Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/16e7d0a1ef579a394609e0b4291b9d7a93c5c52d.roa
File:                     16e7d0a1ef579a394609e0b4291b9d7a93c5c52d.roa (raw, json)
Hash identifier:          uzVlbY/ObmASOA/nCyMIM8EGIC1ua5BXfgwf9SsaN8s=
Subject key identifier:   96:F3:8D:35:95:50:A1:DD:31:9F:F5:F3:06:72:D7:EC:FF:6F:00:1A
Certificate issuer:       /CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Certificate serial:       1BF387
Authority key identifier: 34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/16e7d0a1ef579a394609e0b4291b9d7a93c5c52d.roa
Signing time:             Mon 31 Oct 2022 13:56:57 +0000
ROA not before:           Mon 26 Apr 2021 03:00:00 +0000
ROA not after:            Fri 28 Apr 2023 03:00:00 +0000
asID:                     271906
IP address blocks:        200.85.128.0/21 maxlen: 24
                          200.85.128.0/24 maxlen: 24
                          200.85.129.0/24 maxlen: 24
                          200.85.130.0/24 maxlen: 24
                          200.85.131.0/24 maxlen: 24
                          200.85.132.0/24 maxlen: 24
                          200.85.133.0/24 maxlen: 24
                          200.85.134.0/24 maxlen: 24
                          200.85.135.0/24 maxlen: 24
                          200.85.140.0/22 maxlen: 24
                          200.85.140.0/24 maxlen: 24
                          200.85.141.0/24 maxlen: 24
                          200.85.142.0/24 maxlen: 24
                          200.85.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831815 (0x1bf387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
        Validity
            Not Before: Apr 26 03:00:00 2021 GMT
            Not After : Apr 28 03:00:00 2023 GMT
        Subject: CN=16e7d0a1ef579a394609e0b4291b9d7a93c5c52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f7:3c:d3:a5:1c:24:7f:50:e1:f4:2a:53:86:
                    cd:b0:c3:4e:66:85:01:5f:97:d0:a8:3e:09:14:45:
                    1d:ce:c1:ea:ba:9b:b4:a2:84:75:54:8c:a9:af:72:
                    4c:88:48:b8:25:ec:08:48:2c:e4:0d:64:d1:aa:28:
                    d4:d3:f4:3f:43:b7:ab:37:3b:65:20:70:61:eb:91:
                    e6:d1:3c:be:14:48:46:c1:96:db:fb:85:d7:ff:38:
                    17:1c:6a:2d:3f:4a:ad:d4:b9:66:a5:cd:f3:99:60:
                    4f:17:b7:92:b4:9f:83:e2:42:ce:d8:85:6f:e1:04:
                    c6:a3:c4:4b:81:6f:30:10:63:cf:91:0a:45:8b:26:
                    ea:8e:30:96:55:60:73:bd:1d:95:12:61:45:be:da:
                    6d:50:41:04:ac:85:21:f3:19:6d:4b:1a:01:1b:9a:
                    9a:c2:65:c3:3c:d2:2d:cb:d8:e5:22:72:1a:e5:08:
                    5a:77:08:d3:3c:36:32:e6:75:2d:78:ae:fb:f5:c3:
                    74:c4:5c:25:b0:b1:91:37:b1:40:ad:77:d2:44:66:
                    05:1d:a1:1c:74:23:f3:f3:37:ec:01:d9:6d:97:c0:
                    5e:e2:7b:9a:44:ce:a3:59:2e:d8:8d:75:ea:e0:88:
                    7b:f0:b4:2e:a2:37:6a:53:44:da:c1:6f:2e:80:8f:
                    50:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F3:8D:35:95:50:A1:DD:31:9F:F5:F3:06:72:D7:EC:FF:6F:00:1A
