Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/e6e4e2a2336498bc1ab649a12f37ba17c1a29517.roa
File:                     e6e4e2a2336498bc1ab649a12f37ba17c1a29517.roa (raw, json)
Hash identifier:          ewhQh7XRUku7FfCTb5UlvGEmMIbUS3sun5q0pg7P4+A=
Subject key identifier:   7D:BE:DC:65:9C:28:29:8F:51:9B:AC:60:40:B4:F1:5B:EA:19:AC:C1
Certificate issuer:       /CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Certificate serial:       1868AC
Authority key identifier: 34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/e6e4e2a2336498bc1ab649a12f37ba17c1a29517.roa
Signing time:             Thu 09 Jun 2022 01:20:02 +0000
ROA not before:           Wed 28 Apr 2021 03:00:00 +0000
ROA not after:            Fri 28 Apr 2023 03:00:00 +0000
asID:                     271906
IP address blocks:        200.85.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1599660 (0x1868ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
        Validity
            Not Before: Apr 28 03:00:00 2021 GMT
            Not After : Apr 28 03:00:00 2023 GMT
        Subject: CN=e6e4e2a2336498bc1ab649a12f37ba17c1a29517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:14:f1:b3:76:1b:d6:dc:e1:9a:50:79:32:fd:
                    d4:b4:e0:6e:e2:d3:c9:26:62:6e:f4:b7:a8:34:f2:
                    b0:d2:9c:4f:a1:3e:ca:32:90:53:de:a8:39:26:ae:
                    c1:84:4d:4d:bf:84:b1:33:fb:98:04:6c:4f:a1:d4:
                    40:e5:e7:43:b7:38:fa:55:2b:59:e3:8c:a9:82:45:
                    9b:51:e6:b4:6a:2b:20:e1:9d:0e:5c:1d:bd:e9:f9:
                    50:cc:f9:a4:40:71:da:5b:1c:c8:18:af:90:86:38:
                    78:41:ae:f4:06:1f:e8:09:f3:1a:38:fe:34:3c:be:
                    fc:29:0b:39:a6:cf:16:fd:3d:9a:2a:27:c9:6e:92:
                    7a:f0:6d:6d:19:4e:fa:7d:06:5f:26:0a:ed:4e:c8:
                    5f:8a:66:90:e2:c9:06:db:0d:f7:6e:84:93:bd:f3:
                    2e:03:4d:04:cd:94:29:b0:64:0e:27:87:35:46:59:
                    35:d5:00:b9:46:4d:63:f3:40:4a:4e:54:78:14:ee:
                    ee:51:4e:11:07:4f:a7:ae:a3:01:b4:2e:5e:87:54:
                    0f:f6:b4:ad:ec:02:9d:49:82:88:cb:bb:83:d6:e7:
                    bb:44:1b:1b:0a:88:ee:69:16:44:d3:69:86:42:4d:
                    d1:a1:84:24:38:07:71:f9:e0:5e:26:b8:86:7c:cf:
                    65:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BE:DC:65:9C:28:29:8F:51:9B:AC:60:40:B4:F1:5B:EA:19:AC:C1
            X509v3 Authority Key Identifier:
                keyid:34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/e6e4e2a2336498bc1ab649a12f37ba17c1a29517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:c9:99:c2:ab:ba:7d:ef:3d:dc:75:62:f4:14:6b:1e:25:33:
         92:74:fe:9f:8f:6a:e7:98:f1:14:11:7d:7b:0f:68:ba:a8:7b:
         4a:6b:96:00:1f:a3:c0:5a:50:2b:12:f7:5a:f9:d7:02:b1:ed:
         83:2f:78:bb:fd:9a:e5:05:e3:c8:37:42:41:6f:f4:b6:88:4b:
         0a:76:5e:90:4f:69:59:65:fc:1c:ee:c0:22:96:07:9d:4d:89:
         1b:18:41:b4:38:01:86:6a:54:50:f9:8d:f5:f2:6a:c4:ba:65:
         f2:a6:f2:64:b3:ae:10:2e:a9:32:3c:8d:73:86:05:58:ef:02:
         44:23:68:3e:3b:67:86:8c:c4:cc:b1:07:26:eb:47:4f:d2:33:
         b0:26:b3:b9:ea:8f:1c:0b:40:86:fa:4d:1a:15:c9:59:ec:ac:
         cb:17:e8:49:1d:61:7e:3e:ba:25:3d:44:10:48:79:d5:15:9b:
         f1:a9:f3:57:a2:3e:05:24:83:43:2f:1d:30:ba:ae:a4:09:3a:
         dc:67:13:c9:c1:2e:91:4d:d0:5b:91:b2:45:b3:67:e5:0a:8c:
         11:73:42:db:59:df:3f:df:bf:01:44:8f:98:b7:10:b3:d8:49:
         4e:7d:d6:48:cd:56:70:71:8b:00:0a:5f:b8:06:c4:9d:f4:ac:
         14:78:15:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org