Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3138312e302f32342d3234203d3e2037303138.roa
File:                     3139312e3130322e3138312e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          PC7TMegkuEWK6DwpdsMexoxTT8xSwZyQweT2wI6K3Zc=
Subject key identifier:   7B:B8:33:7C:69:F2:D1:D3:49:C4:41:6D:EE:6B:C3:DF:0B:8D:2A:39
Certificate issuer:       /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial:       45E259277294AB04232732E89E0320B1C9096DF1
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3138312e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 09 Sep 2024 14:40:00 +0000
ROA not before:           Mon 09 Sep 2024 14:35:00 +0000
ROA not after:            Mon 08 Sep 2025 14:40:00 +0000
asID:                     7018
IP address blocks:        191.102.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 18:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e2:59:27:72:94:ab:04:23:27:32:e8:9e:03:20:b1:c9:09:6d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
        Validity
            Not Before: Sep  9 14:35:00 2024 GMT
            Not After : Sep  8 14:40:00 2025 GMT
        Subject: CN=7BB8337C69F2D1D349C4416DEE6BC3DF0B8D2A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d6:bc:32:e3:3a:38:98:1d:3d:62:7b:80:92:
                    02:48:e2:49:db:29:84:3e:78:03:dc:35:75:e6:37:
                    53:da:0c:52:76:7a:63:4a:f4:f0:15:e5:2b:0e:3d:
                    b9:e5:ed:b5:c2:35:c4:06:2b:25:ce:7a:f1:2a:7c:
                    12:b4:24:1a:5a:dc:8d:fc:7b:78:24:53:c3:7c:20:
                    e3:c0:c7:d4:2d:5c:03:fd:3c:54:9b:3e:e6:3b:ed:
                    bf:6a:ed:b6:73:25:25:15:e9:92:f3:40:fe:a2:24:
                    c2:0e:24:f1:10:6f:3d:cb:44:6e:d1:2c:5b:6f:cf:
                    e7:5d:05:2a:d1:54:95:ee:98:ba:e0:d8:f6:51:5c:
                    86:36:6a:91:ce:9a:d6:9f:4b:97:27:d5:67:f6:22:
                    55:2c:26:e8:8a:7d:6c:e8:f7:05:85:38:88:5f:83:
                    8f:61:5c:c0:82:dd:28:a3:08:b8:8b:dc:b6:79:7c:
                    3a:f7:10:ce:10:1c:05:93:1f:3e:b0:62:af:fd:32:
                    32:9c:48:48:0c:54:ad:3b:0d:ed:67:90:e7:10:33:
                    32:59:13:ee:29:be:e5:af:16:ba:06:b4:b9:cb:28:
                    69:14:bb:b2:ee:7b:be:df:29:54:81:e1:d9:8a:30:
                    b5:aa:d3:34:00:8a:5a:34:b2:03:69:e9:7d:90:d2:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B8:33:7C:69:F2:D1:D3:49:C4:41:6D:EE:6B:C3:DF:0B:8D:2A:39
            X509v3 Authority Key Identifier:
                keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3138312e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:57:90:18:bb:6f:4e:2c:0f:56:69:9c:d5:a0:c3:73:87:0f:
         de:a2:5e:34:1c:d3:31:a4:3d:20:31:b3:9c:8e:ab:b3:ab:00:
