Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/3139362e33322e33322e302f31392d3230203d3e203131393437.roa
File:                     3139362e33322e33322e302f31392d3230203d3e203131393437.roa (raw, json)
Hash identifier:          aPaifb0FJsgmgJfmAVWCmMwtJvXd9xgi/lV8KuJ4LBY=
Subject key identifier:   72:7E:8A:63:3F:B0:3E:27:E6:F0:C1:0C:9F:01:01:6B:E3:DD:35:96
Certificate issuer:       /CN=E3639ACB469ACD09A9A4D97F8416716237860877
Certificate serial:       422182235C176E7C12BDC67CC2250670E4C432DC
Authority key identifier: E3:63:9A:CB:46:9A:CD:09:A9:A4:D9:7F:84:16:71:62:37:86:08:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3639ACB469ACD09A9A4D97F8416716237860877.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/3139362e33322e33322e302f31392d3230203d3e203131393437.roa
Signing time:             Tue 05 Mar 2024 18:02:03 +0000
ROA not before:           Tue 05 Mar 2024 17:57:03 +0000
ROA not after:            Tue 04 Mar 2025 18:02:03 +0000
asID:                     11947
IP address blocks:        196.32.32.0/19 maxlen: 20

Validation:               Failed, certificate revoked on Fri 06 Sep 2024 16:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:21:82:23:5c:17:6e:7c:12:bd:c6:7c:c2:25:06:70:e4:c4:32:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3639ACB469ACD09A9A4D97F8416716237860877
        Validity
            Not Before: Mar  5 17:57:03 2024 GMT
            Not After : Mar  4 18:02:03 2025 GMT
        Subject: CN=727E8A633FB03E27E6F0C10C9F01016BE3DD3596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:15:d0:ae:5e:24:ff:b1:5e:20:a4:f0:53:
                    b8:99:26:62:47:db:b1:c0:37:f8:eb:06:0b:51:e2:
                    75:6b:0f:e1:66:fb:87:3c:a5:89:e4:b6:0e:b9:7e:
                    04:c1:9a:61:b9:e5:a9:9b:77:97:b1:a1:a8:62:99:
                    7b:02:65:ba:52:37:09:c0:07:cc:1a:a2:91:88:fc:
                    3c:c6:b0:87:24:90:01:ae:d1:e6:c4:dc:1e:3c:9c:
                    f6:44:30:71:cf:40:be:3a:d3:32:a6:e8:b0:d3:5e:
                    38:be:19:5b:22:78:96:cc:52:89:ce:53:68:10:c8:
                    40:6e:18:5a:06:29:08:e5:c6:65:61:6a:d7:cb:4e:
                    d8:4a:80:87:5a:e0:b8:a3:2b:f6:a7:bb:94:10:90:
                    b3:b0:70:9e:e5:13:e5:5d:7d:11:a4:34:e5:36:dc:
                    88:0a:4b:d5:3b:98:63:8b:d7:a7:9e:ef:21:16:52:
                    77:df:ae:d3:35:ca:82:4c:23:61:a3:c4:ad:06:c2:
                    9b:82:13:6a:43:11:36:b5:6a:80:1c:5d:3c:52:1b:
                    0c:7d:2c:36:57:26:f1:2b:ff:f7:7c:f0:c0:70:b0:
                    9c:e1:4e:ec:13:1f:65:58:0f:3a:f3:00:df:2c:4b:
                    cc:2a:a4:77:58:8a:20:af:25:4c:59:1f:ca:ad:05:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7E:8A:63:3F:B0:3E:27:E6:F0:C1:0C:9F:01:01:6B:E3:DD:35:96
            X509v3 Authority Key Identifier:
                keyid:E3:63:9A:CB:46:9A:CD:09:A9:A4:D9:7F:84:16:71:62:37:86:08:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/E3639ACB469ACD09A9A4D97F8416716237860877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3639ACB469ACD09A9A4D97F8416716237860877.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/3139362e33322e33322e302f31392d3230203d3e203131393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.32.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5f:26:db:d8:30:e8:56:d7:48:c7:db:56:f6:7b:0a:1b:07:7c:
         19:9c:35:4c:24:92:c3:7d:14:50:33:c0:66:a9:d1:49:9a:60:
         e9:fc:2d:82:f3:49:a7:79:50:1d:d6:52:8d:3a:05:9e:06:4a:
         a5:3a:0d:d8:16:31:db:dc:ad:bf:63:18:55:44:35:b5:f2:95:
         bd:a2:6d:3a:0f:03:a3:ac:cb:d8:aa:3a:ad:55:4c:cb:f4:10:
         a6:ac:3c:b7:3c:89:4b:49:d8:6d:10:5e:a5:e9:07:ca:ba:98:
         71:f8:cc:ca:36:42:ab:63:a6:17:28:76:ac:de:35:5b:d1:10:
         3d:05:0a:7f:4a:dc:25:06:92:8c:ff:3c:c4:de:96:9d:da:fd:
         f5:51:22:2c:5a:45:8b:40:6b:f5:90:11:44:c3:7f:76:77:94:
         0c:ec:1b:f1:6e:b5:17:33:20:88:1d:8e:f5:45:47:a2:41:59:
         17:1a:58:a1:16:d8:5a:b4:8f:a7:1d:3e:40:55:ee:da:5a:30:
         38:4b:09:75:70:20:7b:1d:f0:9c:44:c0:89:27:70:7f:4b:c4:
         e4:e6:fc:bf:ca:86:b4:a1:79:97:52:b5:7c:36:94:e5:ba:b5:
         80:8b:e6:df:4e:f4:93:4d:f0:1e:a3:56:27:ce:35:ba:92:ad:
         fd:f4:d7:59
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUQiGCI1wXbnwSvcZ8wiUGcOTEMtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM2MzlBQ0I0NjlBQ0QwOUE5QTREOTdGODQxNjcxNjIz
Nzg2MDg3NzAeFw0yNDAzMDUxNzU3MDNaFw0yNTAzMDQxODAyMDNaMDMxMTAvBgNV
BAMTKDcyN0U4QTYzM0ZCMDNFMjdFNkYwQzEwQzlGMDEwMTZCRTNERDM1OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuARXQrl4k/7FeIKTwU7iZJmJH
27HAN/jrBgtR4nVrD+Fm+4c8pYnktg65fgTBmmG55ambd5exoahimXsCZbpSNwnA
B8waopGI/DzGsIckkAGu0ebE3B48nPZEMHHPQL460zKm6LDTXji+GVsieJbMUonO
U2gQyEBuGFoGKQjlxmVhatfLTthKgIda4LijK/anu5QQkLOwcJ7lE+VdfRGkNOU2
3IgKS9U7mGOL16ee7yEWUnffrtM1yoJMI2GjxK0GwpuCE2pDETa1aoAcXTxSGwx9
LDZXJvEr//d88MBwsJzhTuwTH2VYDzrzAN8sS8wqpHdYiiCvJUxZH8qtBb8NAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUcn6KYz+wPifm8MEMnwEBa+PdNZYwHwYDVR0j
BBgwFoAU42Oay0aazQmppNl/hBZxYjeGCHcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjI4RDdCMjRFNTFDQjZGMDBCOTM0Njg2RUU1MkY5MzU2
RTFERkQ4Nzg4NEE2OTAxRTkyMEQ1MDVBQ0U2QjUwLzAvRTM2MzlBQ0I0NjlBQ0Qw
OUE5QTREOTdGODQxNjcxNjIzNzg2MDg3Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzYzOUFDQjQ2OUFDRDA5QTlB
NEQ5N0Y4NDE2NzE2MjM3ODYwODc3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0IyOEQ3QjI0RTUxQ0I2RjAwQjkzNDY4NkVFNTJGOTM1NkUxREZEODc4
ODRBNjkwMUU5MjBENTA1QUNFNkI1MC8wLzMxMzkzNjJlMzMzMjJlMzMzMjJlMzAy
ZjMxMzkyZDMyMzAyMDNkM2UyMDMxMzEzOTM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXEICAwDQYJ
KoZIhvcNAQELBQADggEBAF8m29gw6FbXSMfbVvZ7ChsHfBmcNUwkksN9FFAzwGap
0UmaYOn8LYLzSad5UB3WUo06BZ4GSqU6DdgWMdvcrb9jGFVENbXylb2ibToPA6Os
y9iqOq1VTMv0EKasPLc8iUtJ2G0QXqXpB8q6mHH4zMo2QqtjphcodqzeNVvRED0F
Cn9K3CUGkoz/PMTelp3a/fVRIixaRYtAa/WQEUTDf3Z3lAzsG/FutRczIIgdjvVF
R6JBWRcaWKEW2Fq0j6cdPkBV7tpaMDhLCXVwIHsd8JxEwIkncH9LxOTm/L/KhrSh
eZdStXw2lOW6tYCL5t9O9JNN8B6jVifONbqSrf3011k=
-----END CERTIFICATE-----
Generated at Fri Sep 6 19:15:47 2024 by rpki-client on console-ams.rpki-client.org