Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/3137372e3132382e3230322e302f32332d3233203d3e20323730303836.roa
File:                     3137372e3132382e3230322e302f32332d3233203d3e20323730303836.roa (raw, json)
Hash identifier:          eWrHQYKdQt0O+lLXbk1+hedveRoHsopzaHTRJNs2LvM=
Subject key identifier:   7C:8C:FF:5C:AB:96:EF:B8:72:78:3E:14:7F:60:B7:19:25:82:81:44
Certificate issuer:       /CN=107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC
Certificate serial:       510815607F75C30CD9D310BA2B26D92708649A28
Authority key identifier: 10:7E:18:F1:4C:8F:32:AF:09:76:4B:99:DB:E7:A6:F0:B3:9D:B6:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/3137372e3132382e3230322e302f32332d3233203d3e20323730303836.roa
Signing time:             Tue 20 Aug 2024 21:45:00 +0000
ROA not before:           Tue 20 Aug 2024 21:40:00 +0000
ROA not after:            Tue 19 Aug 2025 21:45:00 +0000
asID:                     270086
IP address blocks:        177.128.202.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 28 Aug 2024 16:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:08:15:60:7f:75:c3:0c:d9:d3:10:ba:2b:26:d9:27:08:64:9a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC
        Validity
            Not Before: Aug 20 21:40:00 2024 GMT
            Not After : Aug 19 21:45:00 2025 GMT
        Subject: CN=7C8CFF5CAB96EFB872783E147F60B71925828144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:82:ee:43:74:4d:a0:fd:97:78:c2:05:47:01:
                    0d:9f:e9:aa:e7:88:69:c1:63:6b:1e:0e:c9:56:8b:
                    f8:82:b3:b9:27:0f:9b:92:24:bf:cb:09:c5:fc:bd:
                    66:7e:60:92:5b:58:c5:a6:c2:cc:c4:be:d0:b2:5d:
                    77:65:87:09:24:8c:6f:b8:ba:81:38:f7:25:dd:68:
                    6f:83:b2:60:17:a3:5e:b3:3b:2c:3e:d0:f1:62:e1:
                    4b:e8:66:40:43:fe:a9:a7:80:4d:e2:06:ab:43:93:
                    23:1a:80:00:93:e8:1c:94:b5:b2:30:df:35:74:3a:
                    1c:99:20:1f:5a:f1:59:de:a5:4e:1c:e3:86:46:a2:
                    54:ce:78:95:e4:db:05:ec:9e:47:8d:01:1b:11:b8:
                    09:12:1b:50:67:5f:37:a8:5b:33:70:67:b2:e8:72:
                    a4:84:fd:a8:b6:20:89:a3:56:f6:15:fb:8d:e7:aa:
                    a4:cc:db:1b:cc:88:f8:9b:25:c7:06:c8:9c:3a:53:
                    58:28:02:d9:a9:9f:57:41:1b:7e:c3:da:88:ee:53:
                    29:39:b6:a9:4b:68:76:bd:bb:8a:19:7d:60:dd:45:
                    db:09:5a:27:94:3e:06:5b:47:9b:31:d9:89:13:46:
                    fb:a5:2e:39:78:3d:32:4e:ec:f4:6f:9f:93:4b:1a:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8C:FF:5C:AB:96:EF:B8:72:78:3E:14:7F:60:B7:19:25:82:81:44
            X509v3 Authority Key Identifier:
                keyid:10:7E:18:F1:4C:8F:32:AF:09:76:4B:99:DB:E7:A6:F0:B3:9D:B6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/3137372e3132382e3230322e302f32332d3233203d3e20323730303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:5b:57:ad:28:b0:d4:14:70:bf:9d:44:9c:65:f8:0b:1d:1e:
         6a:15:82:67:e0:69:59:99:15:a4:cf:37:07:cd:52:c1:0b:b3:
         49:c2:31:a5:97:5e:b0:1a:d1:bf:3e:e5:22:a2:a4:f1:14:56:
         d9:f8:21:07:79:94:ae:fb:36:6f:87:47:70:72:55:ed:b9:dc:
         46:f8:f9:a3:85:87:3c:fa:45:e2:40:8b:a2:98:de:22:90:d8:
         cd:e7:2a:e0:a0:b2:d2:8a:28:ab:c3:e7:bc:bf:03:d9:a9:7f:
         df:26:89:4c:94:09:a7:59:3a:38:3b:dd:74:16:a1:90:dc:8a:
         e3:8f:70:ad:d2:dd:a2:b7:cf:51:fd:2b:8b:8e:82:8f:d4:fe:
         00:f5:b7:ab:ca:b2:d4:1c:bb:89:eb:a3:af:f2:43:3c:37:1f:
         b1:9c:fd:dc:a4:8b:9c:20:3b:3e:82:21:0a:be:e7:b3:70:8a:
         8a:6f:e7:ff:35:d5:28:5a:81:8d:1a:e9:8b:1d:2e:2a:a7:6d:
         ed:19:1d:ec:0c:8f:95:45:9d:cd:70:0c:78:aa:59:ce:8f:83:
         23:c5:9c:60:b3:e5:ec:17:23:6f:cd:65:6c:81:82:55:fb:30:
         ca:7e:5c:f4:70:e8:d7:4e:45:38:6e:23:74:db:47:99:18:35:
         06:2c:fc:12
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUUQgVYH91wwzZ0xC6KybZJwhkmigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA3RTE4RjE0QzhGMzJBRjA5NzY0Qjk5REJFN0E2RjBC
MzlEQjZDQzAeFw0yNDA4MjAyMTQwMDBaFw0yNTA4MTkyMTQ1MDBaMDMxMTAvBgNV
BAMTKDdDOENGRjVDQUI5NkVGQjg3Mjc4M0UxNDdGNjBCNzE5MjU4MjgxNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmgu5DdE2g/Zd4wgVHAQ2f6arn
iGnBY2seDslWi/iCs7knD5uSJL/LCcX8vWZ+YJJbWMWmwszEvtCyXXdlhwkkjG+4
uoE49yXdaG+DsmAXo16zOyw+0PFi4UvoZkBD/qmngE3iBqtDkyMagACT6ByUtbIw
3zV0OhyZIB9a8VnepU4c44ZGolTOeJXk2wXsnkeNARsRuAkSG1BnXzeoWzNwZ7Lo
cqSE/ai2IImjVvYV+43nqqTM2xvMiPibJccGyJw6U1goAtmpn1dBG37D2ojuUyk5
tqlLaHa9u4oZfWDdRdsJWieUPgZbR5sx2YkTRvulLjl4PTJO7PRvn5NLGpWjAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUfIz/XKuW77hyeD4Uf2C3GSWCgUQwHwYDVR0j
BBgwFoAUEH4Y8UyPMq8JdkuZ2+em8LOdtswwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MEIzODhFRTVEMjczM0RCMzMxREVFMUM0MTJGMzNCOUZG
MTMxOTNENjNEQTY3M0Y0MjZGQkI3NzYzNjhEMURGLzAvMTA3RTE4RjE0QzhGMzJB
RjA5NzY0Qjk5REJFN0E2RjBCMzlEQjZDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMDdFMThGMTRDOEYzMkFGMDk3
NjRCOTlEQkU3QTZGMEIzOURCNkNDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzBCMzg4RUU1RDI3MzNEQjMzMURFRTFDNDEyRjMzQjlGRjEzMTkzRDYz
REE2NzNGNDI2RkJCNzc2MzY4RDFERi8wLzMxMzczNzJlMzEzMjM4MmUzMjMwMzIy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3MzAzMDM4MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGx
gMowDQYJKoZIhvcNAQELBQADggEBAGBbV60osNQUcL+dRJxl+AsdHmoVgmfgaVmZ
FaTPNwfNUsELs0nCMaWXXrAa0b8+5SKipPEUVtn4IQd5lK77Nm+HR3ByVe253Eb4
+aOFhzz6ReJAi6KY3iKQ2M3nKuCgstKKKKvD57y/A9mpf98miUyUCadZOjg73XQW
oZDciuOPcK3S3aK3z1H9K4uOgo/U/gD1t6vKstQcu4nro6/yQzw3H7Gc/dyki5wg
Oz6CIQq+57Nwiopv5/811ShagY0a6YsdLiqnbe0ZHewMj5VFnc1wDHiqWc6PgyPF
nGCz5ewXI2/NZWyBglX7MMp+XPRw6NdORThuI3TbR5kYNQYs/BI=
-----END CERTIFICATE-----
Generated at Wed Aug 28 17:52:53 2024 by rpki-client on console-fra.rpki-client.org