Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3138372e3130322e3232382e302f32332d3233203d3e20323730313135.roa
File:                     3138372e3130322e3232382e302f32332d3233203d3e20323730313135.roa (raw, json)
Hash identifier:          t7IRd7Bn2XMNZaS/XIwz/YdyKLMA4WPCqvP4RTE81Y0=
Subject key identifier:   12:34:D0:BA:27:02:2C:0A:42:FD:1A:64:FC:FD:DA:AF:69:06:F0:AC
Certificate issuer:       /CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27
Certificate serial:       3616ECE7C9FE2C1F973DB5586685B8B44DB978DC
Authority key identifier: 3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3138372e3130322e3232382e302f32332d3233203d3e20323730313135.roa
Signing time:             Wed 26 Jun 2024 23:15:00 +0000
ROA not before:           Wed 26 Jun 2024 23:10:00 +0000
ROA not after:            Wed 25 Jun 2025 23:15:00 +0000
asID:                     270115
IP address blocks:        187.102.228.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 04 Jul 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:16:ec:e7:c9:fe:2c:1f:97:3d:b5:58:66:85:b8:b4:4d:b9:78:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27
        Validity
            Not Before: Jun 26 23:10:00 2024 GMT
            Not After : Jun 25 23:15:00 2025 GMT
        Subject: CN=1234D0BA27022C0A42FD1A64FCFDDAAF6906F0AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7e:88:13:83:19:5f:1b:09:e6:01:1b:fe:51:
                    62:f0:15:1b:9b:a2:c4:8d:3f:9f:78:b7:51:83:6b:
                    22:4d:ae:e5:84:44:05:f0:a6:d8:39:42:b9:88:5a:
                    33:90:83:36:8d:36:66:1b:48:21:d8:0a:05:27:61:
                    47:e2:14:93:a1:64:2f:64:74:88:33:30:6f:da:7a:
                    66:07:d6:55:ff:26:d9:d4:70:ca:77:04:4b:51:b4:
                    67:83:a9:32:51:40:33:61:1a:5a:72:70:2c:db:26:
                    da:2c:43:0b:f8:93:95:2c:cd:5c:0b:7c:f6:d9:57:
                    14:76:d1:55:40:7f:5b:4f:bc:25:10:11:c1:24:98:
                    d2:ae:68:76:6a:3d:7c:02:26:d8:9f:a7:2c:db:b3:
                    00:4d:4f:17:fc:1c:b0:54:40:0b:75:5d:57:d8:10:
                    5b:8f:ab:ee:13:1b:f0:7b:4e:69:8f:4e:9c:b9:d0:
                    65:3a:5e:7d:87:9e:1e:61:93:e6:3c:bd:fa:6c:cf:
                    57:32:b2:e6:f9:7b:ef:e0:9e:2e:da:19:78:96:6b:
                    52:0f:40:b9:60:d3:88:3e:a8:2c:bd:5c:c6:1f:bf:
                    cb:30:5b:80:8f:7b:5a:6c:dd:e3:e7:36:74:06:5a:
                    e5:7f:b9:95:c1:05:f9:e5:de:ba:90:a6:d8:7a:75:
                    e5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:34:D0:BA:27:02:2C:0A:42:FD:1A:64:FC:FD:DA:AF:69:06:F0:AC
            X509v3 Authority Key Identifier:
                keyid:3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3138372e3130322e3232382e302f32332d3233203d3e20323730313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:4f:47:1a:74:73:6f:b4:5d:bc:53:de:37:d4:be:c4:b1:6c:
         ce:89:25:ec:9d:17:9f:73:39:a3:62:83:32:1c:7c:22:cc:78:
         f8:21:52:df:8e:c1:91:cb:b2:be:0b:4b:1b:42:8c:32:a7:a6:
         54:f4:b1:f8:34:3d:6b:ec:52:ec:36:4c:c5:e0:12:c4:86:3d:
         c6:c0:94:08:03:b3:a8:43:fa:2f:a7:dd:bc:69:ed:d5:e6:ea:
         8c:71:7a:3a:e1:a9:ed:06:c2:80:50:19:37:09:80:9b:d0:a0:
         27:60:fa:7e:f2:2e:f3:95:9e:e5:ac:bc:ce:54:df:46:ff:51:
         71:51:6b:7f:0c:c1:e0:8d:72:73:ee:11:fa:3b:a5:29:31:f2:
         48:0d:bc:c0:9b:28:b8:df:67:65:21:f9:21:b3:17:55:5e:70:
         a6:d5:3e:d3:08:10:27:aa:52:c1:2a:a3:f5:82:4b:60:ec:40:
         cb:ec:1e:97:b8:f7:e3:20:03:28:9b:ed:5d:84:c9:d5:ad:21:
         b3:6b:5f:08:39:35:08:90:15:c8:4e:d7:a2:08:94:ef:73:cc:
         d6:00:ca:86:1e:66:46:66:3b:ab:8f:03:5e:ad:61:b7:fd:50:
         bc:a3:5f:5b:23:ff:01:17:ac:04:1d:bc:1e:66:cd:4b:10:c0:
         a8:71:40:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 21:57:44 2024 by rpki-client on console-fra.rpki-client.org