Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138332e302f32352d3235203d3e20323634373430.roa
File:                     3137302e3233392e3138332e302f32352d3235203d3e20323634373430.roa (raw, json)
Hash identifier:          PqftEW0c8Q+XuolgxqaMki2U1KhW+i896kt/nud0TPI=
Subject key identifier:   25:9B:3C:81:13:6D:E5:0F:4B:62:56:08:CC:84:C6:E8:BE:3F:62:83
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       316A4B8BABAABE2F550A81FCA5A6393A7373BD47
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138332e302f32352d3235203d3e20323634373430.roa
Signing time:             Fri 30 Aug 2024 13:30:02 +0000
ROA not before:           Fri 30 Aug 2024 13:25:02 +0000
ROA not after:            Fri 29 Aug 2025 13:30:02 +0000
asID:                     264740
IP address blocks:        170.239.183.0/25 maxlen: 25

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6a:4b:8b:ab:aa:be:2f:55:0a:81:fc:a5:a6:39:3a:73:73:bd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Aug 30 13:25:02 2024 GMT
            Not After : Aug 29 13:30:02 2025 GMT
        Subject: CN=259B3C81136DE50F4B625608CC84C6E8BE3F6283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:17:7b:4b:82:9a:5b:4d:7c:0f:c7:76:c8:6b:
                    ed:6a:47:74:02:1f:de:dc:31:09:b4:84:38:23:e0:
                    57:d2:ad:33:46:e6:04:36:6a:ab:8d:a6:21:17:92:
                    c8:b8:cf:73:20:9b:ee:5e:97:73:15:11:39:c9:b2:
                    08:dc:73:a0:60:f1:61:f3:fc:5f:ff:91:b8:1b:91:
                    2e:a0:20:ee:c8:96:79:a7:27:8c:a8:02:19:f0:57:
                    46:47:a5:23:b6:59:9b:12:9c:85:dc:1e:07:3e:f9:
                    f9:20:41:79:7c:94:91:32:37:ee:c8:d2:b3:36:3c:
                    e4:3c:86:91:2f:cf:83:75:91:95:06:c3:20:c8:f3:
                    95:65:d9:37:65:25:97:42:26:17:08:ef:2b:94:f7:
                    c2:93:63:6c:a0:f1:6e:5d:76:25:db:41:6f:38:26:
                    e7:7b:88:40:b3:4c:60:38:03:51:7b:64:dc:2a:48:
                    8e:a3:94:4e:ba:3e:39:ef:fe:5c:48:de:5d:49:5c:
                    e2:89:e5:c8:26:45:67:18:39:ee:77:e8:20:b9:26:
                    7b:fe:e8:62:55:18:3a:c2:98:4f:6a:f2:5a:c5:06:
                    59:05:99:dd:eb:31:2e:da:9e:f2:e1:34:ea:f3:84:
                    15:f0:a4:72:11:c1:99:e1:9b:0c:45:46:57:46:e1:
                    3d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9B:3C:81:13:6D:E5:0F:4B:62:56:08:CC:84:C6:E8:BE:3F:62:83
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138332e302f32352d3235203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.183.0/25

    Signature Algorithm: sha256WithRSAEncryption
         2e:40:71:11:9d:35:de:12:d7:00:4c:35:b3:db:b9:61:86:62:
         05:07:3b:eb:38:56:33:20:4c:3e:cd:05:d0:9f:ef:8f:ad:d4:
         80:17:c8:f9:1f:e5:46:6c:7d:eb:6f:9a:af:09:b3:d3:e7:77:
         62:06:6e:e3:1a:48:ed:f9:e8:f0:10:a7:4e:31:54:b1:14:f8:
         ce:e8:cf:8c:90:6f:90:00:5b:7b:5b:25:29:1d:9d:5f:d8:51:
         9e:ed:ec:33:0e:7b:c1:95:a1:fd:33:5b:51:9c:c5:e4:f0:74:
         46:8f:08:63:75:38:1c:18:68:f3:8c:bc:05:ac:09:bd:80:91:
         50:1d:aa:68:69:11:ac:b1:5e:50:2e:ef:73:3d:27:2d:4f:68:
         47:02:5d:64:ec:d6:e4:3c:b4:d2:8a:05:84:8e:9d:54:10:93:
         0e:27:b2:71:3a:d0:3f:c4:48:5e:43:ce:cb:96:78:f9:1c:7d:
         68:d0:cc:1b:1e:8a:8b:d8:86:52:90:54:45:7b:e9:77:f7:aa:
         9a:32:cb:b6:25:db:f5:77:4c:76:53:89:73:37:b0:37:e7:ce:
         00:ca:0c:95:aa:5c:10:c0:59:d1:8c:85:10:75:ec:89:54:b7:
         6e:b8:81:d8:8f:b1:ce:f7:e8:de:a9:6d:77:f6:10:b0:08:75:
         97:c9:18:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----