Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36342e302f32332d3233203d3e20323732303235.roa
File:                     3138312e3232342e36342e302f32332d3233203d3e20323732303235.roa (raw, json)
Hash identifier:          iT8CeFerQ+XCHcEToJVDPPdH68TctxuQT6sDtOIolSc=
Subject key identifier:   B7:2F:2A:96:52:10:92:EB:00:76:1F:FE:0D:9A:03:3B:B6:B6:38:BE
Certificate issuer:       /CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
Certificate serial:       0712B5E2914D1720EA622AC11C394BE83D2101E8
Authority key identifier: FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36342e302f32332d3233203d3e20323732303235.roa
Signing time:             Fri 13 Sep 2024 16:00:01 +0000
ROA not before:           Fri 13 Sep 2024 15:55:01 +0000
ROA not after:            Fri 12 Sep 2025 16:00:01 +0000
asID:                     272025
IP address blocks:        181.224.64.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 17:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:12:b5:e2:91:4d:17:20:ea:62:2a:c1:1c:39:4b:e8:3d:21:01:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
        Validity
            Not Before: Sep 13 15:55:01 2024 GMT
            Not After : Sep 12 16:00:01 2025 GMT
        Subject: CN=B72F2A96521092EB00761FFE0D9A033BB6B638BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:51:89:01:c9:b4:8c:8a:66:89:24:97:ac:
                    ac:5f:c6:b5:3c:c8:97:86:4c:39:2d:68:9c:3f:f7:
                    24:99:a0:a0:f3:53:55:76:d5:0a:6a:8f:42:0c:f7:
                    b0:cd:21:ee:d3:1b:e6:98:67:4e:5f:d2:58:95:6e:
                    55:e1:2f:da:a5:28:a4:a4:e1:c1:e3:9d:2c:cc:75:
                    94:55:83:e3:d6:1d:ef:b3:51:ce:ae:02:87:f7:7e:
                    f9:cc:b0:c5:e3:f6:11:fc:05:a6:d2:9a:33:89:29:
                    40:07:1a:e3:9a:23:28:9d:fa:7e:b5:8a:56:32:40:
                    37:d1:77:13:58:e4:b9:7e:45:37:16:09:d2:50:53:
                    be:c5:f6:30:e0:e4:9e:f6:d5:44:ea:16:ce:83:c7:
                    a1:40:b9:81:60:38:bd:a0:22:6e:40:44:7d:9f:ee:
                    a8:ad:6a:24:6c:68:da:be:7d:e6:11:83:0e:94:79:
                    d9:f8:b2:b9:1e:db:40:df:91:f0:8a:15:b0:31:bb:
                    0c:13:cd:cd:00:0c:ca:09:2d:1e:80:2a:32:d8:79:
                    5e:30:00:93:8c:b4:a0:d6:c2:ef:2d:ee:27:e0:46:
                    88:cf:0a:0f:bd:b2:47:e5:4b:0d:bc:09:d0:0f:dc:
                    4b:2c:04:ac:ff:f5:84:12:e5:97:ce:c3:8b:f3:36:
                    aa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2F:2A:96:52:10:92:EB:00:76:1F:FE:0D:9A:03:3B:B6:B6:38:BE
            X509v3 Authority Key Identifier:
                keyid:FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36342e302f32332d3233203d3e20323732303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:b5:4d:04:da:c3:5b:b7:6a:9a:f6:dc:c1:91:05:3b:4b:4c:
         16:44:50:16:0a:48:5a:8c:8d:d9:b1:4e:c6:08:71:63:ce:65:
         8d:9f:97:4d:10:65:3f:42:97:c0:0a:04:09:72:41:dc:fd:48:
         16:0f:ce:11:56:f4:8c:10:f6:b5:0a:09:bb:91:72:1c:5d:73:
         80:b4:c4:e4:bb:29:e7:81:9a:26:0b:4c:a0:ac:a2:f4:92:95:
         db:62:31:da:2f:02:f6:1d:59:de:22:39:d5:5b:e4:e5:e7:c6:
         98:02:09:fb:cc:d5:28:87:59:0f:f7:62:5a:90:cb:58:0c:f4:
         a2:a0:91:78:47:47:dd:86:0a:dd:d6:3b:4f:f7:88:3c:de:15:
         dc:f3:92:98:6a:a6:d9:18:13:24:e2:0a:09:7a:ee:84:a2:39:
         67:d6:aa:e7:6f:43:e9:03:c8:e7:3f:0b:b3:9c:4c:33:e4:ad:
         43:b4:2a:55:6f:44:76:a9:40:08:ff:ff:2d:dd:8b:2b:a8:88:
         f6:26:54:d4:d9:7c:0f:26:cd:d9:da:a0:6f:c1:5c:7e:0c:1a:
         bc:03:d2:69:8d:a5:c4:91:6f:d7:ca:6d:54:9d:c1:8f:01:ca:
         94:0b:d1:5d:94:1b:56:8d:e7:2c:f7:c6:65:68:fe:aa:50:f4:
         9f:d9:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----