Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/3138312e3139312e36372e302f32342d3234203d3e20323635373737.roa
File:                     3138312e3139312e36372e302f32342d3234203d3e20323635373737.roa (raw, json)
Hash identifier:          e1lbNQJ48uUTZuVwovZmQHAzGNyaWbH3OQQTEtpoHQ8=
Subject key identifier:   93:95:91:03:0A:74:23:B0:ED:C6:25:4A:D4:03:FA:46:44:4A:B0:8D
Certificate issuer:       /CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
Certificate serial:       3078D6C0ADEFDDDA1A689C8FFEA7FA418A4EE93B
Authority key identifier: B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/3138312e3139312e36372e302f32342d3234203d3e20323635373737.roa
Signing time:             Tue 05 Mar 2024 17:55:16 +0000
ROA not before:           Tue 05 Mar 2024 17:50:16 +0000
ROA not after:            Tue 04 Mar 2025 17:55:16 +0000
asID:                     265777
IP address blocks:        181.191.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 16 May 2024 15:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:78:d6:c0:ad:ef:dd:da:1a:68:9c:8f:fe:a7:fa:41:8a:4e:e9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
        Validity
            Not Before: Mar  5 17:50:16 2024 GMT
            Not After : Mar  4 17:55:16 2025 GMT
        Subject: CN=939591030A7423B0EDC6254AD403FA46444AB08D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f7:62:7d:07:5f:1a:9e:95:08:00:c5:36:5c:
                    29:95:20:85:58:44:45:0d:8e:d4:09:34:11:10:10:
                    b6:46:47:9f:3c:e9:36:b7:72:50:e5:57:21:7a:42:
                    ff:0a:5a:9e:32:d1:2b:cf:9c:d8:e9:26:dd:0d:ed:
                    e5:d3:6b:44:a9:90:f3:89:dc:dc:76:7e:e0:55:41:
                    f7:ac:a0:a0:79:4f:9a:89:11:b5:df:07:a8:48:6d:
                    3d:99:f0:7d:18:5e:05:fe:19:d6:94:13:d4:34:45:
                    83:45:ec:ec:97:f5:17:cc:53:f2:c1:b7:65:a3:4b:
                    ff:33:8e:26:cc:0c:b9:01:8d:1c:cb:6e:8f:c5:bc:
                    b4:f7:65:67:88:5d:a5:c9:80:38:df:52:9d:dd:17:
                    f7:3c:8a:99:23:f9:6f:6e:cf:4f:82:72:a5:5a:c5:
                    21:0a:39:11:56:60:5c:b8:02:9e:3f:dc:1f:3c:3b:
                    d1:f3:91:fd:71:30:bb:6a:aa:fa:28:2b:7a:4b:e7:
                    3b:08:df:5c:ee:63:c3:6a:cb:aa:9d:ee:89:17:02:
                    68:bd:b1:a0:b2:83:83:88:d9:99:37:9f:23:eb:e0:
                    1c:d1:ab:d3:a8:54:9b:40:b2:f7:0c:94:70:68:de:
                    78:5c:ff:21:a4:05:d6:f2:1c:4f:77:e2:0c:92:a5:
                    1c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:95:91:03:0A:74:23:B0:ED:C6:25:4A:D4:03:FA:46:44:4A:B0:8D
            X509v3 Authority Key Identifier:
                keyid:B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/3138312e3139312e36372e302f32342d3234203d3e20323635373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:81:84:37:33:f8:64:45:e0:c3:d4:12:0c:a9:f6:71:61:ef:
         90:28:a6:12:4a:b5:ec:d6:c4:99:14:55:39:0c:7b:47:8d:a4:
         ff:1f:ec:a2:e9:51:7b:1b:35:79:51:1f:36:69:f2:f0:bf:ca:
         2d:d0:75:15:1d:54:77:0b:a3:3c:54:bc:e3:1e:8b:0f:7f:9a:
         91:a0:43:1a:4b:23:13:09:a0:f5:2c:7e:90:7c:c8:0a:92:28:
         41:ce:0e:81:40:03:30:45:07:34:1a:f7:f3:6f:b0:a1:44:e5:
         ba:f0:91:15:6b:d2:e6:f9:72:31:81:93:c5:66:9f:7d:a1:ec:
         56:90:1f:95:85:85:1f:21:ce:5e:06:4b:98:8f:b1:5a:62:a1:
         d3:71:06:1a:42:fb:78:f3:2b:ea:eb:73:fe:87:32:95:8d:6a:
         de:0f:2f:46:de:9b:d9:d7:3d:3d:4f:ce:23:06:18:d4:34:3a:
         a6:9d:47:4b:81:82:8b:10:74:25:29:95:77:c5:69:b0:21:6a:
         ec:04:c7:d4:88:1b:e3:36:66:b2:d6:47:6f:23:31:d5:93:49:
         0c:d5:3f:5f:51:67:da:ea:4f:3d:e4:2c:b3:f5:64:0a:61:ca:
         c9:4b:50:11:67:0f:c0:d4:00:44:e5:0b:05:7c:66:b7:ed:47:
         0e:a1:1f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:49:02 2024 by rpki-client on console-fra.rpki-client.org