Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/826a6f32c3d22a0322d4eb25e65c5fba4ad1f60e.roa
File:                     826a6f32c3d22a0322d4eb25e65c5fba4ad1f60e.roa (raw, json)
Hash identifier:          zs0ji/TEIGqgyRtihV/UmRKpNsGMO473bDs47dvNQvs=
Subject key identifier:   68:C3:D4:8C:A0:79:7D:2A:F1:65:89:B5:C6:8E:51:B0:88:E0:73:70
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       0E07D9
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/826a6f32c3d22a0322d4eb25e65c5fba4ad1f60e.roa
Signing time:             Wed 24 Mar 2021 14:41:09 +0000
ROA not before:           Wed 24 Mar 2021 14:41:08 +0000
ROA not after:            Tue 24 Mar 2026 14:41:08 +0000
asID:                     262212
IP address blocks:        201.218.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919513 (0xe07d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Mar 24 14:41:08 2021 GMT
            Not After : Mar 24 14:41:08 2026 GMT
        Subject: CN=826a6f32c3d22a0322d4eb25e65c5fba4ad1f60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7f:71:84:e8:60:aa:ca:11:56:e6:ed:e9:a4:
                    e3:c1:b8:22:ad:2f:d0:b7:71:e2:3f:18:5e:1d:08:
                    a5:06:b1:ff:d4:2a:eb:6b:2a:38:d7:c3:e0:81:3f:
                    a2:7e:55:15:f1:28:31:37:c0:f1:f7:65:9b:30:6e:
                    70:b2:97:4f:dc:31:ab:3d:64:aa:ed:45:0b:fb:f5:
                    9b:82:6d:c9:c5:bb:31:3e:64:4d:bc:6e:cd:d6:8b:
                    12:df:a0:9d:92:64:23:ea:55:d7:ff:80:82:30:4f:
                    9a:7b:fb:26:29:71:04:d7:4d:5c:c1:f3:09:55:47:
                    81:6b:c9:fc:8f:16:9e:91:17:92:b7:6d:ca:3a:5d:
                    d2:f3:bc:1f:f3:6c:b9:1a:4e:ed:07:2a:81:58:fc:
                    e4:b1:1a:da:48:49:3c:fa:f3:2b:d0:8f:cc:90:ac:
                    2d:9b:88:9a:4a:f8:47:c5:5b:4a:c1:be:e4:9f:8c:
                    b3:d6:8d:99:6d:00:ce:f1:20:02:46:45:9d:bd:49:
                    5d:dc:4e:33:5b:f5:13:ca:49:b5:33:5d:d2:e4:0e:
                    c5:99:b5:bc:fc:ab:3c:1d:6f:cf:bb:66:27:78:6b:
                    43:42:42:d4:a5:b3:45:ab:e7:af:7c:d7:e5:d5:67:
                    ca:90:dd:48:9b:e5:76:0f:da:08:86:2e:65:a7:c7:
                    f7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C3:D4:8C:A0:79:7D:2A:F1:65:89:B5:C6:8E:51:B0:88:E0:73:70
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/826a6f32c3d22a0322d4eb25e65c5fba4ad1f60e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:8d:95:af:07:81:b4:53:88:36:54:d4:1f:32:28:99:26:ff:
         88:ef:d0:a5:8c:cc:83:f7:24:6a:4d:30:12:14:81:1a:1a:f7:
         90:9a:34:46:f9:5c:3f:8c:70:ee:26:05:08:fd:16:fa:c6:b7:
         ed:79:c9:25:05:a9:4c:24:29:95:c3:ff:55:05:dc:bb:97:e4:
         98:65:89:bc:ce:be:37:71:77:17:a9:29:be:38:24:ce:77:7b:
         67:c2:c3:c5:f9:69:99:a5:c9:e3:e7:df:07:6c:ca:fb:c6:cc:
         ff:81:ee:49:1e:24:d6:74:05:0f:9c:bf:40:6a:b4:7c:6c:dd:
         b3:6e:56:0c:33:c4:9f:67:b2:92:5d:22:a8:be:63:05:d5:53:
         d8:da:67:40:07:32:fb:e8:05:8b:72:38:bd:5e:83:48:7b:42:
         46:01:ef:ff:94:29:a8:6f:cb:50:ad:16:44:ad:17:1c:1d:76:
         96:a0:97:9d:f0:e1:5d:b3:c3:fc:6d:3e:15:81:d8:bd:1c:df:
         31:a3:48:17:61:1c:09:3e:40:0d:b7:0e:ea:8b:c0:53:f2:35:
         3e:23:dd:32:75:1c:2c:28:67:cf:7e:2b:a1:7f:4b:ba:0d:e2:
         de:0a:53:75:57:2f:8e:12:64:4c:ff:1d:b6:ba:36:47:19:c3:
         e8:ea:d4:ad
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDgfZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjEwMzI0
MTQ0MTA4WhcNMjYwMzI0MTQ0MTA4WjAzMTEwLwYDVQQDEyg4MjZhNmYzMmMzZDIy
YTAzMjJkNGViMjVlNjVjNWZiYTRhZDFmNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjX9xhOhgqsoRVubt6aTjwbgirS/Qt3HiPxheHQilBrH/1Crr
ayo418PggT+iflUV8SgxN8Dx92WbMG5wspdP3DGrPWSq7UUL+/Wbgm3JxbsxPmRN
vG7N1osS36CdkmQj6lXX/4CCME+ae/smKXEE101cwfMJVUeBa8n8jxaekReSt23K
Ol3S87wf82y5Gk7tByqBWPzksRraSEk8+vMr0I/MkKwtm4iaSvhHxVtKwb7kn4yz
1o2ZbQDO8SACRkWdvUld3E4zW/UTykm1M13S5A7FmbW8/Ks8HW/Pu2YneGtDQkLU
pbNFq+evfNfl1WfKkN1Im+V2D9oIhi5lp8f39wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGjD1IygeX0q8WWJtcaOUbCI4HNwMB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r
EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm
MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5
YzE0NTY0LzgyNmE2ZjMyYzNkMjJhMDMyMmQ0ZWIyNWU2NWM1ZmJhNGFkMWY2MGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk
NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnaCzANBgkqhkiG9w0BAQsFAAOCAQEAj42VrweBtFOINlTU
HzIomSb/iO/QpYzMg/ckak0wEhSBGhr3kJo0RvlcP4xw7iYFCP0W+sa37XnJJQWp
TCQplcP/VQXcu5fkmGWJvM6+N3F3F6kpvjgkznd7Z8LDxflpmaXJ4+ffB2zK+8bM
/4HuSR4k1nQFD5y/QGq0fGzds25WDDPEn2eykl0iqL5jBdVT2NpnQAcy++gFi3I4
vV6DSHtCRgHv/5QpqG/LUK0WRK0XHB12lqCXnfDhXbPD/G0+FYHYvRzfMaNIF2Ec
CT5ADbcO6ovAU/I1PiPdMnUcLChnz34roX9Lug3i3gpTdVcvjhJkTP8dtro2RxnD
6OrUrQ==
-----END CERTIFICATE-----
Generated at Tue Sep 26 17:34:07 2023 by rpki-client on console-fra.rpki-client.org