Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3136382e3139352e35362e302f32322d3234203d3e203132393536.roa
File:                     3136382e3139352e35362e302f32322d3234203d3e203132393536.roa (raw, json)
Hash identifier:          kVGEs+TMLljgA/jAS9R08Q9n14dlczCDAo7bwJ3zZ9w=
Subject key identifier:   6E:32:16:A2:64:FD:9C:B4:99:42:67:3D:B1:82:40:B2:7B:6A:C0:A9
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       0167FCBEBE8187AA2D9D1B8A40FDC8AAF90430CF
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3136382e3139352e35362e302f32322d3234203d3e203132393536.roa
Signing time:             Tue 05 Mar 2024 18:18:39 +0000
ROA not before:           Tue 05 Mar 2024 18:13:39 +0000
ROA not after:            Tue 04 Mar 2025 18:18:39 +0000
asID:                     12956
IP address blocks:        168.195.56.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 10:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:67:fc:be:be:81:87:aa:2d:9d:1b:8a:40:fd:c8:aa:f9:04:30:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Mar  5 18:13:39 2024 GMT
            Not After : Mar  4 18:18:39 2025 GMT
        Subject: CN=6E3216A264FD9CB49942673DB18240B27B6AC0A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:9c:00:bf:c0:50:8c:79:b5:d1:2b:f4:b9:
                    59:a1:4b:22:97:33:fe:b6:32:4e:61:a3:ed:2f:ad:
                    c5:e0:c6:52:90:a9:1b:19:ac:ed:da:08:32:c4:7d:
                    ce:97:2c:52:30:03:dc:cc:0c:e0:0a:d7:bd:2a:6f:
                    dc:91:f2:c0:b9:d1:3c:24:42:d2:45:69:bb:1b:9b:
                    74:57:1e:c7:c5:71:d4:ca:fa:61:65:4b:53:a7:ec:
                    c8:74:0b:d7:3a:41:81:ee:32:9f:f4:e5:f8:97:3f:
                    de:90:df:7a:47:62:6b:15:9d:e1:ca:89:ab:81:07:
                    32:08:49:29:d4:dc:4a:53:fe:95:d9:c4:a5:c7:8e:
                    88:d8:f9:4a:51:7b:49:f6:6d:d3:58:14:21:40:05:
                    fc:b7:3b:91:52:a3:4f:c6:5e:87:42:8f:45:60:52:
                    89:e9:bb:d4:1f:0e:dc:28:f8:07:3a:1e:a3:25:83:
                    14:c4:8a:8c:2b:8b:74:b1:6b:ca:fb:8c:0b:10:b2:
                    1f:01:36:ce:98:47:20:86:60:85:f3:76:79:55:6d:
                    5c:ea:ec:67:8d:11:30:dd:98:2a:4b:5d:69:b4:24:
                    23:e6:9e:45:d6:6e:0b:89:12:b8:df:e7:66:db:e3:
                    e8:3e:5e:f9:2a:51:f3:04:95:a9:39:cb:79:03:67:
                    e8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:32:16:A2:64:FD:9C:B4:99:42:67:3D:B1:82:40:B2:7B:6A:C0:A9
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3136382e3139352e35362e302f32322d3234203d3e203132393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:cd:3a:33:0d:3f:b3:65:d6:bf:ae:5f:20:1d:3c:cc:80:4f:
         0f:20:5c:5f:0a:39:63:b9:b3:12:0f:52:9c:99:1b:fe:79:b8:
         68:0e:31:29:d0:2a:c7:80:cf:60:60:04:4f:71:a7:d9:d7:ad:
         7f:b1:e7:f4:3d:9a:d9:fb:df:00:59:65:b3:ca:7b:69:0d:d2:
         49:53:0d:3d:b4:b1:db:e3:03:54:33:ac:6d:1c:46:39:39:a3:
         4e:27:9d:70:aa:54:91:8d:e0:78:69:7f:68:a2:56:96:4f:5b:
         d0:0f:b3:03:af:67:9d:75:0f:f8:6a:b6:76:c2:61:f9:f9:c9:
         ad:70:15:ad:15:f2:65:5a:3e:19:79:c1:78:8c:7e:a8:10:37:
         3a:95:c6:f5:b2:43:ed:94:fd:72:9d:76:4b:ba:dc:88:a8:8f:
         f6:c8:2e:ca:0f:b2:30:22:3a:2b:95:c7:bd:b8:29:13:8e:33:
         d4:6b:c4:45:27:d5:30:5a:d4:5a:83:11:1e:3f:3f:c0:5a:59:
         7b:5a:c9:d5:5f:4a:d7:70:fc:3d:74:9a:c6:ed:96:77:b4:0c:
         b3:1c:2a:0b:00:33:97:9d:42:76:90:01:34:fc:44:05:dd:43:
         90:18:1e:32:5b:75:75:8c:c2:b2:d4:9d:65:a0:c7:1f:62:1f:
         a8:7d:3a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----