Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/d862a8b8b2fa5c955bcf06b26f16d86f8e541353.roa
File:                     d862a8b8b2fa5c955bcf06b26f16d86f8e541353.roa (raw, json)
Hash identifier:          imPZMxcP8SI5Iywlpm0gVfxyzFSUT8R1wsRk4kykZ3A=
Subject key identifier:   4F:E7:1D:FC:C2:D7:4E:5B:C8:ED:EC:92:E0:6D:39:D3:24:83:48:91
Certificate issuer:       /CN=9fbfa45db21e97087d6b1789e849e148e8fceaeb
Certificate serial:       01C3D6
Authority key identifier: 3C:5C:5F:66:95:B7:9E:F0:B3:84:69:F4:66:61:8F:DA:5B:D4:A7:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fbfa45db21e97087d6b1789e849e148e8fceaeb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/d862a8b8b2fa5c955bcf06b26f16d86f8e541353.roa
Signing time:             Sun 19 Sep 2021 02:55:11 +0000
ROA not before:           Sat 18 Sep 2021 03:00:00 +0000
ROA not after:            Mon 18 Sep 2023 03:00:00 +0000
asID:                     264778
IP address blocks:        200.59.184.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115670 (0x1c3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbfa45db21e97087d6b1789e849e148e8fceaeb
        Validity
            Not Before: Sep 18 03:00:00 2021 GMT
            Not After : Sep 18 03:00:00 2023 GMT
        Subject: CN=d862a8b8b2fa5c955bcf06b26f16d86f8e541353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:63:cb:c4:f7:8f:ae:5d:96:34:36:91:f3:
                    98:11:a4:d8:ff:83:bc:fc:20:c5:d2:ea:27:62:44:
                    9c:d2:e4:43:ca:1c:a9:1e:49:ce:fc:04:89:fb:ce:
                    6e:58:09:a5:90:7a:4d:f3:14:e3:ed:1d:32:1e:66:
                    24:83:fd:e8:ef:20:79:aa:8e:c4:2c:14:49:dd:f9:
                    12:a9:f9:6f:02:85:b1:c5:59:fe:c7:38:71:3b:10:
                    d9:9a:4a:9f:a6:e3:70:43:65:a1:81:cb:48:ca:a6:
                    c1:e1:90:52:48:21:bd:13:25:11:f1:d6:9c:22:05:
                    66:cd:79:48:9b:74:66:4c:e0:7d:bb:68:82:b6:ab:
                    8c:39:02:77:24:92:b7:3c:fb:a1:41:ba:78:73:a2:
                    79:e5:a8:59:74:76:b5:12:c9:6e:e6:9d:52:aa:40:
                    28:b0:a4:c0:5f:a9:92:7f:16:3e:80:ba:63:b0:29:
                    ea:8e:88:db:3e:d7:29:a2:b4:6e:da:dd:56:70:54:
                    c9:54:ba:ed:cd:e0:f0:51:9d:55:cc:55:8b:ad:d7:
                    32:85:01:c7:e8:76:00:51:e5:0a:b4:cc:20:5b:32:
                    34:66:ea:23:1b:26:03:47:55:b8:8d:34:3b:8b:11:
                    61:b8:b1:fc:23:3b:3f:86:68:14:1a:21:62:b6:ff:
                    98:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E7:1D:FC:C2:D7:4E:5B:C8:ED:EC:92:E0:6D:39:D3:24:83:48:91
            X509v3 Authority Key Identifier:
                keyid:3C:5C:5F:66:95:B7:9E:F0:B3:84:69:F4:66:61:8F:DA:5B:D4:A7:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fbfa45db21e97087d6b1789e849e148e8fceaeb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/d862a8b8b2fa5c955bcf06b26f16d86f8e541353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/9fbfa45db21e97087d6b1789e849e148e8fceaeb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:7d:04:e8:3d:51:b7:78:62:3f:4e:ae:fb:7b:78:22:9d:27:
         32:47:6b:4a:e5:08:f3:84:9b:61:8b:e3:1f:13:fe:40:d8:ea:
         ce:ac:5d:cb:4c:b7:4a:1d:15:cc:8c:8e:24:c9:74:92:b2:c6:
         b5:47:75:50:bc:ab:95:19:06:a5:04:a1:7e:67:27:0f:52:c9:
         eb:c9:c8:5c:ac:96:e6:61:26:f3:97:5a:7d:8a:3a:11:ca:07:
         c6:0a:29:14:f3:d9:05:41:e2:23:9c:60:73:1f:a9:a9:26:f5:
         94:a6:7e:0e:af:53:33:0f:b3:44:e0:da:e9:e3:ce:6b:a9:a7:
         e2:d2:44:ba:7c:b9:27:17:ae:8c:22:30:92:2a:d7:66:81:8a:
         0c:49:f6:23:a3:28:67:04:35:51:54:8d:73:9d:b0:ce:ed:17:
         bc:fa:c9:2b:09:f8:28:9d:19:38:d6:dd:a1:40:a9:24:92:1e:
         c5:f3:17:18:f2:be:0f:53:da:12:b1:c8:e2:e1:9c:60:52:e8:
         4e:f4:bf:58:a5:3e:50:fe:2d:5f:e2:af:b3:6b:ad:0e:63:23:
         0f:c3:f7:fa:c7:e5:80:36:1d:8e:3d:6b:d1:41:dd:97:3c:d9:
         75:91:36:fc:1a:10:c3:a0:d5:a2:a5:50:76:fe:0e:e1:9d:1f:
         14:07:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 17 09:10:56 2023 by rpki-client on console-fra.rpki-client.org