Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3136382e3232382e34342e302f32342d3234203d3e20323733313330.roa
File:                     3136382e3232382e34342e302f32342d3234203d3e20323733313330.roa (raw, json)
Hash identifier:          fMMq6b4EwTK5irLvbGt/OHTI0GoQN5PU24ZF9qHFdWk=
Subject key identifier:   91:6A:2A:30:79:12:19:FB:76:2F:2A:69:99:06:91:9F:A9:80:FF:64
Certificate issuer:       /CN=632D71062751773B5FA51AC0AB69127826F756A2
Certificate serial:       232EE0C9072748E5C5E9196D8909BD1F21EBD166
Authority key identifier: 63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3136382e3232382e34342e302f32342d3234203d3e20323733313330.roa
Signing time:             Tue 05 Mar 2024 17:45:14 +0000
ROA not before:           Tue 05 Mar 2024 17:40:14 +0000
ROA not after:            Tue 04 Mar 2025 17:45:14 +0000
asID:                     273130
IP address blocks:        168.228.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 04 May 2024 00:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2e:e0:c9:07:27:48:e5:c5:e9:19:6d:89:09:bd:1f:21:eb:d1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632D71062751773B5FA51AC0AB69127826F756A2
        Validity
            Not Before: Mar  5 17:40:14 2024 GMT
            Not After : Mar  4 17:45:14 2025 GMT
        Subject: CN=916A2A30791219FB762F2A699906919FA980FF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:e0:24:27:8d:a5:7f:ac:bf:c4:f0:f6:17:
                    a7:f1:ed:0e:60:8b:11:b3:51:fe:c5:c5:48:2e:09:
                    de:be:74:e7:20:e9:83:b1:0d:f5:2a:62:ca:5f:a4:
                    d1:aa:07:54:69:61:fc:cb:48:38:95:78:bc:66:13:
                    5c:ac:2c:51:5a:0d:40:01:8d:d6:35:06:62:4e:5b:
                    0a:29:4b:91:ef:8c:5d:89:79:df:05:40:24:9d:11:
                    c5:6b:fb:7d:39:0f:63:84:b5:ff:79:93:2b:e1:c8:
                    d5:1c:a7:02:54:92:5d:84:6f:6e:7c:79:57:94:bc:
                    87:61:9f:b8:a4:27:d8:1b:95:67:26:dd:48:a8:48:
                    61:ca:0a:92:99:b3:f2:65:d7:63:a5:13:36:61:55:
                    38:13:f7:43:4c:c3:8a:5c:04:83:de:a0:76:72:9f:
                    c6:e3:39:81:da:5f:ee:17:f9:b6:01:94:04:8c:22:
                    0a:af:2e:ef:ce:cb:58:ec:de:80:dd:ce:d8:2f:e9:
                    9d:04:38:56:a9:65:27:0e:11:77:0a:63:dd:a1:b9:
                    7a:f8:28:db:d4:70:4c:4c:1a:31:1f:79:d3:09:29:
                    be:5f:c0:93:4d:e2:04:f3:2a:0b:c3:7f:7b:3d:96:
                    88:66:86:dd:26:65:ef:87:89:79:f1:0a:ca:fb:52:
                    fb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6A:2A:30:79:12:19:FB:76:2F:2A:69:99:06:91:9F:A9:80:FF:64
            X509v3 Authority Key Identifier:
                keyid:63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3136382e3232382e34342e302f32342d3234203d3e20323733313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:22:88:9c:56:87:e2:d3:d7:20:42:69:6e:4f:41:e1:61:c3:
