Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/3133322e3235352e302e302f32322d3232203d3e20323633363932.roa
File:                     3133322e3235352e302e302f32322d3232203d3e20323633363932.roa (raw, json)
Hash identifier:          pem2bN2zGdtmhbdO0RRaljs9rml3oUqo2MC/KvOhjvg=
Subject key identifier:   4D:E4:F3:24:57:90:7B:54:51:72:D9:CE:B1:38:F0:A2:C5:23:DE:FA
Certificate issuer:       /CN=6D3556529CE5599E78565FB2F26BF5285D573D92
Certificate serial:       0F4DB0BA9C0661A7DAA79F632C06994C54882322
Authority key identifier: 6D:35:56:52:9C:E5:59:9E:78:56:5F:B2:F2:6B:F5:28:5D:57:3D:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/3133322e3235352e302e302f32322d3232203d3e20323633363932.roa
Signing time:             Tue 05 Mar 2024 17:58:35 +0000
ROA not before:           Tue 05 Mar 2024 17:53:35 +0000
ROA not after:            Tue 04 Mar 2025 17:58:35 +0000
asID:                     263692
IP address blocks:        132.255.0.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 23:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4d:b0:ba:9c:06:61:a7:da:a7:9f:63:2c:06:99:4c:54:88:23:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D3556529CE5599E78565FB2F26BF5285D573D92
        Validity
            Not Before: Mar  5 17:53:35 2024 GMT
            Not After : Mar  4 17:58:35 2025 GMT
        Subject: CN=4DE4F32457907B545172D9CEB138F0A2C523DEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:d2:3a:9c:1f:ef:83:b3:0a:e1:98:48:59:
                    f7:fb:d9:a7:86:7a:08:3e:0c:9e:ce:77:3d:f9:02:
                    d9:4c:97:71:f0:6e:bc:c5:95:0a:4c:6e:c4:26:ad:
                    65:63:8a:b6:d7:8a:b2:53:9c:d5:a3:6b:03:37:1c:
                    e3:b6:71:47:24:7f:69:ff:22:1c:ab:10:1c:3e:4c:
                    ac:ae:b8:aa:71:c5:1e:81:9d:b1:a0:ec:23:66:2d:
                    bb:41:85:e0:92:b4:a7:f5:6b:f2:d2:73:fe:73:1b:
                    0c:b8:f7:a2:48:7d:56:8e:3c:1f:12:2c:81:61:56:
                    f9:07:d4:76:47:78:3c:d8:57:5a:9c:1e:61:db:29:
                    10:ac:1d:6b:a9:91:e5:85:c8:c6:08:7d:c6:1d:d6:
                    60:25:9a:be:f2:67:29:c6:cb:11:ac:75:5d:d7:1b:
                    fa:a5:4c:3b:96:8a:a0:70:53:2b:1a:99:47:af:55:
                    54:5e:e6:05:4d:df:5b:7d:2f:03:a6:44:49:93:eb:
                    58:7a:fc:18:06:7c:40:6c:9a:ae:c0:65:59:76:af:
                    06:97:7b:c5:55:91:ff:25:24:b6:a7:4b:89:80:1a:
                    f8:9d:29:6a:3d:7b:ad:dc:40:9b:a7:8e:2b:39:3e:
                    db:6e:78:ea:a7:fa:81:c8:b0:5a:7a:5d:44:5f:25:
                    33:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E4:F3:24:57:90:7B:54:51:72:D9:CE:B1:38:F0:A2:C5:23:DE:FA
            X509v3 Authority Key Identifier:
                keyid:6D:35:56:52:9C:E5:59:9E:78:56:5F:B2:F2:6B:F5:28:5D:57:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/3133322e3235352e302e302f32322d3232203d3e20323633363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:4b:b6:d7:9c:28:4d:c9:0f:72:20:56:c1:60:17:94:8a:0f:
         d9:9c:88:db:a2:30:86:7b:25:c8:63:2c:1e:0f:96:37:5e:b7:
         0e:fa:c8:2e:03:02:5a:37:96:15:f9:b6:56:e9:81:0c:61:d4:
         bd:dc:79:d2:2a:af:8b:4a:12:71:f1:5d:df:e7:70:fd:0b:4b:
         17:90:84:8d:3e:f2:58:a2:42:e8:13:9c:8a:ed:69:2e:27:77:
         54:e1:ff:6a:15:eb:c7:93:02:7d:8c:c7:51:24:4a:1d:89:23:
         ac:82:32:9f:2b:fa:ea:4b:f4:9b:cc:92:16:f6:b7:04:6f:90:
         b1:02:7a:27:39:d8:d4:8d:da:72:45:d6:36:16:d0:a0:96:58:
         db:7d:e3:31:98:26:77:49:a1:4a:34:cd:7a:41:61:63:f9:d3:
         f1:c5:e7:05:85:6f:4d:1c:72:05:b8:23:53:aa:ab:60:d4:1d:
         01:9b:40:1f:c0:e7:cc:b7:ca:04:f7:b5:94:aa:63:5d:bf:6a:
         10:d3:55:fd:77:fc:c4:e3:46:40:d1:2c:13:89:7b:03:08:a3:
         af:5e:02:99:ca:fe:b3:9b:a8:53:4a:03:2d:5d:0f:b0:20:22:
         4f:5b:a2:7c:2a:11:f7:44:81:e7:f3:f8:f3:db:61:cf:26:cc:
         72:2e:3f:be
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUD02wupwGYafap59jLAaZTFSIIyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQzNTU2NTI5Q0U1NTk5RTc4NTY1RkIyRjI2QkY1Mjg1
RDU3M0Q5MjAeFw0yNDAzMDUxNzUzMzVaFw0yNTAzMDQxNzU4MzVaMDMxMTAvBgNV
BAMTKDRERTRGMzI0NTc5MDdCNTQ1MTcyRDlDRUIxMzhGMEEyQzUyM0RFRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xtI6nB/vg7MK4ZhIWff72aeG
egg+DJ7Odz35AtlMl3HwbrzFlQpMbsQmrWVjirbXirJTnNWjawM3HOO2cUckf2n/
IhyrEBw+TKyuuKpxxR6BnbGg7CNmLbtBheCStKf1a/LSc/5zGwy496JIfVaOPB8S
LIFhVvkH1HZHeDzYV1qcHmHbKRCsHWupkeWFyMYIfcYd1mAlmr7yZynGyxGsdV3X
G/qlTDuWiqBwUysamUevVVRe5gVN31t9LwOmREmT61h6/BgGfEBsmq7AZVl2rwaX
e8VVkf8lJLanS4mAGvidKWo9e63cQJunjis5PttueOqn+oHIsFp6XURfJTMBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUTeTzJFeQe1RRctnOsTjwosUj3vowHwYDVR0j
BBgwFoAUbTVWUpzlWZ54Vl+y8mv1KF1XPZIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QzUzNzFGODNBMEY1QjBFOUE4QkUyQUMxRjU3OTU2RkVG
OUI4RDYwREQ0RUY1QUREOTIwMTY5NDQyMjk4NDkwLzAvNkQzNTU2NTI5Q0U1NTk5
RTc4NTY1RkIyRjI2QkY1Mjg1RDU3M0Q5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RDM1NTY1MjlDRTU1OTlFNzg1
NjVGQjJGMjZCRjUyODVENTczRDkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUM1MzcxRjgzQTBGNUIwRTlBOEJFMkFDMUY1Nzk1NkZFRjlCOEQ2MERE
NEVGNUFERDkyMDE2OTQ0MjI5ODQ5MC8wLzMxMzMzMjJlMzIzNTM1MmUzMDJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMzM2MzkzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoT/ADAN
BgkqhkiG9w0BAQsFAAOCAQEAv0u215woTckPciBWwWAXlIoP2ZyI26IwhnslyGMs
Hg+WN163DvrILgMCWjeWFfm2VumBDGHUvdx50iqvi0oScfFd3+dw/QtLF5CEjT7y
WKJC6BOciu1pLid3VOH/ahXrx5MCfYzHUSRKHYkjrIIynyv66kv0m8ySFva3BG+Q
sQJ6JznY1I3ackXWNhbQoJZY233jMZgmd0mhSjTNekFhY/nT8cXnBYVvTRxyBbgj
U6qrYNQdAZtAH8DnzLfKBPe1lKpjXb9qENNV/Xf8xONGQNEsE4l7Awijr14Cmcr+
s5uoU0oDLV0PsCAiT1uifCoR90SB5/P489thzybMci4/vg==
-----END CERTIFICATE-----
Generated at Fri Jun 28 02:14:09 2024 by rpki-client on console-fra.rpki-client.org