Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32342d3234203d3e2033323733.roa
File:                     36362e3233312e36342e302f32342d3234203d3e2033323733.roa (raw, json)
Hash identifier:          jfM2xfVKWaYhAjywtDsIIqqtDbBjOlNP0SwnhCREJBo=
Subject key identifier:   59:07:2C:FC:99:CE:C2:A7:59:B1:42:26:CA:39:89:2D:4A:14:C2:65
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       1F13648C5774FB73374C4154F488004F688379BD
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32342d3234203d3e2033323733.roa
Signing time:             Tue 05 Mar 2024 18:06:22 +0000
ROA not before:           Tue 05 Mar 2024 18:01:22 +0000
ROA not after:            Tue 04 Mar 2025 18:06:22 +0000
asID:                     3273
IP address blocks:        66.231.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 17:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:13:64:8c:57:74:fb:73:37:4c:41:54:f4:88:00:4f:68:83:79:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Mar  5 18:01:22 2024 GMT
            Not After : Mar  4 18:06:22 2025 GMT
        Subject: CN=59072CFC99CEC2A759B14226CA39892D4A14C265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:89:43:51:3c:c0:a5:45:22:9f:a2:5e:d1:
                    dd:27:e0:b0:95:33:4c:18:87:d3:f4:16:e2:22:25:
                    07:a1:b3:ad:f8:01:1c:7e:41:20:98:71:77:78:39:
                    d5:22:21:4e:57:52:c4:72:41:d7:80:33:1c:bb:c5:
                    32:b0:07:a5:f3:0d:6c:90:4e:53:96:13:8b:f9:b4:
                    2c:3a:0c:32:d9:92:b7:58:11:dd:29:42:41:34:6d:
                    e2:46:63:f2:2b:f5:42:33:15:57:d5:29:38:b6:9f:
                    22:e1:6c:c9:c1:08:46:c9:6a:f9:16:cb:60:1e:bb:
                    f9:dc:ec:ed:51:a7:ce:17:8d:eb:16:50:48:d8:29:
                    26:31:0f:60:ab:25:47:f1:5a:1f:51:6d:94:a1:7c:
                    ce:0e:06:b2:cf:51:67:35:87:08:b7:7c:63:5b:5a:
                    b3:3c:b8:a7:b9:1e:ab:a3:df:05:91:4d:94:60:27:
                    66:a2:bd:9b:97:20:de:31:28:41:2e:38:8d:11:e5:
                    cf:dd:1d:c0:bf:b0:70:23:db:a7:00:31:41:42:b8:
                    ba:ab:d4:c5:3a:96:4b:0e:25:47:6e:bc:13:22:5f:
                    c9:02:59:6b:d8:7d:9b:8a:56:99:e8:90:d0:1c:22:
                    96:ba:09:08:18:f1:38:74:ff:48:a8:22:83:81:95:
                    6a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:07:2C:FC:99:CE:C2:A7:59:B1:42:26:CA:39:89:2D:4A:14:C2:65
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32342d3234203d3e2033323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:96:4e:7d:08:39:6c:09:3e:4e:74:ee:5f:cd:be:64:e7:c5:
         9b:34:38:b8:4c:1a:1b:26:ef:97:3b:9f:82:15:a9:0d:62:c2:
