Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0F288FE2D53A9C5DED4B2B22BA6363F98330063CDBE4E887469C592D2932D8F/0/3137302e37382e3131342e302f32342d3234203d3e20323636373736.roa
File:                     3137302e37382e3131342e302f32342d3234203d3e20323636373736.roa (raw, json)
Hash identifier:          BGq1LK+yYtsTu3e8fydJl7iQT/EHmwVjWnvAqWj/Ax4=
Subject key identifier:   D1:2A:64:A9:A9:F4:8B:3C:CE:EA:5E:95:E1:C4:BA:98:8B:E2:A3:B7
Certificate issuer:       /CN=F6AC6286FF6357F056651F16EECA488E32411C7A
Certificate serial:       0554F8A16096652EE9EEE2D9AC66A94ABBE36202
Authority key identifier: F6:AC:62:86:FF:63:57:F0:56:65:1F:16:EE:CA:48:8E:32:41:1C:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6AC6286FF6357F056651F16EECA488E32411C7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0F288FE2D53A9C5DED4B2B22BA6363F98330063CDBE4E887469C592D2932D8F/0/3137302e37382e3131342e302f32342d3234203d3e20323636373736.roa
Signing time:             Tue 05 Mar 2024 17:58:09 +0000
ROA not before:           Tue 05 Mar 2024 17:53:09 +0000
ROA not after:            Tue 04 Mar 2025 17:58:09 +0000
asID:                     266776
IP address blocks:        170.78.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 14:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:54:f8:a1:60:96:65:2e:e9:ee:e2:d9:ac:66:a9:4a:bb:e3:62:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6AC6286FF6357F056651F16EECA488E32411C7A
        Validity
            Not Before: Mar  5 17:53:09 2024 GMT
            Not After : Mar  4 17:58:09 2025 GMT
        Subject: CN=D12A64A9A9F48B3CCEEA5E95E1C4BA988BE2A3B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:a2:63:96:cc:37:77:ad:ad:d6:70:a1:99:
                    60:29:29:4c:75:64:f1:5e:bb:4e:35:b5:1c:8d:f5:
                    ab:bd:12:7a:fe:14:bc:2f:0f:e5:ca:68:55:74:36:
                    37:0e:b9:fb:da:03:86:c6:36:ab:14:ba:0d:87:b6:
                    5b:ca:62:32:5e:bf:4b:96:fe:3a:8b:2a:f9:ea:62:
                    c4:16:57:a7:75:0a:db:78:84:22:d0:f4:7f:b3:be:
                    93:ff:9f:80:45:7e:0c:56:7d:c6:34:89:04:4c:7c:
                    fe:19:58:3b:16:17:fa:09:8b:d4:2b:54:f5:db:db:
                    d5:91:c3:f7:5f:5f:d7:92:55:5a:d3:74:86:dd:93:
                    be:20:3c:76:a2:58:51:fb:89:3a:36:0e:72:7c:85:
                    c7:45:79:39:40:36:d5:a2:9e:84:00:ea:7e:5b:22:
                    ba:3b:86:1d:8f:c3:cb:b2:39:78:93:b8:98:bc:f9:
                    f4:95:2d:25:7e:2b:bb:e9:bb:90:13:fb:88:a6:d8:
                    80:38:07:b1:04:02:6d:97:18:97:10:af:ea:67:1f:
                    b2:41:fb:3e:9e:b7:3c:eb:93:ac:54:72:81:75:00:
                    2a:68:7f:bf:4c:65:2b:c8:a0:24:56:f3:8e:36:32:
                    5e:41:df:33:ec:9d:ac:cb:48:bf:1e:f4:57:02:b1:
                    82:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2A:64:A9:A9:F4:8B:3C:CE:EA:5E:95:E1:C4:BA:98:8B:E2:A3:B7
            X509v3 Authority Key Identifier:
                keyid:F6:AC:62:86:FF:63:57:F0:56:65:1F:16:EE:CA:48:8E:32:41:1C:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0F288FE2D53A9C5DED4B2B22BA6363F98330063CDBE4E887469C592D2932D8F/0/F6AC6286FF6357F056651F16EECA488E32411C7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6AC6286FF6357F056651F16EECA488E32411C7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0F288FE2D53A9C5DED4B2B22BA6363F98330063CDBE4E887469C592D2932D8F/0/3137302e37382e3131342e302f32342d3234203d3e20323636373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:6e:35:1b:b5:b2:f2:0b:4f:64:bb:62:97:33:8a:87:56:34:
         24:ce:46:18:42:d4:48:38:62:d5:59:bb:37:27:39:67:8d:e7:
         08:56:48:00:10:8c:41:93:3c:09:dc:8d:d2:06:24:30:6d:9c:
         7f:be:01:da:ed:b5:03:84:91:1c:be:47:34:d4:9e:2b:87:bc:
         33:f7:c6:a7:eb:ad:6f:fd:ec:dc:0a:30:1c:f5:0d:2c:e3:fb:
         be:1e:36:ac:d6:1e:a5:f0:bd:20:30:e3:c6:2f:f1:ab:66:9c:
         ff:f2:3b:25:4c:e4:27:64:72:c6:38:27:bb:19:e1:cb:ef:55:
         fb:84:c5:66:5f:79:77:e4:d2:ce:f1:c0:24:c7:dc:1b:84:bb:
         87:93:67:13:22:4b:7c:bd:d7:6b:68:0a:7b:b6:d9:0a:37:78:
         0f:28:4d:54:fa:89:c1:0d:b1:96:56:bb:8a:97:db:03:7c:37:
         5a:66:48:3b:6a:70:17:d1:1a:ce:5a:27:5e:59:0e:a1:44:7b:
         0b:36:31:52:d4:c3:50:78:ee:1b:76:02:94:3c:ad:d6:73:89:
         4c:89:ba:09:cd:35:79:fd:44:f7:9c:ac:d9:c3:41:b7:fe:62:
         42:7c:db:54:be:a2:84:f8:18:28:89:b2:4e:c0:9e:17:9d:3b:
         c1:fc:52:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org