Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e302f32352d3235203d3e20323634373430.roa
File:                     3137302e3233392e3138302e302f32352d3235203d3e20323634373430.roa (raw, json)
Hash identifier:          +vtiyfChxJhwGKNIsMYc3wwNQPvillkze5/ttYDG79Y=
Subject key identifier:   87:08:44:69:5C:9B:4E:48:B9:BE:C4:38:95:02:DD:85:A2:62:AD:05
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       78B379E06BC03A7CE55F627720107F8F5C4559E4
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e302f32352d3235203d3e20323634373430.roa
Signing time:             Fri 30 Aug 2024 13:30:01 +0000
ROA not before:           Fri 30 Aug 2024 13:25:01 +0000
ROA not after:            Fri 29 Aug 2025 13:30:01 +0000
asID:                     264740
IP address blocks:        170.239.180.0/25 maxlen: 25

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b3:79:e0:6b:c0:3a:7c:e5:5f:62:77:20:10:7f:8f:5c:45:59:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Aug 30 13:25:01 2024 GMT
            Not After : Aug 29 13:30:01 2025 GMT
        Subject: CN=870844695C9B4E48B9BEC4389502DD85A262AD05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:31:c2:1d:66:a1:e5:c1:10:4f:46:b3:12:db:
                    2f:cb:b6:c7:80:9c:a2:8c:e7:db:07:ab:e9:6d:78:
                    e4:06:06:33:dd:e3:2e:91:1c:e3:b7:90:c1:51:85:
                    29:c1:89:ee:8b:ed:7e:eb:1a:7c:67:b0:91:1f:fe:
                    46:fc:02:8a:25:0f:be:61:40:6a:95:99:2e:2b:7c:
                    94:cd:c4:2e:dd:25:c9:8b:a6:cf:1c:52:bd:35:db:
                    6e:c7:98:68:17:f0:e7:13:a2:97:4a:6d:2e:9b:7f:
                    3a:cd:fd:8b:a5:5a:5e:75:8b:97:d5:6c:df:aa:ba:
                    d1:2e:53:d7:c5:59:1b:b3:a4:d7:6c:90:0e:73:08:
                    7d:9a:76:f3:6c:5a:19:e2:b1:46:43:8b:3c:a6:e6:
                    23:7c:a8:7c:44:d0:4a:44:fe:e3:87:8e:07:0c:a9:
                    60:88:16:df:cd:4a:6b:12:43:b1:ea:5e:ee:7d:2c:
                    05:1c:fa:91:e5:d5:19:aa:97:2e:d7:cd:16:a1:70:
                    bd:bd:6e:28:88:f1:b4:23:e9:57:5e:54:1d:16:d8:
                    15:bb:d5:e5:6a:d8:54:94:9c:bd:e7:a3:2b:91:ab:
                    bb:fd:e8:32:d9:b3:9b:33:12:ea:60:e5:60:af:a3:
                    63:60:27:79:19:72:f1:4d:4f:b0:d6:21:d2:af:be:
                    e5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:08:44:69:5C:9B:4E:48:B9:BE:C4:38:95:02:DD:85:A2:62:AD:05
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e302f32352d3235203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.180.0/25

    Signature Algorithm: sha256WithRSAEncryption
         77:d4:b6:16:5e:6e:30:54:6b:6a:8b:55:c3:b0:af:47:9a:36:
         88:44:0c:91:af:20:d3:fb:4d:bc:b1:ea:d1:73:5b:4c:c0:a7:
         40:e4:cc:e4:48:7d:3d:f5:ad:40:ae:e1:e1:68:77:d5:05:c7:
         c8:67:20:0f:1d:17:ef:5e:e5:51:01:fb:e2:2f:25:c9:f4:98:
         fd:34:58:4c:7d:d5:42:49:35:2f:a3:05:ec:96:8b:6e:03:19:
         63:8b:73:79:4d:75:2b:47:23:49:c5:57:9f:7e:32:5b:82:ff:
         35:09:a9:99:84:c2:25:b7:8e:e4:db:af:0f:89:50:27:1f:93:
         16:90:58:bc:52:24:3c:22:4f:79:a0:6c:c5:b3:e7:f4:48:48:
         f9:eb:41:9a:ab:c3:33:f3:58:bb:1c:b2:9a:27:cb:80:53:17:
         e4:a7:aa:f1:7e:18:dc:6e:d8:b1:da:3a:a4:96:2f:09:77:bb:
         ec:11:3c:f3:58:f7:af:48:01:b7:68:71:d7:2d:53:8d:44:97:
         00:44:d2:9e:81:ac:4c:fc:73:f9:85:11:2d:0a:a4:3f:4a:40:
         5a:e7:df:88:2c:94:44:cf:4d:86:31:22:ae:7e:79:2c:d4:b6:
         a9:86:0d:f7:fe:be:2b:73:2c:9b:eb:36:fb:5f:65:ec:1a:e3:
         aa:95:9a:9b
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUeLN54GvAOnzlX2J3IBB/j1xFWeQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNGQzk0MjFFQkIzNzQ4NkNCMkQ4RkIxNzAyNTVBNzdD
MTNENjA5MTAeFw0yNDA4MzAxMzI1MDFaFw0yNTA4MjkxMzMwMDFaMDMxMTAvBgNV
BAMTKDg3MDg0NDY5NUM5QjRFNDhCOUJFQzQzODk1MDJERDg1QTI2MkFEMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMcIdZqHlwRBPRrMS2y/LtseA
nKKM59sHq+lteOQGBjPd4y6RHOO3kMFRhSnBie6L7X7rGnxnsJEf/kb8AoolD75h
QGqVmS4rfJTNxC7dJcmLps8cUr01227HmGgX8OcTopdKbS6bfzrN/YulWl51i5fV
bN+qutEuU9fFWRuzpNdskA5zCH2advNsWhnisUZDizym5iN8qHxE0EpE/uOHjgcM
qWCIFt/NSmsSQ7HqXu59LAUc+pHl1Rmqly7XzRahcL29biiI8bQj6VdeVB0W2BW7
1eVq2FSUnL3noyuRq7v96DLZs5szEupg5WCvo2NgJ3kZcvFNT7DWIdKvvuW9AgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUhwhEaVybTki5vsQ4lQLdhaJirQUwHwYDVR0j
BBgwFoAUY/yUIeuzdIbLLY+xcCVad8E9YJEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQUZDMTE0OUE2NEJCMzg0RkQxOTI4NzlGN0RDMTVBNzM1
QjU5QTA2ODIyQTJDNkVCODMzRThGQjZBNTVCMzg4LzAvNjNGQzk0MjFFQkIzNzQ4
NkNCMkQ4RkIxNzAyNTVBNzdDMTNENjA5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82M0ZDOTQyMUVCQjM3NDg2Q0Iy
RDhGQjE3MDI1NUE3N0MxM0Q2MDkxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUFGQzExNDlBNjRCQjM4NEZEMTkyODc5RjdEQzE1QTczNUI1OUEwNjgy
MkEyQzZFQjgzM0U4RkI2QTU1QjM4OC8wLzMxMzczMDJlMzIzMzM5MmUzMTM4MzAy
ZTMwMmYzMjM1MmQzMjM1MjAzZDNlMjAzMjM2MzQzNzM0MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQeq
77QAMA0GCSqGSIb3DQEBCwUAA4IBAQB31LYWXm4wVGtqi1XDsK9HmjaIRAyRryDT
+028serRc1tMwKdA5MzkSH099a1AruHhaHfVBcfIZyAPHRfvXuVRAfviLyXJ9Jj9
NFhMfdVCSTUvowXslotuAxlji3N5TXUrRyNJxVeffjJbgv81CamZhMIlt47k268P
iVAnH5MWkFi8UiQ8Ik95oGzFs+f0SEj560Gaq8Mz81i7HLKaJ8uAUxfkp6rxfhjc
btix2jqkli8Jd7vsETzzWPevSAG3aHHXLVONRJcARNKegaxM/HP5hREtCqQ/SkBa
59+ILJREz02GMSKufnks1Laphg33/r4rcyyb6zb7X2XsGuOqlZqb
-----END CERTIFICATE-----
Generated at Fri Sep 20 19:04:57 2024 by rpki-client on console-ams.rpki-client.org