            X509v3 Authority Key Identifier:
                keyid:34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/16e7d0a1ef579a394609e0b4291b9d7a93c5c52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.128.0/21
                  200.85.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:0b:68:7f:99:8a:06:9c:85:53:39:1c:0a:e3:10:f1:54:54:
         df:ce:77:9d:78:67:9e:6b:ef:20:df:71:51:97:9b:dc:e8:19:
         fc:81:53:7b:f5:4b:47:58:6a:91:55:cb:b4:4e:e8:df:55:b6:
         50:ff:90:b2:2d:eb:dd:8f:d9:1a:15:b3:22:1f:61:f8:c2:42:
         b3:f8:c9:b0:dd:7c:db:95:42:23:58:c8:a0:88:8d:1b:90:5c:
         b9:78:59:c4:cd:cf:ec:a7:d2:f8:3e:eb:7c:ee:d3:6f:62:fa:
         49:6f:a3:c4:ae:a6:a1:13:9e:10:47:b2:3d:a6:e6:8c:22:5c:
         c4:de:ff:6a:bc:27:a5:a9:32:96:29:bd:f2:12:b6:bc:dc:ba:
         4d:4b:c9:42:0e:3e:61:9c:7f:ff:3a:58:be:a3:e9:5b:63:55:
         11:aa:26:82:2a:2d:90:44:7e:f8:87:d5:1a:2a:7c:69:cd:dc:
         c4:bd:7c:3a:51:ff:1a:31:a4:38:3e:71:18:fc:01:bd:49:dd:
         44:56:38:e7:35:b9:50:47:d9:7d:d5:21:82:a0:1d:f9:6f:e9:
         cf:ec:2c:1d:b0:5c:51:47:64:bd:75:7c:85:30:07:64:60:b8:
         23:bf:19:8f:3e:30:02:0d:ac:ab:51:40:db:a0:2e:69:ca:4f:
         37:af:bd:a7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDG/OHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFh
NTM2ZTIxMTJmYjZmYmQ0ZmQ5MGI2NDRjNmZkNjZhY2JhNzk3ZWEwHhcNMjEwNDI2
MDMwMDAwWhcNMjMwNDI4MDMwMDAwWjAzMTEwLwYDVQQDEygxNmU3ZDBhMWVmNTc5
YTM5NDYwOWUwYjQyOTFiOWQ3YTkzYzVjNTJkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiPc806UcJH9Q4fQqU4bNsMNOZoUBX5fQqD4JFEUdzsHqupu0
ooR1VIypr3JMiEi4JewISCzkDWTRqijU0/Q/Q7erNztlIHBh65Hm0Ty+FEhGwZbb
+4XX/zgXHGotP0qt1Llmpc3zmWBPF7eStJ+D4kLO2IVv4QTGo8RLgW8wEGPPkQpF
iybqjjCWVWBzvR2VEmFFvtptUEEErIUh8xltSxoBG5qawmXDPNIty9jlInIa5Qha
dwjTPDYy5nUteK779cN0xFwlsLGRN7FArXfSRGYFHaEcdCPz8zfsAdltl8Be4nua
RM6jWS7YjXXq4Ih78LQuojdqU0TawW8ugI9Q+QIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFJbzjTWVUKHdMZ/18wZy1+z/bwAaMB8GA1UdIwQYMBaAFDSYojt/V7RRz3Ue
IXx4Xg++NYeHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWE1MzZl
MjExMmZiNmZiZDRmZDkwYjY0NGM2ZmQ2NmFjYmE3OTdlYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjRiYzVkN2UtZWEzYS00YWIzLWE4YTUtNTkwM2Vi
NGYxNzI2LzE2ZTdkMGExZWY1NzlhMzk0NjA5ZTBiNDI5MWI5ZDdhOTNjNWM1MmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNGJjNWQ3ZS1lYTNhLTRhYjMtYThhNS01OTAz
ZWI0ZjE3MjYvYWE1MzZlMjExMmZiNmZiZDRmZDkwYjY0NGM2ZmQ2NmFjYmE3OTdl
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEA8hVgAMEAshVjDANBgkqhkiG9w0BAQsFAAOCAQEAAgtof5mK
BpyFUzkcCuMQ8VRU3853nXhnnmvvIN9xUZeb3OgZ/IFTe/VLR1hqkVXLtE7o31W2
UP+Qsi3r3Y/ZGhWzIh9h+MJCs/jJsN1825VCI1jIoIiNG5BcuXhZxM3P7KfS+D7r
fO7Tb2L6SW+jxK6moROeEEeyPabmjCJcxN7/arwnpakylim98hK2vNy6TUvJQg4+
YZx//zpYvqPpW2NVEaomgiotkER++IfVGip8ac3cxL18OlH/GjGkOD5xGPwBvUnd
RFY45zW5UEfZfdUhgqAd+W/pz+wsHbBcUUdkvXV8hTAHZGC4I78Zjz4wAg2sq1FA
26AuacpPN6+9pw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:58 2023 by rpki-client on console-ams.rpki-client.org