Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5db403f-02ca-49b9-aabc-e02d6eddd22d/15d42edc66f977533222bca89edc765600e86833.roa
File:                     15d42edc66f977533222bca89edc765600e86833.roa (raw, json)
Hash identifier:          Sqg8UWNWD9HUeYVAOPjG3R+tBbzd8QDBh9Jaoo5CZsA=
Subject key identifier:   44:15:50:C9:53:8B:B3:06:F7:69:68:60:C1:BA:01:81:38:87:21:DB
Certificate issuer:       /CN=58e24a8af009b071877be55916e0b57102c2f9df
Certificate serial:       0589
Authority key identifier: C1:84:AA:C3:0A:E0:BA:86:CA:37:E2:52:AE:A0:FB:D3:44:F7:05:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58e24a8af009b071877be55916e0b57102c2f9df.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5db403f-02ca-49b9-aabc-e02d6eddd22d/15d42edc66f977533222bca89edc765600e86833.roa
Signing time:             Mon 05 Jul 2021 19:07:02 +0000
ROA not before:           Mon 05 Jul 2021 03:00:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     265554
IP address blocks:        201.139.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417 (0x589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e24a8af009b071877be55916e0b57102c2f9df
        Validity
            Not Before: Jul  5 03:00:00 2021 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject: CN=15d42edc66f977533222bca89edc765600e86833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:21:bc:46:ed:3c:74:2b:6e:d9:32:a6:f6:
                    00:7a:25:53:15:a5:81:39:2b:60:49:2e:94:66:23:
                    a7:bc:ea:53:57:27:b5:a3:1d:78:1f:ad:4b:b3:9e:
                    7e:4d:43:9d:42:e4:9f:26:a0:52:39:85:99:df:00:
                    c0:f6:ee:0a:7e:08:91:79:08:e8:51:c8:fc:16:05:
                    3a:7c:52:07:3f:fc:79:01:05:6c:53:d5:5c:82:64:
                    ff:f0:8c:12:cd:5a:17:06:9e:bd:92:9d:f9:95:73:
                    0c:28:7a:83:2f:cf:6c:15:1b:16:5e:0d:e4:45:4c:
                    5f:03:da:d6:e2:96:e0:78:c3:8c:67:6e:69:53:e0:
                    9e:53:94:c3:e7:4f:5f:da:4f:5d:6d:85:3a:ef:5b:
                    9d:4d:93:4c:f6:24:5e:6f:47:1e:72:2d:68:07:e0:
                    87:19:19:2f:0f:d3:d9:2c:4f:6a:c9:79:80:1d:80:
                    e7:09:32:e2:4f:5a:3c:3c:00:83:e6:52:c9:70:fd:
                    15:a3:ae:d7:69:22:58:54:3a:22:82:a5:fa:ac:8d:
                    13:51:10:d6:a3:16:2d:31:77:25:50:75:60:79:1a:
                    b8:89:fb:10:34:85:7d:0d:ac:0a:a3:87:0e:0e:f0:
                    34:f3:94:27:d3:88:9c:ea:47:85:cf:2b:7b:44:28:
                    04:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:15:50:C9:53:8B:B3:06:F7:69:68:60:C1:BA:01:81:38:87:21:DB
            X509v3 Authority Key Identifier:
