Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/51e4405131d56a3f72ef6daa35918f43179af875.roa
File:                     51e4405131d56a3f72ef6daa35918f43179af875.roa (raw, json)
Hash identifier:          INMzdKPOkDSb+jE+UDuedm6edBLzQS23g6FdcDfW/QI=
Subject key identifier:   60:8D:D3:3C:9F:0A:44:99:97:5A:EA:68:8C:9D:55:35:D6:85:D5:28
Certificate issuer:       /CN=9e7a5fab05d84621ad4b78ccf141868a98875d29
Certificate serial:       132A01
Authority key identifier: 6E:4A:37:C8:01:68:41:93:FF:F7:E0:63:E3:9D:2C:C9:C5:B5:79:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7a5fab05d84621ad4b78ccf141868a98875d29.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/51e4405131d56a3f72ef6daa35918f43179af875.roa
Signing time:             Wed 10 Nov 2021 01:00:34 +0000
ROA not before:           Wed 10 Nov 2021 01:00:32 +0000
ROA not after:            Tue 10 Nov 2026 01:00:32 +0000
asID:                     265524
IP address blocks:        131.196.248.0/22 maxlen: 24
                          192.141.124.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Mar 2024 06:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255937 (0x132a01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7a5fab05d84621ad4b78ccf141868a98875d29
        Validity
            Not Before: Nov 10 01:00:32 2021 GMT
            Not After : Nov 10 01:00:32 2026 GMT
        Subject: CN=51e4405131d56a3f72ef6daa35918f43179af875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:39:01:19:60:9a:e9:dd:20:0d:28:8e:d9:2f:
                    f3:42:22:b1:d5:f1:34:fa:2a:ac:0b:31:14:ce:13:
                    80:00:b7:c1:4e:95:d1:3e:29:0a:ff:ae:ed:33:12:
                    55:d2:a7:82:07:10:3e:42:a7:77:bb:53:53:22:b7:
                    f8:7e:3a:5a:8d:ce:94:93:b5:59:e7:2b:6d:e4:f2:
                    c8:5b:3a:72:16:74:40:1b:6f:a1:1b:19:ae:9c:e9:
                    1c:c1:97:5b:0e:8c:2a:dc:e3:7f:d7:82:d0:c0:a2:
                    22:ac:0f:97:b8:c4:13:2f:c6:d6:c6:9b:0e:55:16:
                    34:7e:40:5a:9a:f2:88:f6:16:ff:a9:26:a8:ea:ea:
                    ea:e8:26:69:09:d9:47:06:01:08:16:c1:b6:66:7e:
                    80:be:bf:b3:ca:b8:dd:de:29:24:dc:25:19:9d:f1:
                    6a:fa:9c:48:bd:31:e2:66:44:f7:17:27:80:3d:08:
                    08:45:22:bf:38:7e:f4:6b:f2:95:0e:48:11:ac:10:
                    27:b5:2b:5d:65:bc:53:0b:43:61:49:ca:27:b8:8c:
                    9a:35:ed:1c:c8:c8:f7:cd:c2:0e:17:2a:9e:76:30:
                    3c:00:ba:dc:d6:e3:5e:c2:6a:83:67:e1:c4:e5:81:
                    bb:6c:c5:e1:88:50:62:61:88:48:99:b8:82:c5:2f:
                    eb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8D:D3:3C:9F:0A:44:99:97:5A:EA:68:8C:9D:55:35:D6:85:D5:28
            X509v3 Authority Key Identifier:
                keyid:6E:4A:37:C8:01:68:41:93:FF:F7:E0:63:E3:9D:2C:C9:C5:B5:79:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7a5fab05d84621ad4b78ccf141868a98875d29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/51e4405131d56a3f72ef6daa35918f43179af875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/9e7a5fab05d84621ad4b78ccf141868a98875d29.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.248.0/22
