Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137302e38322e3138382e302f32322d3232203d3e203237393031.roa
File:                     3137302e38322e3138382e302f32322d3232203d3e203237393031.roa (raw, json)
Hash identifier:          OirmRzKr5p8MKn9YszUKKLG2gXiqKD3AGc/uzupvuvk=
Subject key identifier:   19:37:BD:70:38:E8:37:52:68:39:75:6F:0E:9B:3E:7D:3E:D6:6C:A3
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       69560829F0163AFE0A444AF62394C8B2DFC6E4F0
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137302e38322e3138382e302f32322d3232203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:44 +0000
ROA not before:           Tue 05 Mar 2024 17:37:44 +0000
ROA not after:            Tue 04 Mar 2025 17:42:44 +0000
asID:                     27901
IP address blocks:        170.82.188.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:56:08:29:f0:16:3a:fe:0a:44:4a:f6:23:94:c8:b2:df:c6:e4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:44 2024 GMT
            Not After : Mar  4 17:42:44 2025 GMT
        Subject: CN=1937BD7038E837526839756F0E9B3E7D3ED66CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d8:6a:79:d3:dc:88:a3:ae:30:3d:56:c1:cb:
                    87:80:4a:68:a0:af:14:e2:45:60:61:99:30:ca:e7:
                    2f:e7:95:12:4b:03:40:23:6c:1b:e2:58:af:20:3a:
                    7d:b4:48:37:72:c7:c4:24:45:1c:e4:45:2e:37:4d:
                    13:b2:f4:08:ab:2b:81:b8:f3:64:17:21:1d:12:76:
                    32:89:13:bd:4a:f9:d0:55:da:4d:74:4e:d2:01:b0:
                    14:8a:01:d0:52:71:84:57:24:58:b4:83:9f:49:66:
                    a7:78:e4:18:df:b5:a7:5a:f7:83:c9:9c:a4:e0:b9:
                    fd:92:b4:fa:98:a8:4c:27:e4:06:fb:68:db:50:10:
                    86:2d:bc:d3:aa:6d:d3:f6:17:10:84:6c:67:73:42:
                    c3:9b:9e:7b:09:68:6d:6f:64:28:15:42:ed:05:b9:
                    7a:6e:ad:8a:ff:45:20:ee:b2:2e:1f:7c:33:d5:cc:
                    2a:ee:c2:b7:d6:b4:ca:0f:17:27:5b:66:db:cf:64:
                    30:dc:be:6b:88:d8:11:25:e5:b5:35:55:a1:1d:fd:
                    86:3b:42:0e:1c:04:7b:92:cb:12:57:1c:18:5a:f2:
                    f7:7d:45:26:2a:c1:7e:1d:8c:9d:02:b1:61:1d:6a:
                    ec:60:2b:32:43:bb:ec:ba:c8:0a:6c:2a:33:f5:c0:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:37:BD:70:38:E8:37:52:68:39:75:6F:0E:9B:3E:7D:3E:D6:6C:A3
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137302e38322e3138382e302f32322d3232203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:42:9d:45:01:06:6e:85:17:b8:1c:3a:2f:cf:f5:e5:4c:f3:
         0d:43:96:87:8a:9e:3b:42:52:06:53:bc:ff:34:1b:eb:35:d6:
