Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ec2d1981-f6b5-4e3b-aacc-a72101157fbe/30633b898a5c1bd97e78358424165a4a020251da.roa
File:                     30633b898a5c1bd97e78358424165a4a020251da.roa (raw, json)
Hash identifier:          ZojlE9nyagD6Sbx6sOsPdKICuc+pwdLCQXFI22J5kKM=
Subject key identifier:   53:52:28:E6:F4:E8:25:17:73:A5:42:E5:FB:DA:40:6F:7B:44:1E:A6
Certificate issuer:       /CN=2510213418f85a88f8db8d2ffb6e84078f9f70b0
Certificate serial:       0E47D2
Authority key identifier: EA:F7:4D:BB:44:8B:B3:75:BC:59:BE:74:DE:D7:B2:58:E0:95:3F:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2510213418f85a88f8db8d2ffb6e84078f9f70b0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ec2d1981-f6b5-4e3b-aacc-a72101157fbe/30633b898a5c1bd97e78358424165a4a020251da.roa
Signing time:             Wed 21 Dec 2022 18:25:31 +0000
ROA not before:           Sat 25 Dec 2021 03:00:00 +0000
ROA not after:            Thu 28 Dec 2023 03:00:00 +0000
asID:                     271985
IP address blocks:        177.37.36.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935890 (0xe47d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2510213418f85a88f8db8d2ffb6e84078f9f70b0
        Validity
            Not Before: Dec 25 03:00:00 2021 GMT
            Not After : Dec 28 03:00:00 2023 GMT
        Subject: CN=30633b898a5c1bd97e78358424165a4a020251da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:ee:50:03:09:25:cc:ce:c2:a9:23:49:09:
                    01:d1:e6:ed:3e:e8:92:af:66:0c:05:03:0f:1a:a3:
                    fa:3c:c0:52:a7:60:fc:46:87:e0:9b:32:68:91:e4:
                    c7:03:cf:1a:d3:9f:54:3e:29:aa:09:ff:ff:3e:f2:
                    35:5b:0e:ab:e7:04:7f:22:11:68:c5:b6:c6:03:92:
                    81:4a:95:78:ec:0f:fd:86:76:6a:a3:9a:47:96:ef:
                    89:6e:09:2c:79:f4:c2:73:9f:c0:b4:15:8f:0c:a1:
                    99:7e:19:d2:8a:86:69:e3:95:27:47:02:a1:70:64:
                    be:77:9f:76:7d:50:69:b3:13:1e:41:be:2b:93:9c:
                    f9:6f:93:20:dc:8e:9a:9c:fe:bb:7a:f6:e2:02:b0:
                    d2:2b:e7:56:4f:47:0b:44:5d:d8:7d:27:48:22:45:
                    e7:56:97:2f:46:8a:72:e8:2a:13:0f:41:45:fa:c6:
                    2a:1c:6d:29:72:88:23:84:3d:17:64:04:49:df:fe:
                    16:40:99:16:7f:a9:d5:94:ff:2b:f8:41:82:3a:70:
                    b2:3e:95:39:4e:a8:5c:3c:b7:55:32:93:95:b3:b1:
                    b9:1b:24:d5:94:70:51:28:df:16:4e:34:e4:59:e0:
                    ad:b0:d5:69:a3:37:cd:9e:db:b9:de:ef:2a:52:8f:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:52:28:E6:F4:E8:25:17:73:A5:42:E5:FB:DA:40:6F:7B:44:1E:A6
            X509v3 Authority Key Identifier:
