Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3133312e3232312e3136342e302f32322d3232203d3e203237393031.roa
File:                     3133312e3232312e3136342e302f32322d3232203d3e203237393031.roa (raw, json)
Hash identifier:          eUXJofWkk8xHPXj9TSQkg630EyPNllhTqSrzaLNvkwM=
Subject key identifier:   64:BE:9E:EE:16:C0:58:5E:C8:08:AC:1F:6B:06:01:7E:3C:80:A6:33
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       3E5C074274860AD5C2E610C072F5C5A2B41236D1
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3133312e3232312e3136342e302f32322d3232203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:41 +0000
ROA not before:           Tue 05 Mar 2024 17:37:41 +0000
ROA not after:            Tue 04 Mar 2025 17:42:41 +0000
asID:                     27901
IP address blocks:        131.221.164.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5c:07:42:74:86:0a:d5:c2:e6:10:c0:72:f5:c5:a2:b4:12:36:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:41 2024 GMT
            Not After : Mar  4 17:42:41 2025 GMT
        Subject: CN=64BE9EEE16C0585EC808AC1F6B06017E3C80A633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ca:48:d1:e8:ad:f0:85:f8:ff:83:de:e2:6b:
                    56:69:05:45:78:df:fa:29:8d:9a:66:88:9c:4e:8d:
                    d8:32:5f:e9:7c:c5:8c:2c:69:3f:54:d9:f2:b5:12:
                    ed:d1:b1:d7:55:36:0f:58:c4:ec:c7:da:0d:d3:85:
                    1e:b0:04:09:e3:61:68:af:b2:fb:76:f6:f1:56:2d:
                    2a:2f:81:40:df:f7:9c:ad:75:32:11:64:8c:a5:84:
                    6d:ca:91:16:8e:4c:39:44:d0:83:50:22:0a:7e:85:
                    96:53:ca:97:18:9c:3c:01:b9:3a:b4:3e:97:52:13:
                    79:b2:f1:4e:de:4e:f6:a6:82:43:c3:d2:a9:d7:30:
                    c7:fa:14:23:cb:8f:23:cf:00:df:4b:c5:b0:c3:09:
                    c1:8f:17:a1:3e:2d:c2:a5:bf:39:4b:40:b7:90:0e:
                    3c:3b:03:ed:e8:28:b6:78:9c:19:c4:68:0a:8d:51:
                    49:b4:b6:4a:4a:54:5a:3f:1c:7f:8a:89:c9:65:64:
                    fe:8b:1b:8e:71:44:e8:e6:ff:39:8b:74:d8:6e:26:
                    8d:e5:b1:ef:63:a5:09:15:e6:b1:17:44:0b:63:ff:
                    97:96:d1:14:4f:e4:f0:d5:a4:9e:b2:0c:9e:4d:5e:
                    bb:14:f5:ab:8f:4d:f9:80:be:f5:1e:9e:0b:47:bf:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BE:9E:EE:16:C0:58:5E:C8:08:AC:1F:6B:06:01:7E:3C:80:A6:33
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3133312e3232312e3136342e302f32322d3232203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:aa:e0:57:75:65:2a:f4:94:0b:a3:17:d9:79:e7:47:a8:07:
         52:3e:24:6e:9a:dc:e0:da:20:d6:38:7d:3e:dd:1d:d7:61:7e:
         50:ac:f5:68:96:97:78:df:e9:b1:b3:5b:0e:d7:75:87:84:93:
         94:8a:f1:a4:79:10:38:56:07:b8:b5:8b:76:8a:a2:51:75:65:
         68:e9:99:8c:d4:8f:e1:ef:3a:19:5c:ed:df:e7:40:e8:ba:3c:
         2e:79:05:aa:ad:35:c3:0d:96:ce:50:92:c9:d0:60:6c:c6:4c:
         f0:e7:49:7c:6b:1f:37:3e:4f:a0:0b:0e:ce:a8:4e:a2:63:d8:
         ef:45:64:ef:7a:31:bd:4d:14:aa:b0:7f:9a:c5:d2:c1:f2:1f:
         b0:a2:ee:d8:00:ce:9a:ec:f6:7b:b6:5d:9e:c6:f3:ba:cd:a8:
         ac:f2:82:79:5d:14:28:24:8f:6d:fa:9d:39:1e:df:ae:8f:a6:
         91:33:40:34:97:e5:0f:aa:09:37:64:84:2a:ba:e5:37:6e:10:
         e6:74:2f:10:40:c6:ac:7b:d5:5f:55:ae:ad:e1:4e:b7:2e:2a:
         eb:86:b5:49:3e:e4:f6:51:e9:a8:74:eb:4a:e9:7f:e9:9d:25:
         66:59:c1:aa:16:94:3c:f4:ed:cf:eb:9b:16:a7:0c:f4:b2:d6:
         cc:e9:7b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----