Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134302e302f32322d3234203d3e20323633373932.roa
File:                     3137392e35312e3134302e302f32322d3234203d3e20323633373932.roa (raw, json)
Hash identifier:          Py6VRl44K5U40MH0w9H4TdL5Xpn5zc8a5Sb2XVzlrtk=
Subject key identifier:   CE:82:82:D8:39:74:DC:00:DB:23:E6:37:4B:DA:8C:A5:FB:7B:3D:8E
Certificate issuer:       /CN=3F3113B81AF3FD2448A47AEA0168935257B94663
Certificate serial:       13DFB975977CDD210D287744EE4A4E25338E1C11
Authority key identifier: 3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134302e302f32322d3234203d3e20323633373932.roa
Signing time:             Tue 04 Feb 2025 18:08:06 +0000
ROA not before:           Tue 04 Feb 2025 18:03:06 +0000
ROA not after:            Tue 03 Feb 2026 18:08:06 +0000
asID:                     263792
IP address blocks:        179.51.140.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Tue 18 Mar 2025 12:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:df:b9:75:97:7c:dd:21:0d:28:77:44:ee:4a:4e:25:33:8e:1c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F3113B81AF3FD2448A47AEA0168935257B94663
        Validity
            Not Before: Feb  4 18:03:06 2025 GMT
            Not After : Feb  3 18:08:06 2026 GMT
        Subject: CN=CE8282D83974DC00DB23E6374BDA8CA5FB7B3D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:22:33:b1:c6:6f:9e:b6:87:b7:47:16:9b:
                    da:64:97:46:1c:df:aa:48:76:01:08:9c:a0:89:ce:
                    95:db:a2:0e:de:02:21:d1:6f:00:fd:9f:25:32:cd:
                    31:16:67:69:3a:7a:20:f8:05:fa:3c:d4:11:ff:e2:
                    f4:6f:d3:9d:81:c5:2e:3b:6d:75:29:6e:45:3a:e1:
                    3b:c6:eb:4b:9b:ba:41:dd:b1:75:93:d4:db:53:af:
                    74:4d:b7:5e:b4:1f:ab:c8:40:bb:57:fe:d3:4e:3d:
                    13:84:4c:61:bc:b1:c2:5b:ef:a4:b8:d2:3d:91:c5:
                    3b:e1:70:f3:62:b3:07:70:da:1b:62:3b:29:17:51:
                    8a:0e:cb:ee:99:f5:39:5d:e6:83:ea:24:df:4c:14:
                    bc:1a:02:bd:cb:f3:2b:a5:20:44:23:24:e0:a7:ce:
                    15:83:72:53:a7:1b:b4:24:f2:2c:4f:da:cd:4b:3b:
                    c7:cb:32:ef:34:76:e3:8f:fb:e2:7b:84:9f:1f:d3:
                    52:28:10:9d:9a:d4:55:64:2a:96:f6:71:48:e6:3d:
                    50:c9:50:76:c1:4b:b6:cb:87:98:72:54:0f:19:bc:
                    36:c1:10:27:0c:7a:ec:54:c8:c0:9b:51:ed:1d:da:
                    3d:72:3a:93:5c:2d:88:bd:98:e6:26:3f:a3:64:8b:
                    5c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:82:82:D8:39:74:DC:00:DB:23:E6:37:4B:DA:8C:A5:FB:7B:3D:8E
            X509v3 Authority Key Identifier:
                keyid:3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134302e302f32322d3234203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:93:fc:bc:ea:bd:5c:9c:be:29:41:40:74:e6:22:52:d5:82:
         fe:96:62:32:4f:62:8c:4f:6f:4a:b0:e4:07:5c:5c:90:2e:6a:
         73:c2:95:5f:37:fa:c5:ec:5a:08:77:9c:30:08:26:52:9b:ce:
         8e:d0:fe:04:f8:52:df:a1:af:9e:11:dc:0f:eb:12:28:4b:32:
         fa:48:6a:55:b6:95:6a:98:48:ce:78:a6:01:ae:bf:ef:5d:4b:
         9d:43:6c:dd:7c:b6:79:85:1d:59:57:72:7e:d3:78:c5:e3:30:
         84:a0:e3:1f:2d:53:c7:fd:ba:30:01:46:fe:2a:e2:65:e0:e3:
         62:77:f7:6b:3c:f7:95:82:6c:0d:ef:f6:6d:6f:bf:2b:0c:5e:
         42:fb:b2:eb:47:65:92:94:5c:08:09:dc:03:af:05:8d:26:a9:
         94:d8:7d:82:e8:9d:90:a6:d5:b2:83:e7:ad:6e:02:ac:d9:0a:
         be:95:c7:17:1b:69:c0:cc:d2:84:8b:3c:d1:4a:f7:ee:92:94:
         e8:fc:03:dd:fa:19:9a:39:02:c2:22:f2:8c:89:99:30:65:4a:
         ad:6f:23:62:9b:0b:1f:21:5c:74:1c:43:fc:34:3d:22:b0:98:
         75:49:68:5f:2e:79:34:c5:74:81:88:22:47:0e:87:a0:f6:05:
         2d:ca:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:11:40 2025 by rpki-client