Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137302e3135302e3135362e302f32322d3232203d3e203237393031.roa
File:                     3137302e3135302e3135362e302f32322d3232203d3e203237393031.roa (raw, json)
Hash identifier:          VZMnAR7dEU0Ej9gd4Xmkna1Nn5O3RvXH8Iw4gjsR5Nw=
Subject key identifier:   10:E1:C1:8C:63:E6:B8:B6:CE:65:E5:20:B5:3B:A9:45:91:4C:A8:99
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       56DBE34ABF93D4E59137F7565251A39371F506B8
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137302e3135302e3135362e302f32322d3232203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:45 +0000
ROA not before:           Tue 05 Mar 2024 17:37:45 +0000
ROA not after:            Tue 04 Mar 2025 17:42:45 +0000
asID:                     27901
IP address blocks:        170.150.156.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:db:e3:4a:bf:93:d4:e5:91:37:f7:56:52:51:a3:93:71:f5:06:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:45 2024 GMT
            Not After : Mar  4 17:42:45 2025 GMT
        Subject: CN=10E1C18C63E6B8B6CE65E520B53BA945914CA899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:57:50:f0:3a:30:fe:49:cb:08:5b:d3:c4:
                    ea:86:fd:0a:8e:fc:36:c9:6a:4e:e3:bc:bd:34:97:
                    93:c8:49:b2:23:21:cd:55:ab:ed:08:3a:ff:76:b8:
                    0f:bd:c1:c8:63:fc:fd:32:ef:cc:3c:5b:76:41:fe:
                    de:65:85:3e:74:37:4a:2e:27:3c:ca:27:15:c0:33:
                    51:f3:a4:fe:15:08:2b:de:00:54:4d:35:1a:61:89:
                    da:5f:ff:9f:13:3f:c3:03:f1:3e:28:10:88:4b:14:
                    8a:b3:de:d2:32:01:fb:96:66:72:46:5d:65:95:2f:
                    4b:8f:84:7e:81:44:6b:c9:79:03:d9:b4:5e:ba:50:
                    5b:3d:68:d4:67:93:1a:fd:ba:52:ab:2c:9a:05:c3:
                    6e:29:fc:69:81:18:01:24:73:41:e7:61:0a:ec:b0:
                    0d:02:d5:b0:9e:8a:be:0e:c6:e3:09:9b:03:fb:23:
                    d6:33:8f:a2:68:d7:b5:96:3e:15:c6:b7:72:4a:59:
                    75:85:44:82:04:9a:b3:1f:e8:77:b4:56:6d:e8:46:
                    3d:25:ae:e4:ee:54:32:b4:8b:b9:7d:8b:8e:ba:e0:
                    6d:05:c8:7a:75:33:05:9f:0a:cd:77:4b:46:95:a3:
                    ff:cf:93:66:87:eb:8f:7f:81:fd:3f:ad:cc:0b:34:
                    93:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E1:C1:8C:63:E6:B8:B6:CE:65:E5:20:B5:3B:A9:45:91:4C:A8:99
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137302e3135302e3135362e302f32322d3232203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:b5:71:1e:cc:8f:fd:83:be:3b:c4:3f:2d:73:a0:9f:33:8d:
         e3:17:d8:ca:f1:2c:60:9b:98:67:8a:c2:53:fa:80:39:09:36:
