Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132352e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e3132352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          hWNVZIfgkn0GrdU4tHvUiZ3uLOtW7CKNop4nZ9RZtdE=
Subject key identifier:   E4:61:AE:7B:63:DC:8A:B8:CA:C5:71:E8:22:10:F9:E7:D8:62:89:78
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       532761F85B56BEADAC92E3D23F17AAF7A7ED828D
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132352e302f32342d3234203d3e20383334.roa
Signing time:             Mon 14 Jul 2025 11:10:00 +0000
ROA not before:           Mon 14 Jul 2025 11:05:00 +0000
ROA not after:            Mon 13 Jul 2026 11:10:00 +0000
asID:                     834
IP address blocks:        190.93.125.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 18 Jul 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:27:61:f8:5b:56:be:ad:ac:92:e3:d2:3f:17:aa:f7:a7:ed:82:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jul 14 11:05:00 2025 GMT
            Not After : Jul 13 11:10:00 2026 GMT
        Subject: CN=E461AE7B63DC8AB8CAC571E82210F9E7D8628978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4c:99:6c:fa:ae:f1:d5:ac:69:df:e2:42:ee:
                    f5:d7:7c:c8:1f:d1:40:85:01:90:2f:3b:5d:7f:c5:
                    a6:c8:cf:6c:d7:c3:6c:37:e6:5e:af:64:82:c2:0c:
                    05:c1:34:ed:05:44:37:35:0c:6e:a6:00:74:21:52:
                    98:38:b3:cd:8a:5b:b9:d4:ff:fd:59:83:15:c4:08:
                    f0:26:9d:47:e1:d2:20:ad:2a:a2:29:45:f3:37:ff:
                    fc:33:83:9c:ec:8a:ed:83:c1:ff:19:f6:e9:7f:38:
                    0f:b0:70:cb:5b:1c:e3:a4:87:9f:6e:11:a1:0a:8e:
                    5e:d5:47:f2:65:03:cf:61:e5:a9:21:3e:45:b9:13:
                    9e:7b:ae:e8:85:3b:59:4e:fe:6b:3e:19:f8:68:a3:
                    9f:b8:4a:6d:36:1f:f6:0d:b7:60:68:11:7d:35:52:
                    75:ac:48:3f:47:75:59:d0:35:d2:e7:1e:74:22:99:
                    99:ee:f4:0e:d5:eb:5e:68:4d:80:b8:3f:1f:4e:7c:
                    23:fc:8a:6e:1f:25:82:40:bf:b8:d2:83:45:cc:1e:
                    7f:1f:f0:68:bf:7f:4c:2b:12:6f:3b:fc:f7:ec:0f:
                    b5:ca:e7:a6:9b:bc:24:9c:08:c8:88:98:07:5b:b8:
                    ea:df:b5:d6:34:6e:de:d6:3f:7f:be:53:df:5f:9b:
                    1d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:61:AE:7B:63:DC:8A:B8:CA:C5:71:E8:22:10:F9:E7:D8:62:89:78
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:48:9c:44:b4:a0:41:9c:3b:db:b4:9f:9d:07:a6:58:6e:45:
         e2:a4:9b:9b:a2:7f:7e:f8:89:93:c6:6a:6c:78:8c:81:73:c4:
         00:67:5f:40:a1:36:b2:f3:99:5b:a3:55:35:93:9f:db:26:19:
         11:cc:e7:03:35:14:42:81:d4:99:ac:6a:fd:49:d9:c8:f1:23:
         bc:2b:e0:c0:58:e8:37:df:06:72:cb:a0:56:86:11:62:44:3e:
         03:91:8a:44:ab:28:ad:ab:82:c9:8c:e1:27:e5:61:42:a9:9f:
         c1:9b:8f:e4:e7:27:c3:e8:f0:ac:d9:5d:18:79:79:3d:71:3e:
         db:26:02:23:b1:85:57:94:ca:6a:f5:09:5d:15:ab:d5:33:dd:
         f6:32:05:21:4a:e8:2c:07:c8:c7:d0:f0:fd:f2:97:60:45:31:
         ea:72:01:d0:7d:82:bb:58:46:fb:a8:08:d7:e3:a9:1e:b2:73:
         c3:01:42:a0:1a:2a:a4:6d:55:16:fb:93:9d:f6:34:4c:e7:d2:
         2c:8c:50:7e:19:a2:fb:d7:32:1c:c2:c2:75:79:92:fd:c6:a7:
         36:49:04:97:a5:7d:fe:6c:b5:90:ae:42:46:b3:3f:02:87:f3:
         6e:ef:e0:68:e7:c4:c9:51:58:5f:fb:93:e5:e6:38:62:ec:1a:
         d4:b1:c1:f5
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUUydh+FtWvq2skuPSPxeq96ftgo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNTA3MTQxMTA1MDBaFw0yNjA3MTMxMTEwMDBaMDMxMTAvBgNV
BAMTKEU0NjFBRTdCNjNEQzhBQjhDQUM1NzFFODIyMTBGOUU3RDg2Mjg5NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWTJls+q7x1axp3+JC7vXXfMgf
0UCFAZAvO11/xabIz2zXw2w35l6vZILCDAXBNO0FRDc1DG6mAHQhUpg4s82KW7nU
//1ZgxXECPAmnUfh0iCtKqIpRfM3//wzg5zsiu2Dwf8Z9ul/OA+wcMtbHOOkh59u
EaEKjl7VR/JlA89h5akhPkW5E557ruiFO1lO/ms+Gfhoo5+4Sm02H/YNt2BoEX01
UnWsSD9HdVnQNdLnHnQimZnu9A7V615oTYC4Px9OfCP8im4fJYJAv7jSg0XMHn8f
8Gi/f0wrEm87/PfsD7XK56abvCScCMiImAdbuOrftdY0bt7WP3++U99fmx0hAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU5GGue2PcirjKxXHoIhD559hiiXgwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzEzMjM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvl19MA0GCSqG
SIb3DQEBCwUAA4IBAQA7SJxEtKBBnDvbtJ+dB6ZYbkXipJubon9++ImTxmpseIyB
c8QAZ19AoTay85lbo1U1k5/bJhkRzOcDNRRCgdSZrGr9SdnI8SO8K+DAWOg33wZy
y6BWhhFiRD4DkYpEqyitq4LJjOEn5WFCqZ/Bm4/k5yfD6PCs2V0YeXk9cT7bJgIj
sYVXlMpq9QldFavVM932MgUhSugsB8jH0PD98pdgRTHqcgHQfYK7WEb7qAjX46ke
snPDAUKgGiqkbVUW+5Od9jRM59IsjFB+GaL71zIcwsJ1eZL9xqc2SQSXpX3+bLWQ
rkJGsz8Ch/Nu7+Bo58TJUVhf+5Pl5jhi7BrUscH1
-----END CERTIFICATE-----
Generated at Thu Jul 31 23:39:32 2025 by rpki-client