Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36342e302f32322d3234203d3e20323732303036.roa
File:                     3134332e302e36342e302f32322d3234203d3e20323732303036.roa (raw, json)
Hash identifier:          VoGY3AJ81VWnRuEpAYwIpmUP9y/ydWXHUnu6MvxuFK0=
Subject key identifier:   32:16:17:26:6B:D5:43:5B:58:DF:1B:CD:73:4E:39:5A:A5:E5:75:59
Certificate issuer:       /CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
Certificate serial:       65A9154B0331879777D863C0B5E01F1842311CA7
Authority key identifier: 8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36342e302f32322d3234203d3e20323732303036.roa
Signing time:             Tue 05 Mar 2024 17:51:13 +0000
ROA not before:           Tue 05 Mar 2024 17:46:13 +0000
ROA not after:            Tue 04 Mar 2025 17:51:13 +0000
asID:                     272006
IP address blocks:        143.0.64.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Aug 2024 13:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a9:15:4b:03:31:87:97:77:d8:63:c0:b5:e0:1f:18:42:31:1c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
        Validity
            Not Before: Mar  5 17:46:13 2024 GMT
            Not After : Mar  4 17:51:13 2025 GMT
        Subject: CN=321617266BD5435B58DF1BCD734E395AA5E57559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:f8:36:2c:59:48:3a:87:45:e0:38:9e:b6:
                    ac:8f:35:39:22:25:d8:f3:a4:28:6b:17:2c:6d:86:
                    bc:98:2b:ba:fc:4f:82:c0:f2:6c:c6:74:69:6d:c5:
                    1b:a8:a5:10:84:1a:b7:18:a3:51:9d:af:c8:75:a9:
                    21:24:09:75:b3:ac:b8:72:3c:01:31:f3:0b:70:1f:
                    7d:37:cf:d3:ab:b6:22:47:f3:b5:d9:1f:a8:af:ba:
                    03:2b:01:c3:ca:69:16:a6:22:c3:9d:e6:29:0f:ce:
                    20:18:ab:6e:38:62:73:bb:26:80:a6:dd:60:e6:5b:
                    e1:3c:90:1e:53:1d:51:82:2d:be:af:9d:85:d6:61:
                    04:20:5e:54:a4:c5:fa:17:18:17:f4:83:12:e0:a3:
                    77:8d:b2:77:16:48:7d:d5:2c:80:d1:73:de:cd:00:
                    09:92:55:2a:30:d8:25:32:61:a2:64:4b:6d:dd:09:
                    6b:05:df:4a:6a:ec:59:53:61:83:7b:a1:26:ab:5f:
                    11:f2:59:2f:70:c0:23:c9:96:4d:54:8a:7e:ba:2b:
                    e9:37:14:05:86:e3:c2:d1:13:42:be:e4:58:a3:97:
                    41:5b:93:da:60:27:e7:13:c9:3b:16:33:90:e9:f9:
                    fd:58:3c:f7:c2:fc:27:a4:22:ff:9a:d8:ed:c6:1f:
                    b2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:16:17:26:6B:D5:43:5B:58:DF:1B:CD:73:4E:39:5A:A5:E5:75:59
            X509v3 Authority Key Identifier:
                keyid:8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36342e302f32322d3234203d3e20323732303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:fc:f1:60:d6:12:1a:d6:71:03:4e:5d:50:b8:e6:de:6b:a0:
         26:04:35:04:57:91:bb:b4:a0:27:e7:8f:2c:59:44:a8:2f:b2:
         47:18:eb:33:a1:88:88:26:20:97:90:c3:49:38:cd:a8:47:06:
         82:ca:21:c9:0a:1d:3d:1c:6f:15:e3:15:0a:a6:3d:47:c8:47:
         c0:c3:36:17:50:48:1a:7b:9b:3a:86:c6:02:ee:2b:9e:15:5b:
         54:e2:54:5c:2b:b5:e0:21:67:12:de:70:f9:4f:a3:cc:40:d9:
         3e:e4:5d:85:3a:64:46:f4:f2:02:66:c7:f2:8d:74:00:41:d8:
         dd:47:3e:21:4d:f4:8b:e6:90:f0:42:b4:89:32:cb:1c:e8:a6:
         af:1c:78:07:e6:4f:92:c0:c1:5a:32:e7:63:b7:e4:a5:27:09:
         dd:27:a0:fe:b0:cf:07:e8:49:cf:c7:dd:f5:ae:70:03:a4:04:
         88:cd:2a:14:ca:6a:4d:08:34:74:59:21:5e:19:1f:a2:3e:56:
         43:a8:b7:7f:22:78:bb:cf:3c:b6:0d:25:29:ce:b3:26:e3:d0:
         82:30:34:1f:a9:d8:5a:8f:da:3f:85:5c:97:65:5e:21:ca:f0:
         69:21:1d:4a:9c:82:b3:5f:99:78:b6:42:9b:22:9e:34:45:01:
         64:c1:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 15:18:27 2024 by rpki-client on console-fra.rpki-client.org