                keyid:EA:F7:4D:BB:44:8B:B3:75:BC:59:BE:74:DE:D7:B2:58:E0:95:3F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2510213418f85a88f8db8d2ffb6e84078f9f70b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ec2d1981-f6b5-4e3b-aacc-a72101157fbe/30633b898a5c1bd97e78358424165a4a020251da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ec2d1981-f6b5-4e3b-aacc-a72101157fbe/2510213418f85a88f8db8d2ffb6e84078f9f70b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:c5:77:46:f8:d6:1f:24:2d:af:2a:31:a5:3e:a9:2a:b3:bc:
         9a:ac:39:d5:02:95:c9:69:59:5c:57:2a:65:cd:ad:c6:a7:b5:
         50:b9:f0:cb:10:27:e2:aa:08:c5:68:01:b2:15:81:2b:ca:1e:
         d2:8a:b9:cd:fe:33:c9:b3:d4:73:c1:a3:1e:f3:cb:65:cb:96:
         79:19:14:cf:71:b1:4d:c6:8c:ee:9b:72:d7:f5:f0:1f:6d:53:
         6b:b8:67:a9:79:e3:72:e5:1d:72:29:25:9b:bd:42:95:47:dd:
         a5:7e:d4:b1:08:20:86:95:86:32:47:dc:02:ab:1f:c7:41:80:
         1e:44:7a:29:92:15:97:32:02:60:ed:c3:03:04:67:73:de:6f:
         79:80:c6:22:01:ed:47:dd:c4:78:e8:ad:2c:23:cc:6d:c3:dd:
         ec:5e:a8:12:32:77:d2:9f:04:e2:69:c6:72:05:95:7d:10:db:
         68:80:8a:b8:81:9b:1e:08:dd:1d:a2:a7:e1:02:d1:b5:c9:bb:
         69:04:fb:0f:b1:ca:74:ff:80:43:68:74:3b:4b:f3:21:9c:ca:
         bb:81:90:a0:a9:bc:a9:66:31:0e:f9:cb:f1:dc:df:88:a3:51:
         15:6d:dd:f2:68:b6:60:09:f4:79:db:58:2f:cc:a2:7a:23:df:
         02:32:9c:47
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDkfSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI1
MTAyMTM0MThmODVhODhmOGRiOGQyZmZiNmU4NDA3OGY5ZjcwYjAwHhcNMjExMjI1
MDMwMDAwWhcNMjMxMjI4MDMwMDAwWjAzMTEwLwYDVQQDEygzMDYzM2I4OThhNWMx
YmQ5N2U3ODM1ODQyNDE2NWE0YTAyMDI1MWRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAupzuUAMJJczOwqkjSQkB0ebtPuiSr2YMBQMPGqP6PMBSp2D8
RofgmzJokeTHA88a059UPimqCf//PvI1Ww6r5wR/IhFoxbbGA5KBSpV47A/9hnZq
o5pHlu+JbgksefTCc5/AtBWPDKGZfhnSioZp45UnRwKhcGS+d592fVBpsxMeQb4r
k5z5b5Mg3I6anP67evbiArDSK+dWT0cLRF3YfSdIIkXnVpcvRopy6CoTD0FF+sYq
HG0pcogjhD0XZARJ3/4WQJkWf6nVlP8r+EGCOnCyPpU5TqhcPLdVMpOVs7G5GyTV
lHBRKN8WTjTkWeCtsNVpozfNntu53u8qUo/E7QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFNSKOb06CUXc6VC5fvaQG97RB6mMB8GA1UdIwQYMBaAFOr3TbtEi7N1vFm+
dN7XsljglT8uMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjUxMDIx
MzQxOGY4NWE4OGY4ZGI4ZDJmZmI2ZTg0MDc4ZjlmNzBiMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWMyZDE5ODEtZjZiNS00ZTNiLWFhY2MtYTcyMTAx
MTU3ZmJlLzMwNjMzYjg5OGE1YzFiZDk3ZTc4MzU4NDI0MTY1YTRhMDIwMjUxZGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYzJkMTk4MS1mNmI1LTRlM2ItYWFjYy1hNzIx
MDExNTdmYmUvMjUxMDIxMzQxOGY4NWE4OGY4ZGI4ZDJmZmI2ZTg0MDc4ZjlmNzBi
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArElJDANBgkqhkiG9w0BAQsFAAOCAQEANcV3RvjWHyQtryox
pT6pKrO8mqw51QKVyWlZXFcqZc2txqe1ULnwyxAn4qoIxWgBshWBK8oe0oq5zf4z
ybPUc8GjHvPLZcuWeRkUz3GxTcaM7pty1/XwH21Ta7hnqXnjcuUdciklm71ClUfd
pX7UsQgghpWGMkfcAqsfx0GAHkR6KZIVlzICYO3DAwRnc95veYDGIgHtR93EeOit
LCPMbcPd7F6oEjJ30p8E4mnGcgWVfRDbaICKuIGbHgjdHaKn4QLRtcm7aQT7D7HK
dP+AQ2h0O0vzIZzKu4GQoKm8qWYxDvnL8dzfiKNRFW3d8mi2YAn0edtYL8yieiPf
AjKcRw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 08:03:58 2023 by rpki-client on console-fra.rpki-client.org