         62:43:7d:2a:c2:57:c3:bf:79:f2:2f:43:91:6e:28:c8:06:81:
         9f:8f:b5:26:17:ad:85:11:bf:7c:1e:42:3d:78:e2:bb:e0:b3:
         23:b5:2f:b8:25:70:74:37:f5:c3:bd:50:c0:ab:15:6a:be:16:
         95:8e:43:ea:a7:1a:89:08:73:45:20:08:b9:84:98:df:8c:7b:
         26:11:0e:4f:eb:19:50:60:c0:28:6e:90:05:31:52:9a:a5:2f:
         e4:6b:09:29:48:05:f8:6e:3a:44:c9:20:ba:f9:3f:83:50:1c:
         00:03:3d:04:f1:40:45:62:b2:3f:5b:40:8b:5b:47:9f:c1:75:
         4a:5a:90:e6:c8:3b:02:32:00:a3:b1:93:ed:05:39:5f:49:f8:
         e0:3b:62:7c:eb:2c:73:84:04:bd:a8:b7:9a:99:f6:fd:da:41:
         d9:78:eb:b2:4d:5d:34:54:7d:58:99:32:ce:97:37:96:5b:b1:
         ad:94:3f:9c:e5:5f:ce:2f:ee:33:c7:fd:ca:c9:9d:a2:db:ab:
         5a:bf:cd:d4:c6:c0:a9:a0:11:17:d1:26:0f:c0:36:4a:fa:86:
         52:02:c1:51
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUHxNkjFd0+3M3TEFU9IgAT2iDeb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI5NjdGRjMxMDlFMEFBN0VFNUVDMUM2NDAzMDBENUEw
MEZGNDFCMDAeFw0yNDAzMDUxODAxMjJaFw0yNTAzMDQxODA2MjJaMDMxMTAvBgNV
BAMTKDU5MDcyQ0ZDOTlDRUMyQTc1OUIxNDIyNkNBMzk4OTJENEExNEMyNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyiYlDUTzApUUin6Je0d0n4LCV
M0wYh9P0FuIiJQehs634ARx+QSCYcXd4OdUiIU5XUsRyQdeAMxy7xTKwB6XzDWyQ
TlOWE4v5tCw6DDLZkrdYEd0pQkE0beJGY/Ir9UIzFVfVKTi2nyLhbMnBCEbJavkW
y2Aeu/nc7O1Rp84XjesWUEjYKSYxD2CrJUfxWh9RbZShfM4OBrLPUWc1hwi3fGNb
WrM8uKe5Hquj3wWRTZRgJ2aivZuXIN4xKEEuOI0R5c/dHcC/sHAj26cAMUFCuLqr
1MU6lksOJUduvBMiX8kCWWvYfZuKVpnokNAcIpa6CQgY8Th0/0ioIoOBlWprAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUWQcs/JnOwqdZsUImyjmJLUoUwmUwHwYDVR0j
BBgwFoAUwpZ/8xCeCqfuXsHGQDANWgD/QbAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQTEwNEQ3Nzc3QjAyOUVEQTc4MkRBQTZBNkY3NDM0RkRC
Nzc3Q0U2OEEwOTQ5Nzk3ODE0NjRFQzU5RkY4QTlBLzAvQzI5NjdGRjMxMDlFMEFB
N0VFNUVDMUM2NDAzMDBENUEwMEZGNDFCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjk2N0ZGMzEwOUUwQUE3RUU1
RUMxQzY0MDMwMEQ1QTAwRkY0MUIwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREExMDRENzc3N0IwMjlFREE3ODJEQUE2QTZGNzQzNEZEQjc3N0NFNjhB
MDk0OTc5NzgxNDY0RUM1OUZGOEE5QS8wLzM2MzYyZTMyMzMzMTJlMzYzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzIzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQudAMA0GCSqG
SIb3DQEBCwUAA4IBAQCzlk59CDlsCT5OdO5fzb5k58WbNDi4TBobJu+XO5+CFakN
YsJiQ30qwlfDv3nyL0ORbijIBoGfj7UmF62FEb98HkI9eOK74LMjtS+4JXB0N/XD
vVDAqxVqvhaVjkPqpxqJCHNFIAi5hJjfjHsmEQ5P6xlQYMAobpAFMVKapS/kawkp
SAX4bjpEySC6+T+DUBwAAz0E8UBFYrI/W0CLW0efwXVKWpDmyDsCMgCjsZPtBTlf
SfjgO2J86yxzhAS9qLeamfb92kHZeOuyTV00VH1YmTLOlzeWW7GtlD+c5V/OL+4z
x/3KyZ2i26tav83UxsCpoBEX0SYPwDZK+oZSAsFR
-----END CERTIFICATE-----
Generated at Wed Jul 10 20:21:59 2024 by rpki-client on console-ams.rpki-client.org