Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/3137372e3132382e3230322e302f32342d3234203d3e20323730303836.roa
File:                     3137372e3132382e3230322e302f32342d3234203d3e20323730303836.roa (raw, json)
Hash identifier:          WqkusutUqTqL77XSTE/H7llfpYFUWbDy87ztRJKhsOs=
Subject key identifier:   0E:19:2C:78:00:F3:64:B5:09:5F:11:CA:5C:64:81:62:88:BB:2C:29
Certificate issuer:       /CN=107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC
Certificate serial:       085A2FC2F0761A2E1AE72035CD14016B6B3923B9
Authority key identifier: 10:7E:18:F1:4C:8F:32:AF:09:76:4B:99:DB:E7:A6:F0:B3:9D:B6:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/3137372e3132382e3230322e302f32342d3234203d3e20323730303836.roa
Signing time:             Fri 17 Jan 2025 03:30:00 +0000
ROA not before:           Fri 17 Jan 2025 03:25:00 +0000
ROA not after:            Fri 16 Jan 2026 03:30:00 +0000
asID:                     270086
IP address blocks:        177.128.202.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 18 Mar 2025 19:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5a:2f:c2:f0:76:1a:2e:1a:e7:20:35:cd:14:01:6b:6b:39:23:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC
        Validity
            Not Before: Jan 17 03:25:00 2025 GMT
            Not After : Jan 16 03:30:00 2026 GMT
        Subject: CN=0E192C7800F364B5095F11CA5C64816288BB2C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:d6:8d:4d:1b:c5:c5:aa:e6:4b:72:d5:6e:
                    cf:08:5f:d8:91:cc:01:b5:0d:71:35:96:3f:5d:98:
                    b7:85:0a:1e:a5:4d:fb:21:28:b7:01:b0:14:90:b6:
                    a4:f0:52:25:37:11:b2:b4:43:86:4a:be:a1:ca:c8:
                    b1:b5:e6:36:64:4e:20:85:f0:a7:6f:6b:31:cf:5a:
                    20:39:07:67:31:31:a6:ca:65:d9:d6:6f:ee:5b:92:
                    dd:f1:25:b6:7f:74:b1:88:79:60:74:c0:13:90:ea:
                    6a:85:e9:00:28:28:23:4c:6d:24:85:1f:58:b7:e2:
                    c2:cf:fa:24:ac:d9:2b:b4:b7:ba:01:52:59:74:4e:
                    b3:3a:68:c1:99:9a:bd:11:54:81:a6:b1:e4:a9:bc:
                    df:73:4d:37:02:6c:11:7f:6e:a5:dc:2d:28:2d:41:
                    30:84:e7:e4:9e:5b:39:a8:28:b2:62:a4:65:dd:68:
                    ce:a2:00:da:1f:12:9a:8c:c0:88:57:70:7b:e6:b3:
                    f6:78:8d:a2:7d:3c:17:56:76:9c:79:14:ea:fa:0e:
                    bc:c9:37:f0:e9:a0:cf:af:78:2b:b2:aa:3d:ba:4e:
                    54:f9:4c:e5:9c:b8:9b:04:0a:42:6a:c6:cd:41:23:
                    5c:19:19:f5:9b:2c:48:59:cc:43:14:93:0e:d1:46:
                    f7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:19:2C:78:00:F3:64:B5:09:5F:11:CA:5C:64:81:62:88:BB:2C:29
            X509v3 Authority Key Identifier:
                keyid:10:7E:18:F1:4C:8F:32:AF:09:76:4B:99:DB:E7:A6:F0:B3:9D:B6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/3137372e3132382e3230322e302f32342d3234203d3e20323730303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:a5:54:18:51:60:49:3a:87:e1:80:21:db:99:9c:f2:29:44:
