Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/3134332e302e3130382e302f32322d3232203d3e20323632353839.roa
File:                     3134332e302e3130382e302f32322d3232203d3e20323632353839.roa (raw, json)
Hash identifier:          s4Q9CqpaKdgumnHQWOAbkzFHM+RSjMYgauChnuXTMq4=
Subject key identifier:   DC:58:23:94:EE:23:3A:C8:F0:B6:3F:BC:BF:5D:C2:04:D8:04:56:F8
Certificate issuer:       /CN=E5AE7BFB852947BC2524209953A000E85EF4362B
Certificate serial:       08BC50C1A76877B7D432DD25C604AAF793B5F457
Authority key identifier: E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/3134332e302e3130382e302f32322d3232203d3e20323632353839.roa
Signing time:             Fri 12 Apr 2024 16:20:00 +0000
ROA not before:           Fri 12 Apr 2024 16:15:00 +0000
ROA not after:            Fri 11 Apr 2025 16:20:00 +0000
asID:                     262589
IP address blocks:        143.0.108.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:bc:50:c1:a7:68:77:b7:d4:32:dd:25:c6:04:aa:f7:93:b5:f4:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5AE7BFB852947BC2524209953A000E85EF4362B
        Validity
            Not Before: Apr 12 16:15:00 2024 GMT
            Not After : Apr 11 16:20:00 2025 GMT
        Subject: CN=DC582394EE233AC8F0B63FBCBF5DC204D80456F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:3f:38:fd:4a:16:7f:a8:5a:1d:cb:68:02:
                    ef:da:f7:3a:b0:a7:a1:50:b2:ac:cb:17:39:76:b5:
                    16:fc:57:db:03:a6:c0:ec:4c:e7:84:32:cd:f6:28:
                    01:c0:fe:db:ac:2f:4a:eb:ed:9f:cf:1a:6f:8c:3a:
                    44:c0:35:4a:7b:88:d8:94:32:57:4f:9c:f0:d8:86:
                    d2:3c:55:6d:f0:25:b2:8e:50:48:de:d9:32:52:8f:
                    48:23:90:37:8b:bd:08:4d:de:10:aa:bd:d2:27:ae:
                    56:2b:fd:85:af:5d:c0:6f:3a:19:a6:d9:b9:2f:92:
                    67:5d:13:fb:1f:c9:d4:2f:a6:98:a6:12:b9:68:f0:
                    d2:9c:03:14:9d:cb:b9:f0:63:c3:48:ac:b2:9f:1f:
                    41:70:4d:f1:75:9d:0e:70:56:d4:13:3e:43:ac:12:
                    7e:3e:9d:f0:10:c5:6f:96:de:e6:b3:1d:ba:58:b4:
                    f7:39:b6:fc:7b:84:d4:02:52:05:08:16:b1:eb:82:
                    5f:69:fd:6a:85:ec:8d:1d:96:b1:11:4a:e8:66:32:
                    0a:eb:6d:46:f5:cd:30:61:6d:2f:84:5b:98:30:76:
                    23:f3:32:7c:c4:fd:19:f7:59:ab:4b:33:b0:2e:a0:
                    23:f8:db:b6:af:35:2e:2a:d8:56:8a:c7:7b:fc:79:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:58:23:94:EE:23:3A:C8:F0:B6:3F:BC:BF:5D:C2:04:D8:04:56:F8
            X509v3 Authority Key Identifier:
                keyid:E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/3134332e302e3130382e302f32322d3232203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:c1:bb:f8:df:dd:69:75:56:56:7e:f5:9b:6e:b1:e7:f8:50:
