Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3137362e302f32312d3231203d3e20333934343734.roa
File:                     3139312e3130322e3137362e302f32312d3231203d3e20333934343734.roa (raw, json)
Hash identifier:          7MCtTDLV86ZF8ZDPw0lR9ZdzqkolDZzqnSFm54/SX2w=
Subject key identifier:   E7:59:24:A3:8A:C3:DD:A2:4E:14:E6:68:D4:F0:92:80:EA:96:25:58
Certificate issuer:       /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial:       1AEE88C21AD62C3DB4FA05F62C48F9080BC9098A
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3137362e302f32312d3231203d3e20333934343734.roa
Signing time:             Tue 05 Mar 2024 17:47:53 +0000
ROA not before:           Tue 05 Mar 2024 17:42:53 +0000
ROA not after:            Tue 04 Mar 2025 17:47:53 +0000
asID:                     394474
IP address blocks:        191.102.176.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 16:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ee:88:c2:1a:d6:2c:3d:b4:fa:05:f6:2c:48:f9:08:0b:c9:09:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
        Validity
            Not Before: Mar  5 17:42:53 2024 GMT
            Not After : Mar  4 17:47:53 2025 GMT
        Subject: CN=E75924A38AC3DDA24E14E668D4F09280EA962558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:6e:88:7c:f2:76:00:b6:c2:72:e2:fb:14:
                    76:6f:ee:0e:2d:a5:ac:db:0f:12:3f:79:a1:65:51:
                    f1:ed:b7:9d:2a:be:97:05:c2:c0:94:73:cf:70:f4:
                    63:a0:68:f2:11:97:4b:42:bb:5b:0c:a5:cc:65:7c:
                    27:b1:34:a8:c1:c4:ca:7b:ca:05:72:66:af:19:07:
                    29:64:cb:01:17:2d:fa:22:e0:de:4f:23:a6:3e:6f:
                    c6:3d:d1:48:ff:83:81:c7:cb:f1:16:65:d7:40:5f:
                    59:e7:4a:3a:27:a8:95:42:d6:d5:5c:c1:00:51:c3:
                    59:6d:72:a6:95:45:88:de:62:dc:58:90:5a:11:01:
                    03:c9:05:9f:d3:c0:3b:83:e7:ef:d1:87:9d:45:d6:
                    d4:02:0a:4f:3a:26:01:c7:a8:b3:9b:5a:67:c8:87:
                    6b:69:c7:3b:84:7d:d6:aa:5e:12:ff:b5:a1:a4:08:
                    ef:0d:dd:6a:10:5b:64:d3:ca:9e:06:61:03:d3:7b:
                    50:f0:d9:6e:0c:75:1c:1e:19:ef:8e:03:8d:c2:39:
                    b9:fa:a2:8f:ed:95:61:80:af:7e:7e:99:fe:6a:ff:
                    c8:ba:77:26:04:4b:5f:fb:22:7e:ce:9e:8b:25:19:
                    85:60:da:14:78:db:25:06:b9:8d:ef:22:8b:2f:84:
                    4e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:59:24:A3:8A:C3:DD:A2:4E:14:E6:68:D4:F0:92:80:EA:96:25:58
            X509v3 Authority Key Identifier:
                keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3137362e302f32312d3231203d3e20333934343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:27:45:4e:a0:40:2a:b0:a5:37:bc:f9:4c:a8:50:9b:99:16:
