Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/3272fc53ffe1ea2b52b4e3c3cf12913c01dabba0.roa
File:                     3272fc53ffe1ea2b52b4e3c3cf12913c01dabba0.roa (raw, json)
Hash identifier:          hqfeCBU7ukNbRCe2TPUvLqTLCmy7Saaptcj8yTemWMc=
Subject key identifier:   D6:F3:91:9C:21:E0:64:22:CB:5A:D2:05:97:85:96:37:5B:7C:58:F2
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       0E0FA0
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/3272fc53ffe1ea2b52b4e3c3cf12913c01dabba0.roa
Signing time:             Wed 24 Mar 2021 14:41:11 +0000
ROA not before:           Wed 24 Mar 2021 14:41:08 +0000
ROA not after:            Tue 24 Mar 2026 14:41:08 +0000
asID:                     61468
IP address blocks:        200.93.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921504 (0xe0fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Mar 24 14:41:08 2021 GMT
            Not After : Mar 24 14:41:08 2026 GMT
        Subject: CN=3272fc53ffe1ea2b52b4e3c3cf12913c01dabba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:fa:54:a6:09:33:8c:0d:1d:85:6b:30:b2:
                    aa:c6:f6:a9:32:06:e3:83:ad:b6:e2:76:5d:8d:b4:
                    b4:6d:88:dd:75:74:74:13:94:1d:27:ba:97:6c:24:
                    a9:dc:e5:c5:14:69:84:ee:d0:ac:3f:d5:80:22:d0:
                    35:6a:14:ee:54:0f:21:21:21:34:b1:3d:c6:7e:43:
                    41:ae:21:3b:22:b0:4e:17:5f:ab:2c:4d:5d:99:05:
                    e1:ef:0a:24:cb:ec:de:6e:17:82:1c:d6:7e:44:09:
                    2d:20:7d:ea:4a:de:04:55:78:00:bd:e2:f5:52:83:
                    e0:81:cf:80:a5:ff:86:5d:c1:76:f9:4e:2a:50:08:
                    95:b8:a8:4e:ce:5d:57:12:91:83:88:f3:97:44:72:
                    76:3a:f1:35:26:3d:a5:ee:3f:8f:1c:29:31:dc:57:
                    6a:f6:89:13:63:98:89:b3:b7:43:61:a3:4b:36:61:
                    e3:ae:1e:5d:b5:24:32:79:49:76:02:c4:04:2c:e5:
                    0a:5f:1c:42:02:ac:3b:6a:4a:4b:5d:89:19:8f:57:
                    ce:d4:f5:60:97:cc:f8:ce:cc:12:29:7d:9c:6f:d9:
                    6e:a3:51:ca:e8:0e:fe:97:85:d9:d9:3c:83:8c:c4:
                    ed:cf:94:ba:60:43:f5:f4:6f:59:fb:b4:1b:48:db:
                    a7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F3:91:9C:21:E0:64:22:CB:5A:D2:05:97:85:96:37:5B:7C:58:F2
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/3272fc53ffe1ea2b52b4e3c3cf12913c01dabba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:f1:97:f8:71:97:9f:fd:5b:a7:fb:86:cf:26:1a:bc:3c:2c:
         a1:4a:d0:49:aa:43:2b:26:02:cd:71:75:7d:2e:cc:ba:6f:f5:
         dd:62:6a:51:ef:33:3b:51:b6:a3:35:69:83:32:e6:59:91:df:
         f1:4e:68:dc:ac:51:db:b6:f8:e5:cc:d2:02:49:af:22:e1:dd:
         b8:d0:33:95:c0:5f:bd:a3:1f:82:3d:29:b3:4c:49:36:f9:1e:
         0e:db:18:46:4f:d4:f0:cb:aa:48:cd:6a:90:67:a9:ee:9f:75:
         c6:49:21:c7:3d:dd:b6:a2:4e:ee:e1:ff:aa:0c:41:f4:3c:ae:
         26:10:9f:1e:f3:d6:ec:de:0a:cb:3c:de:82:35:ad:4b:e8:89:
         a6:88:78:9c:f5:96:4c:4d:3d:75:59:59:89:b2:44:a7:a1:eb:
         4a:20:17:a2:de:e6:6d:78:9a:36:b7:6c:42:b2:61:06:56:6e:
         ae:55:cd:b7:c3:4e:dc:44:c2:7e:b4:62:5f:09:39:8d:2d:40:
         2f:f2:1f:72:67:3c:45:ce:22:55:5e:6c:c6:09:69:c3:bf:da:
         45:7a:26:95:b8:5f:f4:90:8e:74:0c:22:d2:5e:6c:8c:21:a9:
         1e:11:fb:8e:42:16:ae:71:e2:6c:fa:2c:88:9c:c8:bb:2c:40:
         c5:5f:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 17:34:07 2023 by rpki-client on console-fra.rpki-client.org