Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38322e302f32332d3234203d3e203631353030.roa
File:                     3133382e3132312e38322e302f32332d3234203d3e203631353030.roa (raw, json)
Hash identifier:          yZClFypyzQD0xNVychuinQIJ/+fohumq7svHaJ93Bgw=
Subject key identifier:   41:88:F1:78:BC:26:A2:1B:9A:4E:25:04:E4:E2:38:78:82:8E:88:F1
Certificate issuer:       /CN=A7C599055F36D3C6330474B282FC543C5378F8BA
Certificate serial:       7DCC72F615A7DA5A1A244A5A54E31ABDF920B7BA
Authority key identifier: A7:C5:99:05:5F:36:D3:C6:33:04:74:B2:82:FC:54:3C:53:78:F8:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38322e302f32332d3234203d3e203631353030.roa
Signing time:             Tue 05 Mar 2024 17:58:03 +0000
ROA not before:           Tue 05 Mar 2024 17:53:03 +0000
ROA not after:            Tue 04 Mar 2025 17:58:03 +0000
asID:                     61500
IP address blocks:        138.121.82.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sat 26 Oct 2024 00:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:cc:72:f6:15:a7:da:5a:1a:24:4a:5a:54:e3:1a:bd:f9:20:b7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7C599055F36D3C6330474B282FC543C5378F8BA
        Validity
            Not Before: Mar  5 17:53:03 2024 GMT
            Not After : Mar  4 17:58:03 2025 GMT
        Subject: CN=4188F178BC26A21B9A4E2504E4E23878828E88F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:a8:2f:4f:8d:65:e0:78:03:c5:98:12:10:
                    d5:96:5b:cc:df:74:16:b7:78:6d:e4:02:d0:d2:0a:
                    75:12:6d:6c:b4:ce:a8:43:2b:85:89:c8:8e:7e:4f:
                    a4:7c:e4:61:c3:a6:a5:cc:d9:09:ee:0e:e9:0f:d4:
                    30:97:a2:aa:00:5f:64:3e:d5:06:a0:bb:ca:a8:2c:
                    3c:c2:01:cc:73:c3:db:d3:44:03:c8:0b:1f:52:27:
                    35:5d:38:0c:3a:42:f0:8d:ef:dd:30:17:cf:b7:c4:
                    d3:6f:18:f1:bf:39:6a:53:af:25:8a:27:be:39:03:
                    6c:6b:84:40:45:1b:d7:e3:1c:1a:e3:8e:f4:31:e9:
                    00:87:9a:04:23:cf:f8:47:b3:3f:fe:d6:39:da:bf:
                    ab:1f:25:72:ec:55:44:fd:aa:2e:c3:2a:47:51:78:
                    93:3c:67:2f:17:f3:89:60:59:5d:59:99:37:a4:a6:
                    ae:a7:ed:dd:8c:bd:cb:58:52:36:c5:9a:b1:89:be:
                    8b:a6:06:b6:4c:c7:7e:cd:35:53:1d:74:76:2e:75:
                    00:4c:86:97:aa:b3:f1:00:77:24:90:b9:7a:3e:ae:
                    ea:b0:b7:4f:d4:e0:e0:0c:0f:9e:6f:8f:7c:c6:e4:
                    44:8f:7e:ac:3a:47:3a:62:76:84:e9:56:cb:77:07:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:88:F1:78:BC:26:A2:1B:9A:4E:25:04:E4:E2:38:78:82:8E:88:F1
            X509v3 Authority Key Identifier:
                keyid:A7:C5:99:05:5F:36:D3:C6:33:04:74:B2:82:FC:54:3C:53:78:F8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/A7C599055F36D3C6330474B282FC543C5378F8BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38322e302f32332d3234203d3e203631353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:bd:bc:b6:3c:5e:7f:8f:ee:7c:5d:81:e8:91:a9:ae:b4:23:
         13:e8:57:4d:98:b2:18:37:25:b2:11:3f:e9:04:a5:89:05:c7:
         93:f7:71:2a:f8:19:cb:a2:c8:a0:d3:22:ad:dd:90:ce:99:23:
         50:e3:08:81:c5:72:01:2d:e0:79:45:40:ba:45:50:37:3d:37:
         4a:46:1f:67:29:23:fc:b7:80:ca:30:37:05:c4:7d:03:ce:d1:
         af:3d:41:c9:5d:87:2c:1b:98:0f:4f:68:3b:21:c4:2d:71:ae:
         b0:0c:64:ee:2d:d1:7a:cf:d2:a0:9e:aa:bb:7d:9c:a0:53:4b:
         04:68:92:97:c5:c8:bb:ef:40:94:0a:7d:31:7f:8a:b2:1a:4b:
         88:b7:31:0d:2b:6e:2d:3a:8a:a2:89:6b:a3:dd:5f:53:d4:a6:
         9f:ce:20:6d:c7:de:90:10:45:e3:3a:76:ea:37:b6:6c:86:04:
         4b:a1:b5:8b:d8:88:ef:e2:8f:25:bc:b1:51:b1:c5:92:06:39:
         05:be:8c:76:c1:5a:a1:66:31:ad:6e:49:39:fe:16:5c:02:d7:
         47:51:c8:e0:5a:09:23:fb:98:7d:d0:65:21:9c:cc:34:8b:8e:
         0f:04:cb:b8:b8:e0:ee:d5:50:43:58:e1:ff:32:2c:a8:f7:82:
         04:98:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 04:08:53 2024 by rpki-client on console-ams.rpki-client.org