         9f:7f:7d:ee:ce:de:ce:c1:7e:6b:2d:de:d3:f1:53:4c:f8:75:
         80:c6:44:8f:cb:a9:32:f2:ab:66:92:a1:a5:60:0e:62:90:1f:
         81:15:ba:5d:d3:99:2e:e3:7f:a3:59:09:2d:f4:6d:72:40:92:
         16:86:14:fe:14:45:20:34:5f:cd:0b:81:80:3d:77:d4:51:13:
         42:25:48:ca:72:9b:da:d0:04:eb:9e:a1:b8:8b:95:7a:70:0a:
         ab:c5:30:53:f9:15:9b:d4:f3:c1:33:82:9b:bd:50:90:21:0f:
         61:d6:be:d2:54:1f:fd:f5:16:06:0c:9f:bd:59:68:de:31:b3:
         51:d3:77:f4:1e:32:a3:bb:d3:56:ea:3a:f6:a1:e4:e0:70:2c:
         11:f0:ac:da:b0:2b:e2:bc:19:3c:25:fd:92:67:3e:9a:76:48:
         11:7a:6a:94:d2:23:b1:4e:d4:df:d2:8c:5e:12:44:ba:8f:b8:
         6a:fd:8c:87:5d:f3:6e:75:79:9c:cb:40:5e:24:60:68:79:d3:
         7f:fa:dd:93:b7:99:2c:a5:20:66:00:91:ad:3d:b5:06:a3:d7:
         c3:60:eb:15:f7:f9:0b:4a:72:39:0f:f7:9a:53:a3:8e:28:fc:
         42:07:f3:89
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUGu6IwhrWLD20+gX2LEj5CAvJCYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFERkNEOTY5Mzk4QzdEMTRGQTE4RTQ0RDE2NDlBMEIy
MUM5NjU2OTAeFw0yNDAzMDUxNzQyNTNaFw0yNTAzMDQxNzQ3NTNaMDMxMTAvBgNV
BAMTKEU3NTkyNEEzOEFDM0REQTI0RTE0RTY2OEQ0RjA5MjgwRUE5NjI1NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYW6IfPJ2ALbCcuL7FHZv7g4t
pazbDxI/eaFlUfHtt50qvpcFwsCUc89w9GOgaPIRl0tCu1sMpcxlfCexNKjBxMp7
ygVyZq8ZBylkywEXLfoi4N5PI6Y+b8Y90Uj/g4HHy/EWZddAX1nnSjonqJVC1tVc
wQBRw1ltcqaVRYjeYtxYkFoRAQPJBZ/TwDuD5+/Rh51F1tQCCk86JgHHqLObWmfI
h2tpxzuEfdaqXhL/taGkCO8N3WoQW2TTyp4GYQPTe1Dw2W4MdRweGe+OA43CObn6
oo/tlWGAr35+mf5q/8i6dyYES1/7In7OnoslGYVg2hR42yUGuY3vIosvhE79AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU51kko4rD3aJOFOZo1PCSgOqWJVgwHwYDVR0j
BBgwFoAUAd/NlpOYx9FPoY5E0WSaCyHJZWkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDRBMjczNDJBN0UxODQ5RjhBRkM0ODlFOTNDQTNEQzNG
NjVCOURDRDM2QjA0RkQyQjU4NENDRDJCODA1Qzc2LzAvMDFERkNEOTY5Mzk4QzdE
MTRGQTE4RTQ0RDE2NDlBMEIyMUM5NjU2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMURGQ0Q5NjkzOThDN0QxNEZB
MThFNDREMTY0OUEwQjIxQzk2NTY5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQ0QTI3MzQyQTdFMTg0OUY4QUZDNDg5RTkzQ0EzREMzRjY1QjlEQ0Qz
NkIwNEZEMkI1ODRDQ0QyQjgwNUM3Ni8wLzMxMzkzMTJlMzEzMDMyMmUzMTM3MzYy
ZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMzM5MzQzNDM3MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO/
ZrAwDQYJKoZIhvcNAQELBQADggEBAHUnRU6gQCqwpTe8+UyoUJuZFp9/fe7O3s7B
fmst3tPxU0z4dYDGRI/LqTLyq2aSoaVgDmKQH4EVul3TmS7jf6NZCS30bXJAkhaG
FP4URSA0X80LgYA9d9RRE0IlSMpym9rQBOueobiLlXpwCqvFMFP5FZvU88Ezgpu9
UJAhD2HWvtJUH/31FgYMn71ZaN4xs1HTd/QeMqO701bqOvah5OBwLBHwrNqwK+K8
GTwl/ZJnPpp2SBF6apTSI7FO1N/SjF4SRLqPuGr9jIdd8251eZzLQF4kYGh503/6
3ZO3mSylIGYAka09tQaj18Ng6xX3+QtKcjkP95pTo44o/EIH84k=
-----END CERTIFICATE-----
Generated at Mon Jul 22 19:51:40 2024 by rpki-client on console-ams.rpki-client.org