         48:2b:fa:d6:25:57:fa:ae:86:4b:dc:46:4e:16:ff:13:14:45:
         75:1c:9c:46:22:79:d4:78:f7:76:0b:c5:a6:e2:65:a5:e1:d3:
         6d:05:96:41:b9:0b:b4:d2:f8:f0:75:b5:ec:e4:08:db:1a:55:
         b2:8e:b2:58:30:b6:6e:2c:2a:88:a2:a5:77:39:b4:b5:eb:b9:
         d4:06:dc:ec:dd:fa:97:cd:b0:17:70:3c:f1:3c:9f:da:8f:c2:
         d4:57:1d:19:13:21:4c:5e:e1:ba:7c:ae:ab:1e:b4:07:0a:2c:
         5e:78:a6:53:b7:ae:99:cc:4d:f8:0f:06:07:9a:eb:71:d1:d2:
         3d:aa:98:df:ee:08:93:38:2f:7a:d0:7a:b1:8e:4b:94:09:85:
         90:3f:10:e5:65:fd:fb:27:47:35:4c:b3:8b:50:71:65:a2:97:
         af:75:9a:84:b6:30:ef:e0:ad:09:9c:f3:ba:73:3b:c0:d3:a1:
         5d:f2:0e:78:b2:a6:1f:dd:98:6a:ed:68:3b:c1:9d:c5:20:6a:
         ee:03:16:d3:a7:ee:34:b8:8f:73:5c:a0:de:59:4d:85:fe:9d:
         25:02:cd:53
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUReJZJ3KUqwQjJzLongMgsckJbfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFERkNEOTY5Mzk4QzdEMTRGQTE4RTQ0RDE2NDlBMEIy
MUM5NjU2OTAeFw0yNDA5MDkxNDM1MDBaFw0yNTA5MDgxNDQwMDBaMDMxMTAvBgNV
BAMTKDdCQjgzMzdDNjlGMkQxRDM0OUM0NDE2REVFNkJDM0RGMEI4RDJBMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1rwy4zo4mB09YnuAkgJI4knb
KYQ+eAPcNXXmN1PaDFJ2emNK9PAV5SsOPbnl7bXCNcQGKyXOevEqfBK0JBpa3I38
e3gkU8N8IOPAx9QtXAP9PFSbPuY77b9q7bZzJSUV6ZLzQP6iJMIOJPEQbz3LRG7R
LFtvz+ddBSrRVJXumLrg2PZRXIY2apHOmtafS5cn1Wf2IlUsJuiKfWzo9wWFOIhf
g49hXMCC3SijCLiL3LZ5fDr3EM4QHAWTHz6wYq/9MjKcSEgMVK07De1nkOcQMzJZ
E+4pvuWvFroGtLnLKGkUu7Lue77fKVSB4dmKMLWq0zQAilo0sgNp6X2Q0ozpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUe7gzfGny0dNJxEFt7mvD3wuNKjkwHwYDVR0j
BBgwFoAUAd/NlpOYx9FPoY5E0WSaCyHJZWkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDRBMjczNDJBN0UxODQ5RjhBRkM0ODlFOTNDQTNEQzNG
NjVCOURDRDM2QjA0RkQyQjU4NENDRDJCODA1Qzc2LzAvMDFERkNEOTY5Mzk4QzdE
MTRGQTE4RTQ0RDE2NDlBMEIyMUM5NjU2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMURGQ0Q5NjkzOThDN0QxNEZB
MThFNDREMTY0OUEwQjIxQzk2NTY5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQ0QTI3MzQyQTdFMTg0OUY4QUZDNDg5RTkzQ0EzREMzRjY1QjlEQ0Qz
NkIwNEZEMkI1ODRDQ0QyQjgwNUM3Ni8wLzMxMzkzMTJlMzEzMDMyMmUzMTM4MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNzMwMzEzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL9mtTAN
BgkqhkiG9w0BAQsFAAOCAQEASleQGLtvTiwPVmmc1aDDc4cP3qJeNBzTMaQ9IDGz
nI6rs6sASCv61iVX+q6GS9xGThb/ExRFdRycRiJ51Hj3dgvFpuJlpeHTbQWWQbkL
tNL48HW17OQI2xpVso6yWDC2biwqiKKldzm0teu51Abc7N36l82wF3A88Tyf2o/C
1FcdGRMhTF7hunyuqx60BwosXnimU7eumcxN+A8GB5rrcdHSPaqY3+4IkzgvetB6
sY5LlAmFkD8Q5WX9+ydHNUyzi1BxZaKXr3WahLYw7+CtCZzzunM7wNOhXfIOeLKm
H92Yau1oO8GdxSBq7gMW06fuNLiPc1yg3llNhf6dJQLNUw==
-----END CERTIFICATE-----
Generated at Wed Nov 6 19:54:06 2024 by rpki-client on console-ams.rpki-client.org