Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/3138362e3134382e3130342e302f32342d3234203d3e203532323435.roa
File:                     3138362e3134382e3130342e302f32342d3234203d3e203532323435.roa (raw, json)
Hash identifier:          jrkK+WYIoQvVnH+ln+8GWNXYhBNL/uRNWY7BqDYOcAY=
Subject key identifier:   3B:70:9E:57:AC:78:3B:95:89:07:5A:8D:92:58:6A:F8:C7:39:89:A5
Certificate issuer:       /CN=15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A
Certificate serial:       1879D5300C7291A6E8E77724A3C67037F49899D0
Authority key identifier: 15:A0:EC:F9:98:6E:4E:D2:D8:E7:03:E1:C0:F7:64:70:A6:A9:1F:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/3138362e3134382e3130342e302f32342d3234203d3e203532323435.roa
Signing time:             Tue 05 Mar 2024 17:59:01 +0000
ROA not before:           Tue 05 Mar 2024 17:54:01 +0000
ROA not after:            Tue 04 Mar 2025 17:59:01 +0000
asID:                     52245
IP address blocks:        186.148.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 21 Sep 2024 14:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:79:d5:30:0c:72:91:a6:e8:e7:77:24:a3:c6:70:37:f4:98:99:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A
        Validity
            Not Before: Mar  5 17:54:01 2024 GMT
            Not After : Mar  4 17:59:01 2025 GMT
        Subject: CN=3B709E57AC783B9589075A8D92586AF8C73989A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:73:c7:cd:5a:41:50:d1:62:dc:ff:35:d6:
                    1b:76:98:7b:5f:5f:7a:e2:f7:ae:2d:90:af:d4:63:
                    bf:00:16:69:33:c6:b4:d7:7c:d4:a6:f5:37:63:36:
                    11:a5:14:34:72:92:c5:bc:c5:ae:18:24:fc:7e:e2:
                    b2:0a:27:9e:f9:c5:4e:b7:23:76:32:84:8b:60:b2:
                    88:1e:eb:cb:31:f0:9c:b9:d0:8b:8c:2a:64:6c:7f:
                    41:33:0f:da:11:6d:a3:b4:fa:74:d9:6f:69:16:45:
                    31:87:8b:a3:38:ac:b6:74:58:ee:62:15:2c:5a:a0:
                    78:f2:dc:ee:bf:5d:4d:28:c6:fe:c8:4e:db:93:0f:
                    12:d4:ec:bf:78:3d:79:fc:80:b7:22:9f:aa:c5:ec:
                    70:ee:44:50:57:90:cf:18:3f:5d:41:57:9b:a6:b0:
                    b8:c1:f2:49:82:2e:15:a0:29:ac:ed:51:76:bb:49:
                    00:16:88:cb:16:6f:89:70:b6:92:cc:29:48:56:26:
                    55:18:05:d2:43:31:e1:8f:fd:32:76:91:94:99:c1:
                    32:8c:f6:1e:58:bf:38:51:ab:a8:e5:63:f6:8f:b6:
                    33:92:39:6f:6c:f7:f4:0d:e7:6b:6b:03:31:1c:a6:
                    0a:76:66:57:99:28:92:38:f9:0c:46:f1:6a:28:2c:
                    06:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:70:9E:57:AC:78:3B:95:89:07:5A:8D:92:58:6A:F8:C7:39:89:A5
            X509v3 Authority Key Identifier:
                keyid:15:A0:EC:F9:98:6E:4E:D2:D8:E7:03:E1:C0:F7:64:70:A6:A9:1F:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/3138362e3134382e3130342e302f32342d3234203d3e203532323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:92:45:20:0e:7a:9f:28:44:42:e8:03:eb:f6:e7:fd:85:40:
         be:84:ac:5e:ee:3d:2c:88:91:0b:b1:a4:83:ac:e9:d8:a7:d0:
         49:22:6d:f6:9e:17:c4:81:c3:b2:08:4f:22:dd:ff:d9:1c:0b:
         6d:de:cb:24:bb:5d:3e:63:a5:eb:e6:ab:dd:44:e2:18:1a:22:
         48:d4:09:37:8d:84:c8:4a:30:fc:7a:ed:1b:34:b9:04:8d:25:
         ce:39:54:ac:23:de:61:02:b7:d0:fd:0e:d3:e7:13:25:5e:f3:
         e0:3d:4b:e1:a7:25:a7:30:58:5d:5c:26:12:72:6d:85:e3:77:
         43:ef:cd:13:21:97:96:5d:b1:e3:59:90:b8:f3:84:e0:bc:10:
         8c:4d:72:1a:01:9d:d4:67:22:eb:42:73:04:07:b6:a0:ff:68:
         08:e7:3c:6c:23:5e:37:e2:a6:cb:f3:41:ca:79:af:2e:2d:7a:
         75:9e:0d:af:1f:7d:9b:c8:dc:04:c5:32:28:fc:c2:72:eb:0c:
         85:d7:22:a6:47:ec:a8:3d:28:b4:56:de:a3:f6:7f:3e:bb:78:
         f0:49:a6:90:52:e4:e9:e5:3f:6f:5e:25:00:7f:7e:6c:72:cd:
         bd:f9:d7:cf:aa:0c:d4:9b:c8:ba:f1:09:10:95:63:4d:17:27:
         2a:b0:18:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 16:45:58 2024 by rpki-client on console-fra.rpki-client.org