Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3136382e3232382e34392e302f32342d3234203d3e20323632313435.roa
File:                     3136382e3232382e34392e302f32342d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          wu81tB+AggtPsxJWCTgZcgQfR5xVS44BICk5RmB+KcM=
Subject key identifier:   23:F3:EF:61:9E:AB:DC:14:83:4D:77:D3:A0:F4:5E:52:F9:6D:63:F9
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       70A7CE3C1BC166079F14617BAA38C745D8614175
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3136382e3232382e34392e302f32342d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:17 +0000
ROA not before:           Tue 05 Mar 2024 17:42:17 +0000
ROA not after:            Tue 04 Mar 2025 17:47:17 +0000
asID:                     262145
IP address blocks:        168.228.49.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Aug 2024 21:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a7:ce:3c:1b:c1:66:07:9f:14:61:7b:aa:38:c7:45:d8:61:41:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:17 2024 GMT
            Not After : Mar  4 17:47:17 2025 GMT
        Subject: CN=23F3EF619EABDC14834D77D3A0F45E52F96D63F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:50:48:95:1a:89:04:66:4d:54:2f:4a:a6:
                    87:f0:ae:01:df:b4:85:59:ae:8c:3b:cd:d7:22:90:
                    50:4c:e5:e1:8f:48:e7:17:54:6b:35:69:9e:2f:b5:
                    dc:be:8a:0c:a1:1b:6f:7a:89:20:48:7d:8a:50:29:
                    33:af:09:c0:7e:ef:ea:c2:31:ab:fa:62:4c:27:c2:
                    f9:2b:6c:03:6e:45:80:bd:32:3f:8a:74:64:50:16:
                    cd:e7:ce:68:54:71:0a:3c:e1:cb:3c:d2:55:ae:31:
                    97:c0:85:b5:52:08:d9:22:c1:c3:89:13:e5:e1:80:
                    08:0e:0f:dd:8e:9f:cf:af:7f:f9:43:f8:97:f0:07:
                    2c:e7:51:0a:43:fe:df:ea:9f:98:24:09:11:7d:25:
                    ae:48:14:ea:fe:11:b2:f9:33:e3:ef:ed:72:84:b9:
                    67:48:7e:56:c2:9b:c1:5a:03:f2:d2:ea:9b:e7:e1:
                    3a:1d:3d:ad:23:92:ad:d6:16:7a:55:d6:88:d9:62:
                    89:76:cc:e8:18:86:02:58:76:5f:4a:d3:53:f0:6d:
                    f5:c2:e1:fd:a4:95:02:e6:4c:f4:41:19:0f:4d:1a:
                    c5:25:67:c5:dd:eb:7c:cb:d3:ae:48:c6:c5:5f:2a:
                    22:66:05:69:72:4f:bd:77:fb:02:18:2f:ce:9a:16:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F3:EF:61:9E:AB:DC:14:83:4D:77:D3:A0:F4:5E:52:F9:6D:63:F9
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3136382e3232382e34392e302f32342d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:2b:ba:b6:5d:46:7c:45:dd:4e:56:5d:40:0a:12:28:47:6d:
         7c:02:02:d5:75:06:2b:34:c2:5e:bc:dd:fb:ff:81:fe:10:09:
         eb:85:7c:e2:a7:81:07:d7:55:49:51:64:f4:9b:52:c2:f9:3f:
         79:82:2d:6a:3c:25:2e:9c:a6:ba:c1:0d:b1:7d:cd:68:69:47:
         6c:4d:a6:e1:d9:d4:00:f2:94:7a:cf:f8:48:13:c0:9f:5d:b0:
         8f:78:f6:66:e7:41:fc:09:82:64:b5:73:51:e0:fe:26:60:1c:
         3a:86:b3:b3:5e:b3:c1:d8:b7:eb:71:3f:15:75:25:da:6c:2a:
         cc:f5:67:63:12:66:51:a7:0b:8c:0e:68:44:b0:ba:8a:cc:ae:
         1e:f3:b1:ed:20:ad:f9:0b:a1:52:a6:9a:12:b2:2b:ab:d3:38:
         1d:fa:52:ed:7e:b3:91:4e:10:ee:cf:65:2f:e9:6e:b1:72:28:
         4f:81:67:87:d6:c5:f5:4a:1c:88:0a:63:5b:27:59:05:7a:7d:
         6c:de:38:03:be:61:33:8c:ae:9b:9c:fb:05:ad:8d:83:a0:de:
         2d:de:bf:86:d7:69:c3:21:0f:38:9b:27:34:a2:8b:ba:91:67:
         4d:df:10:81:56:f6:72:1b:fa:67:a5:bb:eb:35:2e:a6:90:fc:
         2c:5e:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----