Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8756187C02AC0393551EFADE620EE91273CE37B8A8E8528978BDF28E5AB064DC/0/3138312e3233332e382e302f32322d3232203d3e2030.roa
File:                     3138312e3233332e382e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          TlmhOBz3YzynPE1+9JScSX4lTJ9Q/cXKbhLKEApcKKI=
Subject key identifier:   44:8E:83:F9:C6:C7:E8:C3:E5:F4:B2:F0:0C:EC:81:34:B6:B0:1C:1A
Certificate issuer:       /CN=D87A1AB545BE4E257CE10B4965EE134E7673FC52
Certificate serial:       7318AEBB1DB323408F97866D8403489C054CD797
Authority key identifier: D8:7A:1A:B5:45:BE:4E:25:7C:E1:0B:49:65:EE:13:4E:76:73:FC:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D87A1AB545BE4E257CE10B4965EE134E7673FC52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8756187C02AC0393551EFADE620EE91273CE37B8A8E8528978BDF28E5AB064DC/0/3138312e3233332e382e302f32322d3232203d3e2030.roa
Signing time:             Tue 20 May 2025 02:45:00 +0000
ROA not before:           Tue 20 May 2025 02:40:00 +0000
ROA not after:            Tue 19 May 2026 02:45:00 +0000
asID:                     0
IP address blocks:        181.233.8.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Tue 20 May 2025 03:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:18:ae:bb:1d:b3:23:40:8f:97:86:6d:84:03:48:9c:05:4c:d7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D87A1AB545BE4E257CE10B4965EE134E7673FC52
        Validity
            Not Before: May 20 02:40:00 2025 GMT
            Not After : May 19 02:45:00 2026 GMT
        Subject: CN=448E83F9C6C7E8C3E5F4B2F00CEC8134B6B01C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:df:d6:5b:74:97:d7:7f:83:0c:ef:dd:fc:
                    81:b1:a8:32:a5:c0:28:66:b9:c8:59:9a:89:ac:45:
                    37:80:29:b8:f5:67:33:3a:b4:04:d9:29:05:be:d4:
                    40:97:0e:7e:85:f2:ab:f4:7c:8f:ec:88:67:cf:3a:
                    96:7a:6c:7e:c3:ba:21:29:53:a0:c4:c6:20:e3:9a:
                    7d:8a:03:56:3b:4b:ef:e0:cc:e1:1a:82:14:93:41:
                    b8:3e:19:68:97:c8:03:67:ec:23:6d:eb:07:e8:9a:
                    59:c1:1a:51:2f:90:55:7b:1b:78:bd:c5:d4:0b:fd:
                    fc:b0:58:7e:bf:01:50:a0:8e:1f:fc:44:aa:21:59:
                    38:63:55:42:11:7a:ac:c7:aa:a4:7e:e5:ca:74:d1:
                    9b:fd:a9:44:f5:9e:2c:f3:e3:08:89:7c:df:24:e8:
                    3a:6b:8b:8d:22:41:3b:fb:86:39:b1:f8:f8:f8:cb:
                    aa:15:ac:96:10:b4:0b:22:56:5a:3a:8d:a0:bd:b2:
                    8e:42:f7:ac:45:45:2c:80:8f:02:ed:1e:10:03:5b:
                    02:d5:02:4d:02:72:e6:f3:02:2f:35:33:82:1d:a6:
                    9e:6a:10:5c:9e:56:88:6d:0d:25:57:5c:b1:97:e2:
                    a9:97:65:a4:f6:41:1d:8b:91:d6:e0:4f:b1:95:17:
                    ab:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8E:83:F9:C6:C7:E8:C3:E5:F4:B2:F0:0C:EC:81:34:B6:B0:1C:1A
            X509v3 Authority Key Identifier:
                keyid:D8:7A:1A:B5:45:BE:4E:25:7C:E1:0B:49:65:EE:13:4E:76:73:FC:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8756187C02AC0393551EFADE620EE91273CE37B8A8E8528978BDF28E5AB064DC/0/D87A1AB545BE4E257CE10B4965EE134E7673FC52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D87A1AB545BE4E257CE10B4965EE134E7673FC52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8756187C02AC0393551EFADE620EE91273CE37B8A8E8528978BDF28E5AB064DC/0/3138312e3233332e382e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:16:a1:25:5e:f2:1c:bd:c7:21:7e:22:31:14:42:45:c6:aa:
         da:f0:fa:c9:b4:d7:7c:b5:2c:1c:0d:75:55:ff:9a:40:46:11:
         f2:ba:97:48:81:3c:71:1e:b5:a9:55:95:5d:e7:99:45:60:39:
         ff:fd:fa:b4:ad:e7:fd:25:56:fe:98:a9:7a:31:52:cf:c0:8f:
         96:fb:c9:97:d9:4b:21:40:cb:0d:2e:c9:d0:9f:d3:24:be:21:
         ba:7c:f4:11:b6:25:22:92:3c:2a:55:14:03:88:e2:89:c3:bd:
         b6:a0:7a:7b:27:fd:1a:03:ee:65:ae:a7:6f:cc:77:3a:de:11:
         fa:70:cf:ec:10:50:57:5c:e0:27:d1:67:3f:03:db:96:15:a3:
         83:2a:c9:31:04:37:31:f8:36:b9:96:f1:e1:5a:6f:56:c2:1d:
         d5:58:41:ab:a9:c3:0d:69:bc:43:c9:55:e6:08:30:a9:93:58:
         8c:fa:ff:04:98:a5:2e:cc:52:05:9a:7a:31:f5:e7:85:c9:83:
         2d:44:58:61:03:d3:f1:0e:02:e4:67:72:98:37:5f:8b:e3:54:
         5b:cb:30:eb:91:66:0c:16:ef:78:fa:ef:5c:df:ae:87:5f:42:
         89:0e:96:0d:54:11:08:3f:3f:da:0f:4a:39:67:27:82:43:46:
         8c:7b:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:04:23 2025 by rpki-client