Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/3137392e36332e382e302f32322d3232203d3e20313938393439.roa
File:                     3137392e36332e382e302f32322d3232203d3e20313938393439.roa (raw, json)
Hash identifier:          bYNa0I6QtIpeeuia28j7z4e45/na0lJ1BTxw80NfDv8=
Subject key identifier:   89:15:E6:D2:4C:B6:89:AC:C2:8F:22:95:EE:B8:99:09:F8:46:0A:45
Certificate issuer:       /CN=15AEFB47DDB077551B2BC6F226A051855E0A0F6D
Certificate serial:       73EB78E36DA5D2771E9A6358495541D693DCEB96
Authority key identifier: 15:AE:FB:47:DD:B0:77:55:1B:2B:C6:F2:26:A0:51:85:5E:0A:0F:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/3137392e36332e382e302f32322d3232203d3e20313938393439.roa
Signing time:             Mon 24 Mar 2025 17:15:00 +0000
ROA not before:           Mon 24 Mar 2025 17:10:00 +0000
ROA not after:            Mon 23 Mar 2026 17:15:00 +0000
asID:                     198949
IP address blocks:        179.63.8.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 26 Mar 2025 21:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:eb:78:e3:6d:a5:d2:77:1e:9a:63:58:49:55:41:d6:93:dc:eb:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15AEFB47DDB077551B2BC6F226A051855E0A0F6D
        Validity
            Not Before: Mar 24 17:10:00 2025 GMT
            Not After : Mar 23 17:15:00 2026 GMT
        Subject: CN=8915E6D24CB689ACC28F2295EEB89909F8460A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:cc:9a:38:96:ed:c6:da:11:0f:26:37:9e:
                    81:ee:ee:2f:a5:23:f2:7b:23:88:51:62:2e:4f:ea:
                    fd:93:9e:6c:79:d1:51:db:39:0f:45:67:fe:a9:dc:
                    e0:dd:62:36:8b:a2:6e:55:31:e3:aa:4a:ba:74:b2:
                    38:2b:20:fa:09:fc:b4:8f:e3:b5:f9:08:01:3d:3c:
                    53:9e:3f:59:81:0c:a4:b5:b8:5a:ab:92:b7:09:fe:
                    dd:1d:b2:63:3f:fd:3d:87:06:6d:d2:3b:f6:8c:0b:
                    7e:5b:ae:8a:5d:95:34:a1:f6:15:07:1a:3d:3b:3a:
                    59:b8:96:73:9b:18:21:f1:9c:4b:a3:d2:f1:51:4e:
                    57:78:5f:f4:5d:cf:94:5d:0c:bb:a7:87:36:0c:93:
                    af:3f:9b:a3:4f:69:33:2e:67:a6:cd:72:07:7e:74:
                    fa:e9:29:02:10:e5:f7:8c:33:06:83:5d:f3:91:75:
                    f7:da:2e:07:f5:b3:61:ee:32:ed:b2:72:ad:18:8b:
                    b2:48:c7:49:c1:53:ee:26:9c:b0:67:f1:05:95:27:
                    10:6a:91:fb:45:1e:28:39:ee:f8:70:68:99:a5:dd:
                    fb:71:12:a0:ae:ca:c7:73:ac:b3:bc:60:7d:b4:1b:
                    09:a5:b6:8a:4f:73:ff:87:26:7a:d4:5d:38:83:ac:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:15:E6:D2:4C:B6:89:AC:C2:8F:22:95:EE:B8:99:09:F8:46:0A:45
            X509v3 Authority Key Identifier:
                keyid:15:AE:FB:47:DD:B0:77:55:1B:2B:C6:F2:26:A0:51:85:5E:0A:0F:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/3137392e36332e382e302f32322d3232203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:62:a1:af:00:e4:ac:6e:63:8b:94:02:5d:a6:4c:3f:68:aa:
         49:9a:41:d9:6f:58:95:35:f7:e6:e5:e3:28:2b:c4:cc:a6:c7:
         c6:93:d2:1c:7c:8e:1a:8a:5d:7a:f3:b6:dc:e1:c9:b6:80:c9:
         59:74:db:80:ec:34:c9:e3:4b:ce:b2:54:48:05:7d:c5:67:a9:
         1d:08:ba:04:f2:6b:b0:3b:e3:30:03:08:2c:16:a2:cc:48:1c:
         ff:2c:40:c5:ed:cf:61:ca:7b:00:7e:6b:3e:4e:b9:f2:f3:dc:
         fc:ca:b6:60:dc:ce:8e:85:1b:8b:45:bd:8c:c1:5b:47:de:1d:
         d7:14:b9:a6:f2:78:5f:c4:a1:5a:20:31:f7:4d:11:fb:57:e9:
         05:da:55:6a:d7:fb:95:6d:9f:2f:8d:2f:cc:43:f2:30:54:b0:
         78:ed:66:4e:b3:d3:02:7e:7e:68:1b:0f:49:6c:08:12:53:00:
         1b:3d:1c:db:f3:8f:c7:89:24:c6:c9:f0:2d:dc:89:0b:77:8f:
         78:d5:73:56:b5:75:1d:a5:ea:85:85:45:25:00:f9:51:35:25:
         4c:c5:7a:f7:1b:61:9d:3e:76:c6:70:9a:31:f5:aa:69:70:fe:
         9c:b3:fe:13:64:24:69:f7:79:b6:94:41:7b:8b:1f:42:ca:1b:
         26:19:bd:a1
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUc+t4422l0ncemmNYSVVB1pPc65YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVBRUZCNDdEREIwNzc1NTFCMkJDNkYyMjZBMDUxODU1
RTBBMEY2RDAeFw0yNTAzMjQxNzEwMDBaFw0yNjAzMjMxNzE1MDBaMDMxMTAvBgNV
BAMTKDg5MTVFNkQyNENCNjg5QUNDMjhGMjI5NUVFQjg5OTA5Rjg0NjBBNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7q8yaOJbtxtoRDyY3noHu7i+l
I/J7I4hRYi5P6v2Tnmx50VHbOQ9FZ/6p3ODdYjaLom5VMeOqSrp0sjgrIPoJ/LSP
47X5CAE9PFOeP1mBDKS1uFqrkrcJ/t0dsmM//T2HBm3SO/aMC35bropdlTSh9hUH
Gj07Olm4lnObGCHxnEuj0vFRTld4X/Rdz5RdDLunhzYMk68/m6NPaTMuZ6bNcgd+
dPrpKQIQ5feMMwaDXfORdffaLgf1s2HuMu2ycq0Yi7JIx0nBU+4mnLBn8QWVJxBq
kftFHig57vhwaJml3ftxEqCuysdzrLO8YH20GwmltopPc/+HJnrUXTiDrHf3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUiRXm0ky2iazCjyKV7riZCfhGCkUwHwYDVR0j
BBgwFoAUFa77R92wd1UbK8byJqBRhV4KD20wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84ODc4RENGQ0ZDMzMyNjBDMEJEOEEyQTY4M0Y5RjY3Njky
RTIxRkQ0Rjc0NDY1MkRGRDZCQUI2NTFCRDJFNzgyLzAvMTVBRUZCNDdEREIwNzc1
NTFCMkJDNkYyMjZBMDUxODU1RTBBMEY2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNUFFRkI0N0REQjA3NzU1MUIy
QkM2RjIyNkEwNTE4NTVFMEEwRjZELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODg3OERDRkNGQzMzMjYwQzBCRDhBMkE2ODNGOUY2NzY5MkUyMUZENEY3
NDQ2NTJERkQ2QkFCNjUxQkQyRTc4Mi8wLzMxMzczOTJlMzYzMzJlMzgyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzMTM5MzgzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKzPwgwDQYJ
KoZIhvcNAQELBQADggEBAFBioa8A5KxuY4uUAl2mTD9oqkmaQdlvWJU19+bl4ygr
xMymx8aT0hx8jhqKXXrzttzhybaAyVl024DsNMnjS86yVEgFfcVnqR0IugTya7A7
4zADCCwWosxIHP8sQMXtz2HKewB+az5OufLz3PzKtmDczo6FG4tFvYzBW0feHdcU
uabyeF/EoVogMfdNEftX6QXaVWrX+5Vtny+NL8xD8jBUsHjtZk6z0wJ+fmgbD0ls
CBJTABs9HNvzj8eJJMbJ8C3ciQt3j3jVc1a1dR2l6oWFRSUA+VE1JUzFevcbYZ0+
dsZwmjH1qmlw/pyz/hNkJGn3ebaUQXuLH0LKGyYZvaE=
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:52:03 2025 by rpki-client