Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/726D9846A9E7CBABDD78ADA907437265240AB4115635DFEEB090ED85925280B5/0/3230302e31302e3233342e302f32342d3234203d3e20333938373730.roa
File:                     3230302e31302e3233342e302f32342d3234203d3e20333938373730.roa (raw, json)
Hash identifier:          EDte6kfLxc7Tv3bJI+lMg4tXNSOkUxMnprXQq06bkNM=
Subject key identifier:   69:4B:ED:24:44:AA:34:F5:6C:52:01:8D:C6:49:93:99:3A:D7:F2:C6
Certificate issuer:       /CN=EF36402B07BAFB4905A62D80B3635A1FE03066F2
Certificate serial:       3951246F8C5AB3F2A47096975125307BA2372487
Authority key identifier: EF:36:40:2B:07:BA:FB:49:05:A6:2D:80:B3:63:5A:1F:E0:30:66:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF36402B07BAFB4905A62D80B3635A1FE03066F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/726D9846A9E7CBABDD78ADA907437265240AB4115635DFEEB090ED85925280B5/0/3230302e31302e3233342e302f32342d3234203d3e20333938373730.roa
Signing time:             Mon 19 May 2025 11:35:00 +0000
ROA not before:           Mon 19 May 2025 11:30:00 +0000
ROA not after:            Mon 18 May 2026 11:35:00 +0000
asID:                     398770
IP address blocks:        200.10.234.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 19 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:51:24:6f:8c:5a:b3:f2:a4:70:96:97:51:25:30:7b:a2:37:24:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF36402B07BAFB4905A62D80B3635A1FE03066F2
        Validity
            Not Before: May 19 11:30:00 2025 GMT
            Not After : May 18 11:35:00 2026 GMT
        Subject: CN=694BED2444AA34F56C52018DC64993993AD7F2C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:8c:ec:4f:2e:21:a5:69:15:b6:46:6e:c8:
                    27:90:13:26:6a:95:5b:79:34:64:32:a6:bf:e5:09:
                    39:5e:65:a0:1c:a3:d9:2b:d5:8e:44:a3:83:3b:39:
                    4a:f9:80:8a:3b:b4:41:89:1f:d3:43:1a:cd:56:b6:
                    7c:c2:46:75:d8:cb:48:1d:e7:c4:86:ac:84:aa:c6:
                    f9:23:a1:cc:03:bd:71:81:b5:ce:6d:66:de:c8:99:
                    32:f4:8f:77:76:ec:c7:b1:68:1b:d7:13:c7:76:0e:
                    4c:4a:f9:14:b9:b6:37:4b:4c:86:5d:7b:0e:53:18:
                    59:9e:89:83:58:ec:ca:27:0e:d1:7f:78:28:78:27:
                    08:44:66:a1:b8:5f:28:9d:c5:62:58:dd:fb:ca:a3:
                    aa:19:47:d1:81:0b:e2:c9:37:74:38:6d:5e:ac:ef:
                    73:e5:11:67:90:8e:03:0f:66:a3:46:1d:f5:63:2e:
                    e6:8b:3f:b5:6f:f7:75:30:50:ee:89:bb:49:77:73:
                    b0:d3:7d:13:98:e5:d1:31:f8:46:6a:f5:3c:8b:c5:
                    e2:21:7d:67:3f:fd:33:33:f0:e8:fd:cb:8c:d9:13:
                    fb:c0:96:bb:16:0f:36:8a:32:be:a6:b2:9c:7d:16:
                    bd:0d:25:64:13:1d:57:ec:3b:5e:5e:f4:bd:3c:dd:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4B:ED:24:44:AA:34:F5:6C:52:01:8D:C6:49:93:99:3A:D7:F2:C6
            X509v3 Authority Key Identifier:
                keyid:EF:36:40:2B:07:BA:FB:49:05:A6:2D:80:B3:63:5A:1F:E0:30:66:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/726D9846A9E7CBABDD78ADA907437265240AB4115635DFEEB090ED85925280B5/0/EF36402B07BAFB4905A62D80B3635A1FE03066F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF36402B07BAFB4905A62D80B3635A1FE03066F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/726D9846A9E7CBABDD78ADA907437265240AB4115635DFEEB090ED85925280B5/0/3230302e31302e3233342e302f32342d3234203d3e20333938373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f8:b1:7d:b1:f3:2d:cb:bc:5f:c8:c9:6c:82:94:c0:8f:ec:
         00:0c:2e:37:0a:84:e8:0c:87:c5:20:6a:8a:3d:94:75:06:8a:
         3c:d2:c9:de:14:1a:06:59:00:e5:31:69:ec:e8:4a:65:40:d0:
         bf:bc:87:72:61:7c:f4:57:99:0b:a3:12:ea:23:a4:38:33:e9:
         18:64:de:26:c3:40:4c:1f:90:35:c6:89:b2:91:12:67:53:78:
         eb:10:91:2a:be:9c:c6:e7:2b:c1:a3:a4:96:3d:19:52:2e:ee:
         bb:db:e7:86:d1:5a:a0:29:df:6d:55:65:13:6b:7e:6c:e0:43:
         d4:68:ac:3a:33:92:b1:dd:e6:3b:c6:98:93:ff:fa:59:27:54:
         15:3c:8b:ae:51:00:cc:b0:2b:64:3e:7d:38:ab:61:ce:69:58:
         e2:f5:8c:9a:65:c0:aa:71:3d:b9:c9:a7:4c:5b:2b:f5:f0:cd:
         81:c4:8b:e8:7c:49:08:58:2a:f2:fa:a1:15:db:f0:3d:f4:7a:
         f6:3e:c6:4f:ac:21:60:f2:2f:5a:6a:39:f1:2e:d4:8a:50:08:
         b6:43:bd:ea:35:f5:1f:94:fa:13:a3:2e:10:5a:53:df:09:2a:
         48:d0:c6:c3:dd:e3:bb:30:71:61:9f:ce:19:e1:2f:af:77:6a:
         71:60:cc:88
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOVEkb4xas/KkcJaXUSUwe6I3JIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYzNjQwMkIwN0JBRkI0OTA1QTYyRDgwQjM2MzVBMUZF
MDMwNjZGMjAeFw0yNTA1MTkxMTMwMDBaFw0yNjA1MTgxMTM1MDBaMDMxMTAvBgNV
BAMTKDY5NEJFRDI0NDRBQTM0RjU2QzUyMDE4REM2NDk5Mzk5M0FEN0YyQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2YzsTy4hpWkVtkZuyCeQEyZq
lVt5NGQypr/lCTleZaAco9kr1Y5Eo4M7OUr5gIo7tEGJH9NDGs1WtnzCRnXYy0gd
58SGrISqxvkjocwDvXGBtc5tZt7ImTL0j3d27MexaBvXE8d2DkxK+RS5tjdLTIZd
ew5TGFmeiYNY7MonDtF/eCh4JwhEZqG4XyidxWJY3fvKo6oZR9GBC+LJN3Q4bV6s
73PlEWeQjgMPZqNGHfVjLuaLP7Vv93UwUO6Ju0l3c7DTfROY5dEx+EZq9TyLxeIh
fWc//TMz8Oj9y4zZE/vAlrsWDzaKMr6mspx9Fr0NJWQTHVfsO15e9L083SEFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUaUvtJESqNPVsUgGNxkmTmTrX8sYwHwYDVR0j
BBgwFoAU7zZAKwe6+0kFpi2As2NaH+AwZvIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MjZEOTg0NkE5RTdDQkFCREQ3OEFEQTkwNzQzNzI2NTI0
MEFCNDExNTYzNURGRUVCMDkwRUQ4NTkyNTI4MEI1LzAvRUYzNjQwMkIwN0JBRkI0
OTA1QTYyRDgwQjM2MzVBMUZFMDMwNjZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjM2NDAyQjA3QkFGQjQ5MDVB
NjJEODBCMzYzNUExRkUwMzA2NkYyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzI2RDk4NDZBOUU3Q0JBQkRENzhBREE5MDc0MzcyNjUyNDBBQjQxMTU2
MzVERkVFQjA5MEVEODU5MjUyODBCNS8wLzMyMzAzMDJlMzEzMDJlMzIzMzM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM4MzczNzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyArq
MA0GCSqGSIb3DQEBCwUAA4IBAQA4+LF9sfMty7xfyMlsgpTAj+wADC43CoToDIfF
IGqKPZR1Boo80sneFBoGWQDlMWns6EplQNC/vIdyYXz0V5kLoxLqI6Q4M+kYZN4m
w0BMH5A1xomykRJnU3jrEJEqvpzG5yvBo6SWPRlSLu672+eG0VqgKd9tVWUTa35s
4EPUaKw6M5Kx3eY7xpiT//pZJ1QVPIuuUQDMsCtkPn04q2HOaVji9YyaZcCqcT25
yadMWyv18M2BxIvofEkIWCry+qEV2/A99Hr2PsZPrCFg8i9aajnxLtSKUAi2Q73q
NfUflPoToy4QWlPfCSpI0MbD3eO7MHFhn84Z4S+vd2pxYMyI
-----END CERTIFICATE-----
Generated at Fri Jun 6 07:21:47 2025 by rpki-client