Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34302e302f32322d3234203d3e20323639393739.roa
File:                     3138372e302e34302e302f32322d3234203d3e20323639393739.roa (raw, json)
Hash identifier:          azPgUcCsX/Jl57T7W3PkR0rPsDt07AbkldFdTNkM3ak=
Subject key identifier:   AD:0E:51:46:09:7C:11:13:0A:4E:38:53:E2:18:74:64:C3:25:39:09
Certificate issuer:       /CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
Certificate serial:       0C43720B8FF1758991143E0C42883D223273237D
Authority key identifier: 78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34302e302f32322d3234203d3e20323639393739.roa
Signing time:             Fri 03 Jan 2025 13:40:00 +0000
ROA not before:           Fri 03 Jan 2025 13:35:00 +0000
ROA not after:            Fri 02 Jan 2026 13:40:00 +0000
asID:                     269979
IP address blocks:        187.0.40.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Tue 07 Jan 2025 14:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:43:72:0b:8f:f1:75:89:91:14:3e:0c:42:88:3d:22:32:73:23:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
        Validity
            Not Before: Jan  3 13:35:00 2025 GMT
            Not After : Jan  2 13:40:00 2026 GMT
        Subject: CN=AD0E5146097C11130A4E3853E2187464C3253909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:33:f0:c8:a3:17:47:85:26:88:57:ae:ff:
                    58:d2:67:0d:a4:cd:11:a4:2c:77:ec:f1:14:ad:6a:
                    3d:17:10:7a:57:22:e3:46:89:a9:c5:de:c0:99:17:
                    c4:26:99:d8:dc:f9:e1:51:47:fa:70:ba:c2:69:c5:
                    c5:7b:7e:ae:53:19:a0:93:d4:f6:7d:92:9e:83:0a:
                    b0:9b:e6:02:60:e0:ff:dd:eb:7f:f0:21:65:63:0e:
                    68:87:79:d5:20:e5:e0:ea:2e:7e:ab:70:6b:42:86:
                    54:5c:4b:12:63:f0:fb:6c:9f:55:8b:16:63:bb:51:
                    ce:d1:8c:1b:15:e2:b9:06:79:4d:fd:7d:0a:0e:1b:
                    b8:89:5b:b9:28:81:a7:32:3d:fd:3b:d0:a7:26:6e:
                    21:aa:0a:54:bb:dd:fd:91:e7:e6:aa:49:09:79:c0:
                    41:fc:81:6a:65:2f:d7:dd:1d:f4:6a:eb:69:e4:cc:
                    d1:9a:84:2b:ba:61:47:42:38:18:26:59:9c:04:14:
                    42:34:97:54:db:95:81:c5:4e:c7:45:f7:06:52:25:
                    e6:df:24:17:f2:3b:d2:b7:41:b0:29:c0:b9:6f:b3:
                    61:77:84:0d:d8:97:8c:13:9f:27:f6:66:1d:b4:0f:
                    97:1a:66:3d:88:21:f5:53:d5:07:55:30:13:de:30:
                    18:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0E:51:46:09:7C:11:13:0A:4E:38:53:E2:18:74:64:C3:25:39:09
            X509v3 Authority Key Identifier:
                keyid:78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34302e302f32322d3234203d3e20323639393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:49:0f:9a:2c:8c:fa:fc:6d:7b:13:c8:b5:5a:d4:7b:05:82:
         43:c8:23:ec:4a:94:bf:39:1d:15:91:2d:71:55:fc:6c:bd:a8:
         bd:bd:94:d0:70:2c:0d:42:52:a8:cd:2f:0f:30:e7:56:72:3b:
         7a:10:d0:7a:ce:8c:11:66:6b:a5:6c:31:b6:fc:21:74:54:e8:
         bc:1b:71:97:3e:81:7e:aa:6d:ea:c8:57:dc:be:f1:a4:d7:be:
         1e:f4:b6:5f:1e:28:5a:c5:98:52:dc:5c:7f:5a:21:e5:b4:ae:
         c2:49:66:3e:3d:10:af:fb:b3:f8:59:ed:5a:4e:88:83:91:47:
         cc:bc:74:e9:48:b3:a8:49:cd:78:c9:a4:53:24:ef:43:85:f6:
         43:63:30:a0:ad:d2:d0:84:51:dc:23:aa:a9:77:71:7c:00:bb:
         47:f1:9c:64:d6:bf:e2:38:b3:48:6b:ea:07:1d:fd:e7:38:e5:
         96:fd:5a:09:02:37:69:39:12:f2:57:ad:06:76:40:62:d8:0e:
         6f:1d:5b:1d:21:f7:59:ac:e9:bd:5b:f0:a6:ac:4d:0d:59:b7:
         76:0e:43:a9:c7:5b:38:35:48:48:56:9d:e7:52:7b:28:94:d5:
         9b:04:0d:3f:aa:41:7b:6d:9c:7b:4e:22:bd:ef:0d:b1:63:5c:
         7a:d7:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:58:01 2025 by rpki-client