Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35352e302f32342d3234203d3e20323634363638.roa
File:                     3137392e36302e35352e302f32342d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          gWHhRMrL3FansWApVOxaJLN072a5FHszS1FQMNMAMoc=
Subject key identifier:   EA:0E:C7:A4:89:FF:DB:70:73:5D:82:80:CB:3E:BC:00:0B:30:E2:04
Certificate issuer:       /CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
Certificate serial:       5CFEEEF5A71762F5D2C3A8B572715095D5D5DC44
Authority key identifier: 08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35352e302f32342d3234203d3e20323634363638.roa
Signing time:             Fri 07 Feb 2025 20:55:00 +0000
ROA not before:           Fri 07 Feb 2025 20:50:00 +0000
ROA not after:            Fri 06 Feb 2026 20:55:00 +0000
asID:                     264668
IP address blocks:        179.60.55.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 08 Feb 2025 14:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:fe:ee:f5:a7:17:62:f5:d2:c3:a8:b5:72:71:50:95:d5:d5:dc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
        Validity
            Not Before: Feb  7 20:50:00 2025 GMT
            Not After : Feb  6 20:55:00 2026 GMT
        Subject: CN=EA0EC7A489FFDB70735D8280CB3EBC000B30E204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:84:b7:fc:5f:41:24:b3:e6:ba:68:3b:24:
                    ee:a4:d9:f7:09:2b:c1:f6:2c:cc:94:a2:d7:4b:de:
                    15:ff:d1:ba:4f:f9:b2:42:1a:61:64:af:46:e5:ef:
                    de:94:f0:81:85:39:76:f9:a9:05:de:de:6e:67:15:
                    2e:b3:af:b9:7c:d1:47:ea:86:b1:d1:4c:ad:73:f8:
                    b4:d4:92:b2:33:49:c1:ee:53:cb:8e:2c:4d:c2:2d:
                    d8:6c:08:33:01:f9:3f:c2:90:90:0b:3c:53:f4:61:
                    db:58:89:e0:ee:d0:48:d9:8c:8b:de:2b:c7:4d:7c:
                    93:7f:64:d7:ee:25:ff:f4:c5:97:49:49:17:a7:96:
                    05:33:95:08:ea:3b:8f:bf:fa:16:f8:24:48:2a:d1:
                    ab:2e:df:73:ab:c2:43:d7:b0:76:a0:f7:b9:1d:cb:
                    ff:a1:6d:68:25:7a:a2:82:35:d0:14:f2:08:fb:f5:
                    e9:73:bd:31:0e:e4:0a:9f:fc:03:67:a9:72:d1:87:
                    5c:70:c9:0b:97:db:f0:2f:a5:88:13:37:ec:40:53:
                    2d:a2:00:2f:e9:33:3d:12:00:de:85:5b:5a:36:9d:
                    95:f6:2c:17:1c:11:61:f0:34:2f:03:8c:0d:32:df:
                    22:60:bb:02:a3:84:38:c3:8a:94:21:2b:41:54:25:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0E:C7:A4:89:FF:DB:70:73:5D:82:80:CB:3E:BC:00:0B:30:E2:04
            X509v3 Authority Key Identifier:
                keyid:08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35352e302f32342d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:83:df:87:90:18:08:4a:28:d1:ab:c5:6d:3e:fe:85:1f:3e:
         77:6f:68:c5:a8:2a:2a:1f:69:76:77:d4:9f:60:a6:da:3a:90:
         c9:d0:50:5f:da:12:65:90:98:2c:e9:5a:0b:25:b7:f2:24:56:
         68:fd:5e:72:c1:0b:b0:71:99:d1:33:4c:c2:9f:f4:63:b7:aa:
         02:d7:11:79:8a:5b:e8:08:7b:e8:c4:ea:14:67:24:07:9a:a0:
         7a:ab:e4:7e:77:4b:11:db:e1:17:f3:9f:af:19:7a:03:09:08:
         92:a1:c2:fe:2b:63:a3:2a:fb:32:86:6b:4c:5f:9a:54:c5:bc:
         85:7c:c7:85:f5:d7:7c:ff:06:02:34:b6:30:81:d6:ba:c7:b1:
         b6:99:ba:f8:9d:c9:0d:68:f9:9f:59:cd:75:a4:90:1f:63:4c:
         18:6a:80:a4:b9:30:ae:25:32:3c:ae:4a:2b:87:4b:7d:00:68:
         73:1a:45:45:97:42:cc:28:ef:2b:c8:2b:17:6a:42:87:29:b6:
         e7:e6:a8:59:d7:52:d5:f7:7d:cb:e4:e8:87:91:03:d2:c2:8b:
         b2:7c:e7:dc:8f:bd:4c:56:f3:21:fd:9b:7b:7b:4d:77:d0:3e:
         69:d0:70:35:69:27:4e:2e:34:8e:02:2f:db:0a:8d:ff:68:ef:
         7e:cd:c6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:35 2025 by rpki-client