                keyid:C1:84:AA:C3:0A:E0:BA:86:CA:37:E2:52:AE:A0:FB:D3:44:F7:05:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58e24a8af009b071877be55916e0b57102c2f9df.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5db403f-02ca-49b9-aabc-e02d6eddd22d/15d42edc66f977533222bca89edc765600e86833.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5db403f-02ca-49b9-aabc-e02d6eddd22d/58e24a8af009b071877be55916e0b57102c2f9df.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:be:76:5c:3e:40:c7:b3:c1:2d:cb:e0:7e:25:d5:6e:a8:df:
         09:52:cf:f5:4f:09:36:65:8a:fe:37:96:96:7d:a5:dc:2d:59:
         83:d2:6b:a7:fb:d8:06:f5:79:b9:ec:56:16:50:d9:5d:95:b7:
         20:ca:c6:eb:f4:66:0c:09:5d:cf:cd:56:e9:9a:33:80:32:e2:
         96:48:8e:54:b4:75:fb:34:89:9e:04:c9:f4:50:a4:f2:1c:72:
         c6:cf:47:4c:d0:47:5d:af:db:6e:0a:e4:82:aa:b1:14:e5:b4:
         33:49:22:04:3f:a8:c9:28:f5:e6:c4:bc:b0:46:ff:04:56:15:
         5e:21:94:33:11:09:0b:61:c9:e8:31:26:54:dd:99:cc:e6:c9:
         6b:e1:4a:73:11:cd:23:73:54:b5:d2:15:81:06:78:82:5a:5d:
         53:b8:3c:1b:58:76:d0:22:21:7e:e8:a8:3b:01:0c:ef:cd:1a:
         37:2c:0f:a1:14:2e:91:c2:1a:48:ba:3f:9d:8a:66:2f:c8:5c:
         6d:92:4f:53:ad:64:f0:19:45:fd:30:ab:92:d8:cf:de:81:fe:
         61:81:66:42:c8:a7:e5:c3:e9:f5:15:de:5a:5b:d1:db:82:0d:
         6c:54:c0:12:02:24:e8:4f:ac:f0:03:6f:5c:af:ef:90:9a:a1:
         72:22:39:a4
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBYkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThl
MjRhOGFmMDA5YjA3MTg3N2JlNTU5MTZlMGI1NzEwMmMyZjlkZjAeFw0yMTA3MDUw
MzAwMDBaFw0yMzA3MDUwMzAwMDBaMDMxMTAvBgNVBAMTKDE1ZDQyZWRjNjZmOTc3
NTMzMjIyYmNhODllZGM3NjU2MDBlODY4MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCWJiG8Ru08dCtu2TKm9gB6JVMVpYE5K2BJLpRmI6e86lNXJ7Wj
HXgfrUuznn5NQ51C5J8moFI5hZnfAMD27gp+CJF5COhRyPwWBTp8Ugc//HkBBWxT
1VyCZP/wjBLNWhcGnr2SnfmVcwwoeoMvz2wVGxZeDeRFTF8D2tbiluB4w4xnbmlT
4J5TlMPnT1/aT11thTrvW51Nk0z2JF5vRx5yLWgH4IcZGS8P09ksT2rJeYAdgOcJ
MuJPWjw8AIPmUslw/RWjrtdpIlhUOiKCpfqsjRNRENajFi0xdyVQdWB5GriJ+xA0
hX0NrAqjhw4O8DTzlCfTiJzqR4XPK3tEKASZAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQURBVQyVOLswb3aWhgwboBgTiHIdswHwYDVR0jBBgwFoAUwYSqwwrguobKN+JS
rqD700T3BegwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS81OGUyNGE4
YWYwMDliMDcxODc3YmU1NTkxNmUwYjU3MTAyYzJmOWRmLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mNWRiNDAzZi0wMmNhLTQ5YjktYWFiYy1lMDJkNmVk
ZGQyMmQvMTVkNDJlZGM2NmY5Nzc1MzMyMjJiY2E4OWVkYzc2NTYwMGU4NjgzMy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2Y1ZGI0MDNmLTAyY2EtNDliOS1hYWJjLWUwMmQ2
ZWRkZDIyZC81OGUyNGE4YWYwMDliMDcxODc3YmU1NTkxNmUwYjU3MTAyYzJmOWRm
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAyYvVMA0GCSqGSIb3DQEBCwUAA4IBAQA+vnZcPkDHs8Ety+B+
JdVuqN8JUs/1Twk2ZYr+N5aWfaXcLVmD0mun+9gG9Xm57FYWUNldlbcgysbr9GYM
CV3PzVbpmjOAMuKWSI5UtHX7NImeBMn0UKTyHHLGz0dM0Eddr9tuCuSCqrEU5bQz
SSIEP6jJKPXmxLywRv8EVhVeIZQzEQkLYcnoMSZU3ZnM5slr4UpzEc0jc1S10hWB
BniCWl1TuDwbWHbQIiF+6Kg7AQzvzRo3LA+hFC6RwhpIuj+dimYvyFxtkk9TrWTw
GUX9MKuS2M/egf5hgWZCyKflw+n1Fd5aW9Hbgg1sVMASAiToT6zwA29cr++QmqFy
Ijmk
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org