         98:3b:3d:7b:06:e6:d8:91:36:98:dc:76:f4:5d:d3:30:07:b8:
         af:86:2e:1c:fc:8a:79:c4:f6:94:fc:b7:9a:30:2d:55:df:28:
         d7:62:42:7f:1a:cd:98:18:05:f1:ea:b7:06:19:9a:0f:51:69:
         e3:ff:b1:86:d0:69:90:b1:05:b5:bd:db:89:7d:37:8e:af:a5:
         e0:e3:1a:09:5d:6b:a5:16:52:d0:1e:2d:05:aa:4e:3f:46:63:
         af:92:33:32:a3:ba:24:db:33:05:fa:a8:85:2d:e4:f6:d6:92:
         05:8b:20:00:0a:a5:fe:35:73:68:8d:92:9f:38:ef:ec:28:48:
         c9:6b:61:c2:5a:4f:82:1e:92:74:dc:e5:f6:93:dc:4a:9e:45:
         21:14:9d:63:e9:05:99:40:40:f2:0f:be:5e:b4:a1:e7:22:6c:
         cc:cb:39:6a:13:2a:85:8a:da:98:ad:15:0d:13:e2:d9:b4:b2:
         3d:cf:55:96:57:cf:b6:ab:42:2c:67:b9:46:de:7d:9b:63:a7:
         84:23:7c:52:ea:d4:c2:f7:6c:ea:47:ba:ac:41:ae:69:d4:e7:
         dc:ac:5a:55:ec:2b:84:56:09:3d:c0:98:e9:48:3b:d8:8c:54:
         87:45:7e:11
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCLxQwadod7fUMt0lxgSq95O19FcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBRTdCRkI4NTI5NDdCQzI1MjQyMDk5NTNBMDAwRTg1
RUY0MzYyQjAeFw0yNDA0MTIxNjE1MDBaFw0yNTA0MTExNjIwMDBaMDMxMTAvBgNV
BAMTKERDNTgyMzk0RUUyMzNBQzhGMEI2M0ZCQ0JGNURDMjA0RDgwNDU2RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKD84/UoWf6haHctoAu/a9zqw
p6FQsqzLFzl2tRb8V9sDpsDsTOeEMs32KAHA/tusL0rr7Z/PGm+MOkTANUp7iNiU
MldPnPDYhtI8VW3wJbKOUEje2TJSj0gjkDeLvQhN3hCqvdInrlYr/YWvXcBvOhmm
2bkvkmddE/sfydQvppimErlo8NKcAxSdy7nwY8NIrLKfH0FwTfF1nQ5wVtQTPkOs
En4+nfAQxW+W3uazHbpYtPc5tvx7hNQCUgUIFrHrgl9p/WqF7I0dlrERSuhmMgrr
bUb1zTBhbS+EW5gwdiPzMnzE/Rn3WatLM7AuoCP427avNS4q2FaKx3v8eXNPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU3FgjlO4jOsjwtj+8v13CBNgEVvgwHwYDVR0j
BBgwFoAU5a57+4UpR7wlJCCZU6AA6F70NiswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MzUxMzMyODRCNzFERjQzMjlGRTQxMkM1NjUyODNGMDY1
RDU1RkE2NzIzNTI0RkVCMzg5MjNCM0M0REU1MzJGLzAvRTVBRTdCRkI4NTI5NDdC
QzI1MjQyMDk5NTNBMDAwRTg1RUY0MzYyQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUFFN0JGQjg1Mjk0N0JDMjUy
NDIwOTk1M0EwMDBFODVFRjQzNjJCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTM1MTMzMjg0QjcxREY0MzI5RkU0MTJDNTY1MjgzRjA2NUQ1NUZBNjcy
MzUyNEZFQjM4OTIzQjNDNERFNTMyRi8wLzMxMzQzMzJlMzAyZTMxMzAzODJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMjM1MzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAo8AbDAN
BgkqhkiG9w0BAQsFAAOCAQEAnMG7+N/daXVWVn71m26x5/hQmDs9ewbm2JE2mNx2
9F3TMAe4r4YuHPyKecT2lPy3mjAtVd8o12JCfxrNmBgF8eq3BhmaD1Fp4/+xhtBp
kLEFtb3biX03jq+l4OMaCV1rpRZS0B4tBapOP0Zjr5IzMqO6JNszBfqohS3k9taS
BYsgAAql/jVzaI2Snzjv7ChIyWthwlpPgh6SdNzl9pPcSp5FIRSdY+kFmUBA8g++
XrSh5yJszMs5ahMqhYramK0VDRPi2bSyPc9VllfPtqtCLGe5Rt59m2OnhCN8UurU
wvds6ke6rEGuadTn3KxaVewrhFYJPcCY6Ug72IxUh0V+EQ==
-----END CERTIFICATE-----