Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/3138312e3139312e36362e302f32342d3234203d3e20323635373737.roa
File:                     3138312e3139312e36362e302f32342d3234203d3e20323635373737.roa (raw, json)
Hash identifier:          IL8B9hQWtUtjv9RVaWVSbna3kT6HmFidPLPVUHgqaMg=
Subject key identifier:   F5:45:47:A2:85:6E:07:B3:B1:29:B6:FD:81:E5:51:64:2A:AD:55:9A
Certificate issuer:       /CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
Certificate serial:       3E72E132F93DC12A7661EF6AC20C6AF72E7347C8
Authority key identifier: B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/3138312e3139312e36362e302f32342d3234203d3e20323635373737.roa
Signing time:             Tue 05 Mar 2024 17:55:15 +0000
ROA not before:           Tue 05 Mar 2024 17:50:15 +0000
ROA not after:            Tue 04 Mar 2025 17:55:15 +0000
asID:                     265777
IP address blocks:        181.191.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 16 May 2024 15:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:72:e1:32:f9:3d:c1:2a:76:61:ef:6a:c2:0c:6a:f7:2e:73:47:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
        Validity
            Not Before: Mar  5 17:50:15 2024 GMT
            Not After : Mar  4 17:55:15 2025 GMT
        Subject: CN=F54547A2856E07B3B129B6FD81E551642AAD559A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:65:8f:f8:53:ad:50:07:c6:ea:4c:cc:45:e6:
                    66:c4:99:8a:ba:f6:3d:02:92:38:6f:5b:3f:ab:83:
                    18:19:62:9c:20:09:79:59:9d:83:2b:69:6f:89:01:
                    15:01:ba:6f:2e:de:b1:bb:9c:82:4e:6f:c6:da:e9:
                    2a:c5:6f:8f:7d:2c:09:17:07:f5:00:e2:4e:5c:30:
                    98:2f:b1:a2:f2:d4:68:b9:f6:4a:cc:05:9d:4c:bc:
                    c6:0c:88:56:5d:88:3e:a6:09:68:b3:20:35:93:b4:
                    a5:88:bb:5f:2d:4f:68:66:2b:89:30:6d:57:9c:e9:
                    3c:97:6a:67:71:fb:33:5d:50:b7:f4:b2:a7:53:93:
                    cc:c5:97:2b:dd:97:db:b1:5f:ec:b1:6e:a1:55:91:
                    32:cd:d8:79:95:5d:00:d7:e0:b0:fc:e8:78:72:c8:
                    2a:13:32:70:66:d8:3d:27:6e:4f:f2:b0:a8:bf:20:
                    21:e0:30:36:ef:b0:9c:92:ef:d5:74:d2:0e:c8:19:
                    59:54:75:bb:be:df:f8:20:44:90:87:09:9b:ef:2a:
                    68:36:97:7a:6d:f0:6c:10:47:13:ae:e9:25:78:59:
                    28:92:08:37:8c:05:68:99:2d:7b:f2:54:c7:9a:be:
                    30:51:a7:5c:55:de:2d:44:59:df:1a:76:05:07:62:
                    8b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:45:47:A2:85:6E:07:B3:B1:29:B6:FD:81:E5:51:64:2A:AD:55:9A
            X509v3 Authority Key Identifier:
                keyid:B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/3138312e3139312e36362e302f32342d3234203d3e20323635373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:8a:55:0a:5d:17:20:53:fc:42:d6:9c:0b:7f:d2:ee:8e:07:
         ce:4f:59:d2:3d:b5:2b:b3:24:e8:2c:49:36:de:b5:f5:cc:42:
         ac:4a:3c:8b:95:08:9f:34:6a:e2:7a:d9:83:f7:ff:f9:4a:14:
         e8:df:68:ba:4e:00:f3:9f:b8:bd:a2:8a:e7:70:b0:dd:65:af:
         ce:20:a0:75:29:48:5f:70:ad:f6:92:0b:19:4e:30:94:6f:1e:
         4e:08:a8:81:95:6a:44:73:a0:0a:3a:04:ad:20:fc:5d:ac:c0:
         99:30:8e:20:8f:fb:67:63:6f:c9:9b:8f:6a:6e:6f:d7:78:bb:
         f6:0d:e0:64:28:98:8e:51:4d:d7:f2:14:46:af:61:a6:2f:b2:
         b5:83:4f:86:17:b8:5c:c1:95:a9:a5:6d:78:bf:f6:60:c7:9a:
         ad:53:79:80:4e:7e:86:50:c0:ec:51:84:90:75:05:06:96:42:
         91:7a:61:ac:24:3a:4b:64:49:51:ee:9c:a9:3f:c0:c4:9b:43:
         99:41:68:e7:a6:14:bf:50:30:af:40:40:28:47:2f:01:28:e7:
         48:f1:d2:a7:8c:b9:ae:01:39:d3:1f:f8:72:75:9a:48:ae:55:
         26:f6:52:c0:e6:68:a6:d3:0e:d9:2b:62:80:85:eb:d4:bb:50:
         3e:6f:a4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org