         7b:ed:43:9f:88:0a:3d:b1:15:b0:3f:01:23:57:f7:a2:b9:dc:
         07:c9:2e:d4:c2:b2:06:30:4e:5c:94:20:ee:65:ef:ab:1a:3c:
         1f:bc:b5:a4:a7:52:c4:a8:db:72:d6:49:7a:75:b6:f4:54:13:
         35:22:29:23:b4:cb:c7:bf:c5:5e:eb:b5:dc:f9:f6:64:09:46:
         ba:40:b8:de:ab:9d:46:cf:65:29:95:2d:2a:d7:39:a3:80:2c:
         18:eb:d7:c6:f8:65:e2:6c:f2:98:6d:ce:f2:a6:63:7d:a0:06:
         d1:5c:38:37:56:19:57:ea:88:e8:6a:96:0c:e6:70:d0:a7:e0:
         11:ea:69:1d:8d:59:b1:2a:78:25:e1:ae:19:b0:4e:56:37:9f:
         70:54:c4:13:8b:46:d7:eb:cb:70:a3:4b:49:b9:7d:ea:77:95:
         cd:24:cb:0e:a2:5f:b9:59:21:fa:ed:c0:ab:70:9c:52:b9:b7:
         ce:d0:f6:12:3a:65:88:02:a0:30:1b:e5:1f:20:25:1e:6a:d1:
         f4:1a:a4:80:cf:07:16:0b:5b:fa:4a:21:1f:99:d9:44:14:48:
         96:12:24:c6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVtvjSr+T1OWRN/dWUlGjk3H1BrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkxREU1MTlGMjVGREY2OTJDQkRDMTBBMDk2NEE0QjNE
OUNEQTkxRjAeFw0yNDAzMDUxNzM3NDVaFw0yNTAzMDQxNzQyNDVaMDMxMTAvBgNV
BAMTKDEwRTFDMThDNjNFNkI4QjZDRTY1RTUyMEI1M0JBOTQ1OTE0Q0E4OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFVdQ8Dow/knLCFvTxOqG/QqO
/DbJak7jvL00l5PISbIjIc1Vq+0IOv92uA+9wchj/P0y78w8W3ZB/t5lhT50N0ou
JzzKJxXAM1HzpP4VCCveAFRNNRphidpf/58TP8MD8T4oEIhLFIqz3tIyAfuWZnJG
XWWVL0uPhH6BRGvJeQPZtF66UFs9aNRnkxr9ulKrLJoFw24p/GmBGAEkc0HnYQrs
sA0C1bCeir4OxuMJmwP7I9Yzj6Jo17WWPhXGt3JKWXWFRIIEmrMf6He0Vm3oRj0l
ruTuVDK0i7l9i4664G0FyHp1MwWfCs13S0aVo//Pk2aH649/gf0/rcwLNJNvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUEOHBjGPmuLbOZeUgtTupRZFMqJkwHwYDVR0j
BBgwFoAUGR3lGfJf32ksvcEKCWSks9nNqR8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQTI2MzBFRkYxNjFFMzQ5MUE4NEE1QjRGNkZCNjhDRjA0
MzlBQ0M0MDQ0OTRCN0JGMUMzOTE5MjlGQTc2QzNFLzAvMTkxREU1MTlGMjVGREY2
OTJDQkRDMTBBMDk2NEE0QjNEOUNEQTkxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOTFERTUxOUYyNUZERjY5MkNC
REMxMEEwOTY0QTRCM0Q5Q0RBOTFGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkEyNjMwRUZGMTYxRTM0OTFBODRBNUI0RjZGQjY4Q0YwNDM5QUNDNDA0
NDk0QjdCRjFDMzkxOTI5RkE3NkMzRS8wLzMxMzczMDJlMzEzNTMwMmUzMTM1MzYy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3MzkzMDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqpac
MA0GCSqGSIb3DQEBCwUAA4IBAQCltXEezI/9g747xD8tc6CfM43jF9jK8Sxgm5hn
isJT+oA5CTZ77UOfiAo9sRWwPwEjV/eiudwHyS7UwrIGME5clCDuZe+rGjwfvLWk
p1LEqNty1kl6dbb0VBM1IikjtMvHv8Ve67Xc+fZkCUa6QLjeq51Gz2UplS0q1zmj
gCwY69fG+GXibPKYbc7ypmN9oAbRXDg3VhlX6ojoapYM5nDQp+AR6mkdjVmxKngl
4a4ZsE5WN59wVMQTi0bX68two0tJuX3qd5XNJMsOol+5WSH67cCrcJxSubfO0PYS
OmWIAqAwG+UfICUeatH0GqSAzwcWC1v6SiEfmdlEFEiWEiTG
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org