         1f:95:06:89:69:19:1a:44:15:96:2b:25:fe:46:87:2e:00:0d:
         9a:a0:18:77:2a:0e:c8:13:6b:1c:d5:28:c4:01:9b:5c:14:e1:
         17:24:42:88:a6:64:de:4f:fe:85:1c:70:69:4e:d7:7e:a5:f0:
         ab:e1:fc:65:bf:7c:ae:da:16:d1:87:d8:86:65:74:a6:8c:18:
         2b:eb:f4:bd:4b:87:d1:9a:3f:a2:38:a1:ec:a7:b5:83:5e:b4:
         f5:26:10:84:bf:9e:cf:ae:70:af:a9:c5:ec:1a:95:48:0f:2a:
         89:96:7c:52:b2:6d:5a:e7:7e:83:09:10:9f:ce:17:bb:c5:ed:
         f3:d7:9f:f4:8c:13:f4:3f:85:b7:86:76:35:8f:bf:06:11:9e:
         e2:93:46:2c:9f:6e:bc:32:70:dd:43:18:ed:e9:6a:33:dd:06:
         93:e8:00:78:2d:36:6e:68:53:55:4c:60:19:34:cd:d9:16:4d:
         a4:a4:ae:ca:e5:8c:b1:5f:4c:7e:ca:c9:9c:c8:0a:31:99:28:
         5b:a4:e3:29:90:74:fa:72:14:8d:27:d8:ab:63:ff:7f:c4:af:
         f0:86:fd:75:be:75:29:f0:ea:38:9b:71:40:fc:03:9c:71:c4:
         59:2e:4a:8c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUCFovwvB2Gi4a5yA1zRQBa2s5I7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA3RTE4RjE0QzhGMzJBRjA5NzY0Qjk5REJFN0E2RjBC
MzlEQjZDQzAeFw0yNTAxMTcwMzI1MDBaFw0yNjAxMTYwMzMwMDBaMDMxMTAvBgNV
BAMTKDBFMTkyQzc4MDBGMzY0QjUwOTVGMTFDQTVDNjQ4MTYyODhCQjJDMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCocdaNTRvFxarmS3LVbs8IX9iR
zAG1DXE1lj9dmLeFCh6lTfshKLcBsBSQtqTwUiU3EbK0Q4ZKvqHKyLG15jZkTiCF
8KdvazHPWiA5B2cxMabKZdnWb+5bkt3xJbZ/dLGIeWB0wBOQ6mqF6QAoKCNMbSSF
H1i34sLP+iSs2Su0t7oBUll0TrM6aMGZmr0RVIGmseSpvN9zTTcCbBF/bqXcLSgt
QTCE5+SeWzmoKLJipGXdaM6iANofEpqMwIhXcHvms/Z4jaJ9PBdWdpx5FOr6DrzJ
N/DpoM+veCuyqj26TlT5TOWcuJsECkJqxs1BI1wZGfWbLEhZzEMUkw7RRveTAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUDhkseADzZLUJXxHKXGSBYoi7LCkwHwYDVR0j
BBgwFoAUEH4Y8UyPMq8JdkuZ2+em8LOdtswwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MEIzODhFRTVEMjczM0RCMzMxREVFMUM0MTJGMzNCOUZG
MTMxOTNENjNEQTY3M0Y0MjZGQkI3NzYzNjhEMURGLzAvMTA3RTE4RjE0QzhGMzJB
RjA5NzY0Qjk5REJFN0E2RjBCMzlEQjZDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMDdFMThGMTRDOEYzMkFGMDk3
NjRCOTlEQkU3QTZGMEIzOURCNkNDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzBCMzg4RUU1RDI3MzNEQjMzMURFRTFDNDEyRjMzQjlGRjEzMTkzRDYz
REE2NzNGNDI2RkJCNzc2MzY4RDFERi8wLzMxMzczNzJlMzEzMjM4MmUzMjMwMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzMDM4MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACx
gMowDQYJKoZIhvcNAQELBQADggEBAGalVBhRYEk6h+GAIduZnPIpRB+VBolpGRpE
FZYrJf5Ghy4ADZqgGHcqDsgTaxzVKMQBm1wU4RckQoimZN5P/oUccGlO136l8Kvh
/GW/fK7aFtGH2IZldKaMGCvr9L1Lh9GaP6I4oeyntYNetPUmEIS/ns+ucK+pxewa
lUgPKomWfFKybVrnfoMJEJ/OF7vF7fPXn/SME/Q/hbeGdjWPvwYRnuKTRiyfbrwy
cN1DGO3pajPdBpPoAHgtNm5oU1VMYBk0zdkWTaSkrsrljLFfTH7KyZzICjGZKFuk
4ymQdPpyFI0n2Ktj/3/Er/CG/XW+dSnw6jibcUD8A5xxxFkuSow=
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:30:54 2025 by rpki-client