                  192.141.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:35:38:a7:8f:50:6c:54:ad:ae:22:45:11:8a:8c:3b:ad:57:
         7e:70:6a:cd:94:a2:c6:db:40:70:06:fb:05:92:fa:fe:6a:f1:
         da:e4:d2:6d:92:3c:4d:4d:2e:4c:e0:fd:5c:22:f2:49:bb:0f:
         73:e9:a2:02:23:ec:ce:d5:c5:70:aa:39:38:14:50:db:d9:3e:
         fc:54:67:08:fc:10:ae:30:6b:d3:a2:a9:64:9c:24:23:37:a5:
         d4:36:06:07:ca:b6:cc:a9:f2:14:20:42:5d:b3:99:9e:a0:2e:
         91:03:02:4e:c1:c5:d9:bb:70:b3:f5:74:4f:a8:a9:61:36:bf:
         e6:83:a3:77:d4:17:9f:59:35:a3:80:fc:4b:7f:25:68:2c:db:
         9b:ac:4d:9b:dd:93:f9:a5:11:7a:e3:c9:28:d5:f9:02:7f:b0:
         55:e3:72:ff:a2:30:8f:a1:ba:45:6c:b9:0f:96:df:ab:6c:f0:
         7b:71:33:fe:4a:50:a1:0d:a5:f6:a0:18:0b:81:2c:fc:68:2f:
         70:d3:cb:a4:83:87:a1:d1:d4:0c:a3:d2:1d:07:47:66:51:ae:
         65:d0:07:8c:0a:d8:23:c0:89:aa:bc:82:fc:b0:71:c7:e3:4c:
         a7:10:7f:0e:0a:78:f8:63:fe:31:f8:54:17:8f:70:0d:50:fd:
         26:f6:47:77
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDEyoBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDll
N2E1ZmFiMDVkODQ2MjFhZDRiNzhjY2YxNDE4NjhhOTg4NzVkMjkwHhcNMjExMTEw
MDEwMDMyWhcNMjYxMTEwMDEwMDMyWjAzMTEwLwYDVQQDEyg1MWU0NDA1MTMxZDU2
YTNmNzJlZjZkYWEzNTkxOGY0MzE3OWFmODc1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgTkBGWCa6d0gDSiO2S/zQiKx1fE0+iqsCzEUzhOAALfBTpXR
PikK/67tMxJV0qeCBxA+Qqd3u1NTIrf4fjpajc6Uk7VZ5ytt5PLIWzpyFnRAG2+h
GxmunOkcwZdbDowq3ON/14LQwKIirA+XuMQTL8bWxpsOVRY0fkBamvKI9hb/qSao
6urq6CZpCdlHBgEIFsG2Zn6Avr+zyrjd3ikk3CUZnfFq+pxIvTHiZkT3FyeAPQgI
RSK/OH70a/KVDkgRrBAntStdZbxTC0NhSconuIyaNe0cyMj3zcIOFyqedjA8ALrc
1uNewmqDZ+HE5YG7bMXhiFBiYYhImbiCxS/rLQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFGCN0zyfCkSZl1rqaIydVTXWhdUoMB8GA1UdIwQYMBaAFG5KN8gBaEGT//fg
Y+OdLMnFtXkRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWU3YTVm
YWIwNWQ4NDYyMWFkNGI3OGNjZjE0MTg2OGE5ODg3NWQyOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI5OWNiYzgtYTY5My00ODg5LWFiYTItOGY0Zjlj
NTFiNWQzLzUxZTQ0MDUxMzFkNTZhM2Y3MmVmNmRhYTM1OTE4ZjQzMTc5YWY4NzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjk5Y2JjOC1hNjkzLTQ4ODktYWJhMi04ZjRm
OWM1MWI1ZDMvOWU3YTVmYWIwNWQ4NDYyMWFkNGI3OGNjZjE0MTg2OGE5ODg3NWQy
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAoPE+AMEAsCNfDANBgkqhkiG9w0BAQsFAAOCAQEAKjU4p49Q
bFStriJFEYqMO61XfnBqzZSixttAcAb7BZL6/mrx2uTSbZI8TU0uTOD9XCLySbsP
c+miAiPsztXFcKo5OBRQ29k+/FRnCPwQrjBr06KpZJwkIzel1DYGB8q2zKnyFCBC
XbOZnqAukQMCTsHF2btws/V0T6ipYTa/5oOjd9QXn1k1o4D8S38laCzbm6xNm92T
+aUReuPJKNX5An+wVeNy/6Iwj6G6RWy5D5bfq2zwe3Ez/kpQoQ2l9qAYC4Es/Ggv
cNPLpIOHodHUDKPSHQdHZlGuZdAHjArYI8CJqryC/LBxx+NMpxB/Dgp4+GP+MfhU
F49wDVD9JvZHdw==
-----END CERTIFICATE-----
Generated at Wed Mar 6 11:26:25 2024 by rpki-client on console-ams.rpki-client.org