         4a:79:d9:09:45:4e:04:b7:0f:34:af:49:57:90:13:fb:a4:65:
         c5:b5:75:18:5d:28:b7:30:3c:0b:37:f7:24:92:b1:46:0e:96:
         3e:73:7f:87:e3:70:23:b5:22:bb:ef:ec:ff:d3:c7:4a:6f:69:
         f5:df:7a:55:48:ea:d7:c4:bb:6e:ae:1e:1d:be:c6:98:0c:32:
         a3:5b:d1:46:15:47:a3:7d:95:90:37:07:46:a6:08:aa:20:fe:
         fb:b8:d2:1c:c2:b2:c6:9c:89:12:5c:6f:c6:25:11:7d:2b:c8:
         6a:59:62:7b:dd:48:3f:0a:66:ee:6e:ea:76:5e:b4:b5:93:9c:
         65:f1:e6:c3:6b:77:a0:0e:22:dd:ca:89:8b:d5:80:17:f8:fb:
         7b:83:7a:f2:96:0f:8a:17:f0:9b:53:e3:a4:14:b8:fd:ad:c3:
         3d:60:c1:ab:ae:ff:55:f8:0b:6d:b5:6c:d9:2e:2a:a7:d7:60:
         6d:40:53:56:c7:d2:d2:3d:7a:9b:f7:0c:a4:3e:89:2a:61:83:
         d2:05:54:6d:c6:f3:39:5c:c5:cc:be:5b:be:17:f7:7a:3e:ed:
         01:85:d2:e2:df:5c:98:69:1c:72:2d:56:ec:3a:38:b3:51:06:
         c1:bd:e6:0a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIy7gyQcnSOXF6RltiQm9HyHr0WYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyRDcxMDYyNzUxNzczQjVGQTUxQUMwQUI2OTEyNzgy
NkY3NTZBMjAeFw0yNDAzMDUxNzQwMTRaFw0yNTAzMDQxNzQ1MTRaMDMxMTAvBgNV
BAMTKDkxNkEyQTMwNzkxMjE5RkI3NjJGMkE2OTk5MDY5MTlGQTk4MEZGNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LeAkJ42lf6y/xPD2F6fx7Q5g
ixGzUf7FxUguCd6+dOcg6YOxDfUqYspfpNGqB1RpYfzLSDiVeLxmE1ysLFFaDUAB
jdY1BmJOWwopS5HvjF2Jed8FQCSdEcVr+305D2OEtf95kyvhyNUcpwJUkl2Eb258
eVeUvIdhn7ikJ9gblWcm3UioSGHKCpKZs/Jl12OlEzZhVTgT90NMw4pcBIPeoHZy
n8bjOYHaX+4X+bYBlASMIgqvLu/Oy1js3oDdztgv6Z0EOFapZScOEXcKY92huXr4
KNvUcExMGjEfedMJKb5fwJNN4gTzKgvDf3s9lohmht0mZe+HiXnxCsr7UvujAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUkWoqMHkSGft2LyppmQaRn6mA/2QwHwYDVR0j
BBgwFoAUYy1xBidRdztfpRrAq2kSeCb3VqIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDNBRTFBQzMzMEVBQzhBNjNEMDIzMzA3NDI3NTNBQzZG
RTdGMDI4MDQyM0Q0QTQxQUFENDc4MzBFOTlEMDk5LzAvNjMyRDcxMDYyNzUxNzcz
QjVGQTUxQUMwQUI2OTEyNzgyNkY3NTZBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MzJENzEwNjI3NTE3NzNCNUZB
NTFBQzBBQjY5MTI3ODI2Rjc1NkEyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTAzQUUxQUMzMzBFQUM4QTYzRDAyMzMwNzQyNzUzQUM2RkU3RjAyODA0
MjNENEE0MUFBRDQ3ODMwRTk5RDA5OS8wLzMxMzYzODJlMzIzMjM4MmUzNDM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzEzMzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOQs
MA0GCSqGSIb3DQEBCwUAA4IBAQB3IoicVofi09cgQmluT0HhYcNKedkJRU4Etw80
r0lXkBP7pGXFtXUYXSi3MDwLN/ckkrFGDpY+c3+H43AjtSK77+z/08dKb2n133pV
SOrXxLturh4dvsaYDDKjW9FGFUejfZWQNwdGpgiqIP77uNIcwrLGnIkSXG/GJRF9
K8hqWWJ73Ug/Cmbubup2XrS1k5xl8ebDa3egDiLdyomL1YAX+Pt7g3rylg+KF/Cb
U+OkFLj9rcM9YMGrrv9V+AtttWzZLiqn12BtQFNWx9LSPXqb9wykPokqYYPSBVRt
xvM5XMXMvlu+F/d6Pu0BhdLi31yYaRxyLVbsOjizUQbBveYK
-----END CERTIFICATE-----
Generated at Sat May 4 02:19:21 2024 by rpki-client on console-ams.rpki-client.org