Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134332e302f32342d3234203d3e20323730313036.roa
File:                     3139312e3234312e3134332e302f32342d3234203d3e20323730313036.roa (raw, json)
Hash identifier:          TDXeoDPK4ZXsNOfdvtwi9uw4n5u93tWmSdL60Q2OmUA=
Subject key identifier:   30:C3:44:22:0F:44:4D:3E:F7:D5:A5:94:B0:30:43:66:8E:32:C5:80
Certificate issuer:       /CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
Certificate serial:       0BFC4C4720500AC686DD2FDEAB88E4BA7574259E
Authority key identifier: 8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134332e302f32342d3234203d3e20323730313036.roa
Signing time:             Thu 08 May 2025 17:35:01 +0000
ROA not before:           Thu 08 May 2025 17:30:01 +0000
ROA not after:            Thu 07 May 2026 17:35:01 +0000
asID:                     270106
IP address blocks:        191.241.143.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 19 May 2025 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fc:4c:47:20:50:0a:c6:86:dd:2f:de:ab:88:e4:ba:75:74:25:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
        Validity
            Not Before: May  8 17:30:01 2025 GMT
            Not After : May  7 17:35:01 2026 GMT
        Subject: CN=30C344220F444D3EF7D5A594B03043668E32C580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:52:c7:77:eb:74:3e:c6:1e:84:28:30:8e:49:
                    57:dd:9b:a4:01:92:78:6e:95:e0:dc:e9:e7:45:da:
                    e1:d7:e2:7a:ce:06:29:d1:94:60:ec:ab:fb:71:ed:
                    1e:e7:42:7c:fd:c7:29:91:b3:ae:f4:25:15:04:7b:
                    86:3f:89:8c:9a:39:e9:ef:38:1d:a8:92:c9:9d:9e:
                    62:4b:c2:6f:ce:62:d1:ae:2b:9e:bd:77:3d:a5:51:
                    31:d1:7f:9f:3a:77:ea:71:ba:c1:8f:9c:e7:44:ae:
                    d1:d1:60:c4:66:17:59:4e:11:84:ac:91:27:47:b3:
                    d0:c5:02:ec:1b:ef:55:da:bf:35:4f:9f:ab:18:42:
                    3a:21:ac:f8:a0:e3:d1:ee:43:6e:d8:a7:b9:e2:4a:
                    04:4c:ca:0f:47:b8:24:3e:83:8f:d8:a5:52:d7:d6:
                    aa:5f:90:7a:74:57:c5:e6:35:1e:b0:f5:04:60:be:
                    fe:ca:29:c2:0e:d5:d2:b2:08:6c:21:ca:3a:d3:1d:
                    47:95:bc:2f:a5:10:bb:f7:70:56:dc:c4:c1:49:a0:
                    59:a1:31:c6:f9:9d:85:64:67:3b:97:7e:6a:8c:66:
                    71:32:71:2c:61:26:77:36:96:a8:78:cc:49:ec:89:
                    e7:72:12:50:8d:08:26:34:8f:72:79:87:c7:38:f8:
                    ac:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C3:44:22:0F:44:4D:3E:F7:D5:A5:94:B0:30:43:66:8E:32:C5:80
            X509v3 Authority Key Identifier:
                keyid:8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134332e302f32342d3234203d3e20323730313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:72:3a:86:b0:85:f6:7d:42:91:a8:cc:fb:3e:b2:a3:5d:f9:
         e8:22:1b:bc:48:0b:f4:20:d8:30:8c:db:86:69:c2:ee:b9:f2:
         07:fc:c7:2c:85:d8:fa:fe:75:95:16:a6:7e:3f:a3:03:bc:d4:
         1b:d1:99:cd:73:2d:d9:29:e5:13:ad:ad:1a:7e:39:0b:32:da:
         a8:d5:ce:f1:cd:c9:9c:3c:12:6f:2c:01:37:8a:a1:3d:20:ff:
         bb:f4:5f:6c:70:cb:be:d3:31:f4:9a:c9:01:b6:0f:0c:72:0c:
         e0:b1:60:86:ae:9d:ed:8e:5d:19:a6:b9:06:19:fa:d8:e2:b8:
         f5:8f:bd:ff:6f:48:90:c7:89:7f:bc:9f:09:1f:a4:54:90:77:
         4b:fd:c1:30:e7:2d:31:bb:20:aa:c2:f5:4a:ac:a8:bc:ba:a9:
         df:03:87:15:3e:6e:c3:dc:ea:04:b7:7b:31:67:f0:b9:4b:76:
         c3:20:18:6d:17:0e:42:c4:13:64:22:41:ca:53:e9:48:b7:42:
         13:09:72:24:1d:15:eb:74:6a:58:43:fe:96:35:f2:6b:ed:96:
         93:0f:75:76:fd:26:27:e8:54:07:e9:1c:55:33:13:d6:87:ac:
         cc:81:79:77:81:53:85:9f:8d:07:23:be:54:6e:49:cb:b3:e2:
         0b:e6:fe:05
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUC/xMRyBQCsaG3S/eq4jkunV0JZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEYzQUY2NDkyQzhGRUY3MzFDQkZFREJGRDA4QTZCOTE4
RkRBNEQ4MzAeFw0yNTA1MDgxNzMwMDFaFw0yNjA1MDcxNzM1MDFaMDMxMTAvBgNV
BAMTKDMwQzM0NDIyMEY0NDREM0VGN0Q1QTU5NEIwMzA0MzY2OEUzMkM1ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXUsd363Q+xh6EKDCOSVfdm6QB
knhuleDc6edF2uHX4nrOBinRlGDsq/tx7R7nQnz9xymRs670JRUEe4Y/iYyaOenv
OB2oksmdnmJLwm/OYtGuK569dz2lUTHRf586d+pxusGPnOdErtHRYMRmF1lOEYSs
kSdHs9DFAuwb71XavzVPn6sYQjohrPig49HuQ27Yp7niSgRMyg9HuCQ+g4/YpVLX
1qpfkHp0V8XmNR6w9QRgvv7KKcIO1dKyCGwhyjrTHUeVvC+lELv3cFbcxMFJoFmh
Mcb5nYVkZzuXfmqMZnEycSxhJnc2lqh4zEnsiedyElCNCCY0j3J5h8c4+KzJAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUMMNEIg9ETT731aWUsDBDZo4yxYAwHwYDVR0j
BBgwFoAUjzr2SSyP73Mcv+2/0IprkY/aTYMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NEU5Q0ZEMEJDQzQ0RDFDRjA4RkRBMjQ1QjBBMzA4OEIw
MjQ5Q0ExRjYyOUZBMkVDMzBCRUU4MDA2ODA5OTVDLzAvOEYzQUY2NDkyQzhGRUY3
MzFDQkZFREJGRDA4QTZCOTE4RkRBNEQ4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RjNBRjY0OTJDOEZFRjczMUNC
RkVEQkZEMDhBNkI5MThGREE0RDgzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODRFOUNGRDBCQ0M0NEQxQ0YwOEZEQTI0NUIwQTMwODhCMDI0OUNBMUY2
MjlGQTJFQzMwQkVFODAwNjgwOTk1Qy8wLzMxMzkzMTJlMzIzNDMxMmUzMTM0MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzMTMwMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/
8Y8wDQYJKoZIhvcNAQELBQADggEBADdyOoawhfZ9QpGozPs+sqNd+egiG7xIC/Qg
2DCM24Zpwu658gf8xyyF2Pr+dZUWpn4/owO81BvRmc1zLdkp5ROtrRp+OQsy2qjV
zvHNyZw8Em8sATeKoT0g/7v0X2xwy77TMfSayQG2DwxyDOCxYIaune2OXRmmuQYZ
+tjiuPWPvf9vSJDHiX+8nwkfpFSQd0v9wTDnLTG7IKrC9UqsqLy6qd8DhxU+bsPc
6gS3ezFn8LlLdsMgGG0XDkLEE2QiQcpT6Ui3QhMJciQdFet0alhD/pY18mvtlpMP
dXb9JifoVAfpHFUzE9aHrMyBeXeBU4WfjQcjvlRuScuz4gvm/gU=
-----END CERTIFICATE-----
Generated at Fri Jun 6 20:18:16 2025 by rpki-client