:7b:52:bb:1d:0b:76:c4:
                    05:6f:cf:da:b6:3f:ce:c2:a8:2e:43:e3:34:b9:39:
                    9a:7e:6c:ca:dd:3f:79:85:53:6c:cb:35:ac:ae:15:
                    aa:e6:3a:d5:03:17:9b:28:8b:03:2c:ca:07:0a:b0:
                    4a:2a:ee:2d:df:b1:a1:fc:09:18:b4:0c:63:e9:ad:
                    db:a6:f3:88:55:dd:f5:87:b2:c7:af:f7:e0:b2:48:
                    1e:58:17:36:89:bc:a4:04:fb:63:d0:62:11:dd:03:
                    12:ff:f7:51:a1:84:14:3c:c0:18:e8:9d:0d:b0:68:
                    75:db:f7:c7:fb:d2:10:dd:85:60:48:83:e2:43:66:
                    38:5b:f4:70:47:7e:52:31:c8:d6:17:16:4c:a1:f9:
                    4b:3c:be:57:9d:cd:ba:34:4f:3e:77:a3:d2:38:a4:
                    a5:03:ee:dc:02:c5:fb:1f:38:11:bd:3e:cb:83:8b:
                    17:02:28:84:89:a3:e5:dd:4b:d8:5d:01:e5:37:8c:
                    d8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:21:EC:D7:E6:A8:9B:9B:DA:19:53:38:5E:6F:83:AE:57:9A:57:80
            X509v3 Authority Key Identifier:
                keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/5ca3447b17d772879a9c09d518f28a7b012a0731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.161.0-200.36.164.255
                  200.36.166.0-200.36.191.255
                  200.39.0.0-200.39.2.255
                  200.39.7.0-200.39.9.255
                  200.39.11.0/24
                  200.39.13.0-200.39.15.255
                  200.39.18.0/24
                  200.39.20.0-200.39.31.255
                  200.76.80.0/20
                  201.162.128.0-201.162.194.255
                  201.162.224.0/23
                  201.162.232.0-201.162.234.255
                  201.162.236.0/24
                  201.162.247.0/24
                  201.166.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         19:52:8d:66:7d:d4:c3:89:3b:84:99:cf:11:1a:65:21:68:2d:
         dc:ba:6a:63:8e:bc:90:3b:f2:21:02:af:db:b5:ed:f2:15:38:
         3f:c2:6d:1e:a7:7e:5e:e6:d3:77:7b:c5:46:77:2b:44:e2:92:
         b2:b9:27:db:9f:de:c1:e7:67:d9:f8:37:c2:90:e0:35:00:70:
         31:72:10:37:09:6d:92:42:fa:44:81:50:51:84:6e:e6:71:71:
         c3:4d:68:5d:b2:b7:42:70:41:42:bb:d7:78:4b:1b:eb:13:6a:
         3d:6f:f1:da:20:a2:82:dd:bb:5c:fb:70:7e:7f:74:b4:21:f3:
         15:eb:4b:85:1a:f1:07:9d:5e:1b:bb:7c:40:4c:54:cf:ab:7b:
         a1:bb:88:12:a0:43:19:ba:0d:3e:c2:cf:6d:b6:fa:3b:89:08:
         e4:c2:ce:e7:15:2f:32:a2:b1:7b:db:eb:9c:65:59:91:b0:1b:
         8c:e6:b4:89:ac:19:3b:fa:f6:ff:26:9e:07:cc:72:60:3c:7b:
         d3:9c:29:ac:eb:17:f2:bc:0c:c7:11:85:32:5b:2f:15:69:ab:
         92:09:7d:e4:99:18:31:e5:b9:7e:c4:be:21:56:fe:d8:f2:ad:
         aa:dd:36:f8:8f:d4:99:0f:f0:9b:d8:51:50:53:6f:ca:34:da:
         53:8c:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:57 2023 by rpki-client on console-ams.rpki-client.org