         ef:05:c3:0f:8b:ec:fa:67:b9:0d:25:77:8b:60:d7:45:3c:13:
         4c:6b:59:8f:20:c2:dd:23:76:d3:0e:73:2a:da:10:8e:bb:84:
         c6:10:aa:fb:db:0b:76:44:8c:e1:21:17:a7:3f:60:1d:97:49:
         de:79:51:29:7f:31:14:66:ae:db:55:9e:1d:a5:70:59:cb:29:
         59:10:06:2e:a3:d3:ba:b2:93:d7:d7:68:b6:a3:62:42:d8:b1:
         96:79:72:43:27:d8:86:c5:5f:b5:5b:89:a7:fe:63:dd:32:2d:
         c9:82:2d:e8:75:d5:7d:9f:b5:7d:a9:02:fc:3a:ad:69:af:1a:
         6d:6f:03:41:2b:ab:65:bf:77:25:be:70:50:43:3a:1e:1b:bc:
         80:fc:04:1b:d5:06:6f:2a:85:81:9f:e5:64:e4:2a:01:fd:61:
         bf:d5:92:50:6c:bc:53:92:a9:12:c6:c2:84:d0:cd:2a:d9:4b:
         ea:5d:7b:a9:02:76:92:a5:ef:bc:c4:c8:5b:0d:55:75:74:e0:
         ec:cc:2e:ed:4e:a2:f7:0b:8b:04:e0:4b:95:45:fb:34:b9:f2:
         9f:6d:1d:bb
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaVYIKfAWOv4KREr2I5TIst/G5PAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkxREU1MTlGMjVGREY2OTJDQkRDMTBBMDk2NEE0QjNE
OUNEQTkxRjAeFw0yNDAzMDUxNzM3NDRaFw0yNTAzMDQxNzQyNDRaMDMxMTAvBgNV
BAMTKDE5MzdCRDcwMzhFODM3NTI2ODM5NzU2RjBFOUIzRTdEM0VENjZDQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ2Gp509yIo64wPVbBy4eASmig
rxTiRWBhmTDK5y/nlRJLA0AjbBviWK8gOn20SDdyx8QkRRzkRS43TROy9AirK4G4
82QXIR0SdjKJE71K+dBV2k10TtIBsBSKAdBScYRXJFi0g59JZqd45Bjftada94PJ
nKTguf2StPqYqEwn5Ab7aNtQEIYtvNOqbdP2FxCEbGdzQsObnnsJaG1vZCgVQu0F
uXpurYr/RSDusi4ffDPVzCruwrfWtMoPFydbZtvPZDDcvmuI2BEl5bU1VaEd/YY7
Qg4cBHuSyxJXHBha8vd9RSYqwX4djJ0CsWEdauxgKzJDu+y6yApsKjP1wJw9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUGTe9cDjoN1JoOXVvDps+fT7WbKMwHwYDVR0j
BBgwFoAUGR3lGfJf32ksvcEKCWSks9nNqR8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQTI2MzBFRkYxNjFFMzQ5MUE4NEE1QjRGNkZCNjhDRjA0
MzlBQ0M0MDQ0OTRCN0JGMUMzOTE5MjlGQTc2QzNFLzAvMTkxREU1MTlGMjVGREY2
OTJDQkRDMTBBMDk2NEE0QjNEOUNEQTkxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOTFERTUxOUYyNUZERjY5MkNC
REMxMEEwOTY0QTRCM0Q5Q0RBOTFGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkEyNjMwRUZGMTYxRTM0OTFBODRBNUI0RjZGQjY4Q0YwNDM5QUNDNDA0
NDk0QjdCRjFDMzkxOTI5RkE3NkMzRS8wLzMxMzczMDJlMzgzMjJlMzEzODM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzM5MzAzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqpSvDAN
BgkqhkiG9w0BAQsFAAOCAQEAkkKdRQEGboUXuBw6L8/15UzzDUOWh4qeO0JSBlO8
/zQb6zXW7wXDD4vs+me5DSV3i2DXRTwTTGtZjyDC3SN20w5zKtoQjruExhCq+9sL
dkSM4SEXpz9gHZdJ3nlRKX8xFGau21WeHaVwWcspWRAGLqPTurKT19dotqNiQtix
lnlyQyfYhsVftVuJp/5j3TItyYIt6HXVfZ+1fakC/Dqtaa8abW8DQSurZb93Jb5w
UEM6Hhu8gPwEG9UGbyqFgZ/lZOQqAf1hv9WSUGy8U5KpEsbChNDNKtlL6l17qQJ2
kqXvvMTIWw1VdXTg7Mwu7U6i9wuLBOBLlUX7NLnyn20duw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org