Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/3138312e3139312e36342e302f32342d3234203d3e20323635373737.roa
File:                     3138312e3139312e36342e302f32342d3234203d3e20323635373737.roa (raw, json)
Hash identifier:          CSkt239AKTLeh9O6RgghHA/A/g1D9/6HDtEr92bEQYI=
Subject key identifier:   16:E2:6A:39:06:5A:94:1E:7A:A7:3C:D4:9D:BD:CB:D1:92:BC:1D:79
Certificate issuer:       /CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
Certificate serial:       731C91AB58D046973347846A9D343A46AE4A742D
Authority key identifier: B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/3138312e3139312e36342e302f32342d3234203d3e20323635373737.roa
Signing time:             Tue 05 Mar 2024 17:55:16 +0000
ROA not before:           Tue 05 Mar 2024 17:50:16 +0000
ROA not after:            Tue 04 Mar 2025 17:55:16 +0000
asID:                     265777
IP address blocks:        181.191.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 16 May 2024 15:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1c:91:ab:58:d0:46:97:33:47:84:6a:9d:34:3a:46:ae:4a:74:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
        Validity
            Not Before: Mar  5 17:50:16 2024 GMT
            Not After : Mar  4 17:55:16 2025 GMT
        Subject: CN=16E26A39065A941E7AA73CD49DBDCBD192BC1D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:0b:cc:eb:74:ea:9a:be:05:99:2d:a3:59:
                    05:7a:78:28:08:80:ab:dc:e5:50:70:32:d8:a7:b8:
                    4a:0d:00:9a:ce:17:c8:65:73:eb:dc:89:f7:fd:c6:
                    10:5d:1d:d5:ba:a1:ba:1f:c2:78:f3:0d:ac:05:de:
                    47:95:7e:88:5e:b3:41:3f:db:9a:79:ba:0d:d3:30:
                    81:ea:c4:09:44:22:de:e9:bb:30:9c:a2:06:2e:8b:
                    e9:91:cd:13:56:21:37:68:d0:af:0b:d9:fa:38:56:
                    0c:44:ab:b7:92:9f:51:03:81:f8:fe:67:d5:cc:0a:
                    2f:65:00:3f:a0:8d:2d:24:8f:9e:2a:ca:1d:7f:bc:
                    32:a1:51:42:2e:fa:bf:be:22:8d:5d:cb:58:77:33:
                    02:1b:40:1f:70:2a:9e:a8:45:50:1d:4a:2a:57:08:
                    e0:6f:ab:15:57:91:c5:56:54:52:cb:3c:b4:7c:70:
                    31:42:ff:08:00:7f:ea:84:ec:e4:e4:68:0b:d2:0f:
                    43:02:23:99:da:4e:4f:d1:2e:88:50:f0:b5:50:bc:
                    8e:be:ec:16:af:eb:b9:0c:34:84:aa:e7:5f:b5:22:
                    6c:7a:0e:93:e4:4a:1e:e8:50:98:95:40:d8:f9:65:
                    9f:eb:15:09:de:cd:f8:a2:c8:92:4a:8f:cb:69:4c:
                    a1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E2:6A:39:06:5A:94:1E:7A:A7:3C:D4:9D:BD:CB:D1:92:BC:1D:79
            X509v3 Authority Key Identifier:
                keyid:B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/3138312e3139312e36342e302f32342d3234203d3e20323635373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:b8:3b:fb:34:d7:47:12:5c:c3:87:d1:3c:9c:a2:fd:ef:2e:
         0c:df:e2:41:d7:87:82:63:c9:13:01:b6:8e:d6:03:b5:3a:3c:
         7c:74:dd:14:41:30:68:d0:57:ac:89:31:dc:32:96:a1:58:85:
         a0:fc:14:75:44:61:b2:ea:ee:84:30:da:2b:4c:84:a1:3b:73:
         63:74:ff:84:50:e2:cc:52:58:0a:8a:d6:8f:09:0a:c4:65:8c:
         6a:b4:79:e5:8b:22:3d:00:62:4b:7a:61:a5:8f:64:1d:0c:f7:
         0d:e9:15:7f:91:88:19:8d:d6:03:87:df:0b:38:6d:9a:38:04:
         82:93:8d:2c:bb:3d:b7:a4:b2:66:c2:b9:78:5e:cc:87:c8:7d:
         eb:6e:f5:f7:86:fe:e5:d7:c8:bb:a3:a7:f3:a7:84:c9:7b:87:
         62:89:bc:0c:b0:32:d5:e6:8c:ac:bb:5a:c7:d0:28:05:61:bd:
         5d:ba:a8:b6:b8:45:dc:d4:4e:6c:8e:73:92:6f:4f:c9:7a:9c:
         5f:13:0f:1f:66:f8:23:cd:9c:88:c5:af:ba:6c:10:bc:e9:b4:
         6e:23:e6:94:48:c0:c0:10:65:49:a8:ed:02:19:8c:d9:21:6a:
         e6:27:f6:ac:dd:36:50:62:9e:7b:65:2e:49:2c:94:66:6c:2e:
         4c:6f:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org