Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e302e302f31362d3234203d3e20323730313439.roa
File:                     3134382e3230382e302e302f31362d3234203d3e20323730313439.roa (raw, json)
Hash identifier:          uCQdJRHZZ6Y2TG/Zq0/pDhM8W2158luygOqPp8dngBY=
Subject key identifier:   76:44:25:39:1B:1E:91:7D:86:FE:3F:AA:4B:08:EA:37:46:F4:22:60
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       3E12C2DE77A408AB1A907FAEA21782F3DFB2F727
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e302e302f31362d3234203d3e20323730313439.roa
Signing time:             Mon 26 Aug 2024 20:55:00 +0000
ROA not before:           Mon 26 Aug 2024 20:50:00 +0000
ROA not after:            Mon 25 Aug 2025 20:55:00 +0000
asID:                     270149
IP address blocks:        148.208.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 23:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:12:c2:de:77:a4:08:ab:1a:90:7f:ae:a2:17:82:f3:df:b2:f7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Aug 26 20:50:00 2024 GMT
            Not After : Aug 25 20:55:00 2025 GMT
        Subject: CN=764425391B1E917D86FE3FAA4B08EA3746F42260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:eb:78:86:e9:d3:86:9c:7b:60:32:1e:96:
                    f6:ca:e5:f9:a4:fd:7e:df:bf:2e:70:20:0e:54:84:
                    4d:1c:9b:a8:9f:26:0d:03:b9:d0:fc:14:e7:5f:c8:
                    14:03:50:9c:54:d9:09:f8:16:b1:c2:07:a8:ab:f2:
                    e4:da:b8:38:f0:a7:87:e9:31:8b:ab:c2:00:d5:9e:
                    82:61:58:1c:24:7a:30:7a:53:bb:8a:9c:2b:dc:dc:
                    2d:df:e9:05:14:76:62:14:04:48:d4:9f:c7:1e:e9:
                    0a:52:b7:7a:5a:91:a8:16:12:bc:83:6b:80:d7:85:
                    84:10:a0:d7:28:9f:53:0f:b9:26:1a:c6:5c:3c:24:
                    c4:f0:3b:0e:43:4e:6f:ed:cf:eb:98:f8:f1:d5:c8:
                    31:c7:b4:48:cd:13:41:5a:bb:20:aa:94:49:a5:f6:
                    f5:1b:de:53:39:30:41:dc:03:ad:5f:d0:3e:ca:08:
                    a8:46:3b:a1:26:a4:1a:22:db:9c:17:bc:dc:7b:40:
                    df:cc:c9:a5:f6:39:be:d0:54:b3:77:c1:4b:8f:61:
                    d1:58:84:6b:15:67:1b:02:29:ed:7d:61:53:25:47:
                    04:d1:16:24:62:28:97:bb:d7:7f:42:d7:16:28:97:
                    a4:6c:ce:54:43:4e:35:70:a3:22:02:b4:98:4d:26:
                    b9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:44:25:39:1B:1E:91:7D:86:FE:3F:AA:4B:08:EA:37:46:F4:22:60
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e302e302f31362d3234203d3e20323730313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b9:dd:87:b5:ca:36:f1:20:c3:dd:53:c2:d1:4d:51:c9:88:39:
         8a:ab:1a:1e:38:23:4f:a3:1b:af:7a:aa:39:87:3f:23:32:49:
         49:db:d3:c2:36:29:84:32:56:d4:9b:40:85:5a:c1:02:53:b0:
         5c:bb:5d:86:e1:66:d0:c5:3d:1b:d3:93:ac:ab:3c:92:40:c6:
         97:98:a2:a6:54:d7:2a:eb:0f:23:8e:ad:3f:a0:13:e1:46:f2:
         8b:ac:ed:66:93:8b:d2:84:56:14:f2:ba:9c:d5:29:10:ab:f6:
         ba:6f:23:ef:01:0d:39:35:5b:de:a4:9a:ae:8b:02:74:75:22:
         91:9a:a2:5d:7c:ee:12:2e:ab:cc:7e:18:64:85:f2:a7:13:0e:
         6d:bf:e8:0f:3a:e3:54:7f:70:58:90:32:0f:25:cb:4b:90:55:
         1e:a3:63:68:3a:20:81:a4:f7:ad:5b:4f:33:0e:d7:5b:68:55:
         c7:c0:e1:db:ac:a6:ce:6d:8f:e0:cc:9c:bd:33:9a:b0:8a:9d:
         33:6a:a6:12:d4:58:37:28:eb:e0:6c:9a:bc:ca:7a:d8:f9:44:
         4c:81:ee:82:52:17:e4:61:96:59:5f:a5:d7:c6:47:d9:b7:63:
         cd:89:4f:4e:a0:76:4d:56:7e:23:57:d7:28:5f:2f:12:43:11:
         41:d1:4f:f9
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUPhLC3nekCKsakH+uoheC89+y9ycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEExMjY3RENCNERDNkZGQTlGQ0REN0ZFQTlEN0Y5Rjc4
QzM3OTFEQjAeFw0yNDA4MjYyMDUwMDBaFw0yNTA4MjUyMDU1MDBaMDMxMTAvBgNV
BAMTKDc2NDQyNTM5MUIxRTkxN0Q4NkZFM0ZBQTRCMDhFQTM3NDZGNDIyNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUX+t4hunThpx7YDIelvbK5fmk
/X7fvy5wIA5UhE0cm6ifJg0DudD8FOdfyBQDUJxU2Qn4FrHCB6ir8uTauDjwp4fp
MYurwgDVnoJhWBwkejB6U7uKnCvc3C3f6QUUdmIUBEjUn8ce6QpSt3pakagWEryD
a4DXhYQQoNcon1MPuSYaxlw8JMTwOw5DTm/tz+uY+PHVyDHHtEjNE0FauyCqlEml
9vUb3lM5MEHcA61f0D7KCKhGO6EmpBoi25wXvNx7QN/MyaX2Ob7QVLN3wUuPYdFY
hGsVZxsCKe19YVMlRwTRFiRiKJe7139C1xYol6RszlRDTjVwoyICtJhNJrmXAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUdkQlORsekX2G/j+qSwjqN0b0ImAwHwYDVR0j
BBgwFoAUihJn3LTcb/qfzdf+qdf594w3kdswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0I3QzY5N0U5ODhDMTQ3MjgwMTVGNzVBRDRCRDYyMTc1
NUJCMzk4NzBFQTI4MzFCM0NEMDUzQjk4ODUzM0YxLzAvOEExMjY3RENCNERDNkZG
QTlGQ0REN0ZFQTlEN0Y5Rjc4QzM3OTFEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTEyNjdEQ0I0REM2RkZBOUZD
REQ3RkVBOUQ3RjlGNzhDMzc5MURCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNCN0M2OTdFOTg4QzE0NzI4MDE1Rjc1QUQ0QkQ2MjE3NTVCQjM5ODcw
RUEyODMxQjNDRDA1M0I5ODg1MzNGMS8wLzMxMzQzODJlMzIzMDM4MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzczMDMxMzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAJTQMA0G
CSqGSIb3DQEBCwUAA4IBAQC53Ye1yjbxIMPdU8LRTVHJiDmKqxoeOCNPoxuveqo5
hz8jMklJ29PCNimEMlbUm0CFWsECU7Bcu12G4WbQxT0b05OsqzySQMaXmKKmVNcq
6w8jjq0/oBPhRvKLrO1mk4vShFYU8rqc1SkQq/a6byPvAQ05NVvepJquiwJ0dSKR
mqJdfO4SLqvMfhhkhfKnEw5tv+gPOuNUf3BYkDIPJctLkFUeo2NoOiCBpPetW08z
DtdbaFXHwOHbrKbObY/gzJy9M5qwip0zaqYS1Fg3KOvgbJq8ynrY+URMge6CUhfk
YZZZX6XXxkfZt2PNiU9OoHZNVn4jV9coXy8SQxFB0U/5
-----END CERTIFICATE-----