Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138332e3132382f32352d3235203d3e20323634373430.roa
File:                     3137302e3233392e3138332e3132382f32352d3235203d3e20323634373430.roa (raw, json)
Hash identifier:          YSANHHNSkcG/qyNlTdBSoXWW8F8lv8CzMe7YMa5rdS4=
Subject key identifier:   4D:FF:16:6B:F8:FF:16:4A:5B:E2:D7:AD:B3:91:73:29:63:C6:26:27
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       68DC13028BBD811E111B754BEB79E4EB59C5EA1E
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138332e3132382f32352d3235203d3e20323634373430.roa
Signing time:             Fri 30 Aug 2024 13:30:00 +0000
ROA not before:           Fri 30 Aug 2024 13:25:00 +0000
ROA not after:            Fri 29 Aug 2025 13:30:00 +0000
asID:                     264740
IP address blocks:        170.239.183.128/25 maxlen: 25

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:dc:13:02:8b:bd:81:1e:11:1b:75:4b:eb:79:e4:eb:59:c5:ea:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Aug 30 13:25:00 2024 GMT
            Not After : Aug 29 13:30:00 2025 GMT
        Subject: CN=4DFF166BF8FF164A5BE2D7ADB391732963C62627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a1:56:8c:3f:d7:25:be:b3:88:a0:73:67:79:
                    1a:34:ce:8c:c4:bc:c3:0e:cd:41:e4:a2:12:d7:68:
                    a1:2b:5d:38:7d:b0:79:1f:ec:f6:3b:3e:1d:4d:a3:
                    9c:5a:8c:fa:59:1f:86:16:6a:53:d5:db:76:1e:06:
                    ea:30:b7:ce:30:ae:bd:7c:56:18:ae:0f:2e:09:48:
                    f2:2a:98:0d:4e:39:e7:49:14:15:a1:b8:3d:b2:74:
                    1e:af:bf:8a:5d:1f:97:ee:c6:9f:e6:ba:71:33:c9:
                    86:36:16:f6:bd:93:26:09:94:f9:01:7f:b0:e8:e8:
                    4f:6d:31:13:8a:a0:ce:2e:0a:dc:75:74:a6:28:28:
                    f5:74:1c:36:b9:5d:a6:2e:11:c4:ca:ce:b9:a1:de:
                    7b:f6:d1:fd:dd:0a:c6:d6:14:7f:fc:49:3a:e0:ff:
                    74:10:d8:b5:92:ed:fe:1c:6c:27:99:5c:e7:a9:df:
                    99:3d:0e:62:15:45:c8:23:65:36:d7:75:b8:41:3d:
                    16:33:14:ab:55:ca:e8:20:bc:b8:a1:8c:da:b2:1b:
                    f2:74:2d:38:53:ba:64:e9:36:24:e1:8a:57:8e:c6:
                    4f:ca:9c:25:c9:69:56:6e:c4:ff:3a:5a:15:2e:b7:
                    db:78:14:75:9e:04:fb:c2:b4:9c:d1:b6:3c:ca:82:
                    f5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FF:16:6B:F8:FF:16:4A:5B:E2:D7:AD:B3:91:73:29:63:C6:26:27
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138332e3132382f32352d3235203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.183.128/25

    Signature Algorithm: sha256WithRSAEncryption
         b5:9a:4a:39:20:47:4b:aa:1e:a5:af:53:8b:16:20:9a:62:4e:
         8b:35:1c:2d:aa:4d:1b:fa:9e:ea:a7:6a:b6:0a:90:ba:bf:e3:
         b0:24:54:64:84:a4:4e:bd:11:8b:ac:6d:40:47:0f:c8:f6:23:
         b7:7d:e1:99:7e:99:16:a3:82:65:d5:4e:79:45:f4:a7:b1:22:
         32:67:86:81:95:85:8e:0e:a4:ce:88:65:3c:5d:ec:89:bc:c6:
         4e:00:b9:ca:22:74:48:a0:82:b2:78:c1:86:3f:5a:e1:d7:94:
         64:04:ab:b1:54:63:86:23:80:ee:56:df:cd:1d:c3:3c:31:3a:
         49:0e:20:c6:dd:54:11:c9:f0:82:51:97:21:d6:5b:31:75:d4:
         0d:2b:c0:20:b9:b9:bd:8f:91:ea:db:d9:a2:02:0a:e1:00:f4:
         eb:cd:7a:1a:56:73:13:7b:02:0c:cc:5f:9d:53:ce:88:49:4c:
         d7:c4:1f:a4:25:74:6a:68:a0:b2:76:7b:50:f4:eb:eb:89:21:
         49:f5:a5:b6:84:53:75:e3:4f:c5:27:1c:66:cc:a4:0e:2d:ac:
         4c:79:bc:52:0c:c5:75:d5:c4:93:9f:bd:09:5f:09:63:90:cd:
         11:dc:d4:97:13:fe:00:c1:26:58:4c:72:0c:d3:95:75:53:e0:
         bb:1d:0b:1f
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUaNwTAou9gR4RG3VL63nk61nF6h4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNGQzk0MjFFQkIzNzQ4NkNCMkQ4RkIxNzAyNTVBNzdD
MTNENjA5MTAeFw0yNDA4MzAxMzI1MDBaFw0yNTA4MjkxMzMwMDBaMDMxMTAvBgNV
BAMTKDRERkYxNjZCRjhGRjE2NEE1QkUyRDdBREIzOTE3MzI5NjNDNjI2MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCloVaMP9clvrOIoHNneRo0zozE
vMMOzUHkohLXaKErXTh9sHkf7PY7Ph1No5xajPpZH4YWalPV23YeBuowt84wrr18
VhiuDy4JSPIqmA1OOedJFBWhuD2ydB6vv4pdH5fuxp/munEzyYY2Fva9kyYJlPkB
f7Do6E9tMROKoM4uCtx1dKYoKPV0HDa5XaYuEcTKzrmh3nv20f3dCsbWFH/8STrg
/3QQ2LWS7f4cbCeZXOep35k9DmIVRcgjZTbXdbhBPRYzFKtVyuggvLihjNqyG/J0
LThTumTpNiThileOxk/KnCXJaVZuxP86WhUut9t4FHWeBPvCtJzRtjzKgvW1AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUTf8Wa/j/Fkpb4tets5FzKWPGJicwHwYDVR0j
BBgwFoAUY/yUIeuzdIbLLY+xcCVad8E9YJEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQUZDMTE0OUE2NEJCMzg0RkQxOTI4NzlGN0RDMTVBNzM1
QjU5QTA2ODIyQTJDNkVCODMzRThGQjZBNTVCMzg4LzAvNjNGQzk0MjFFQkIzNzQ4
NkNCMkQ4RkIxNzAyNTVBNzdDMTNENjA5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82M0ZDOTQyMUVCQjM3NDg2Q0Iy
RDhGQjE3MDI1NUE3N0MxM0Q2MDkxLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUFGQzExNDlBNjRCQjM4NEZEMTkyODc5RjdEQzE1QTczNUI1OUEwNjgy
MkEyQzZFQjgzM0U4RkI2QTU1QjM4OC8wLzMxMzczMDJlMzIzMzM5MmUzMTM4MzMy
ZTMxMzIzODJmMzIzNTJkMzIzNTIwM2QzZTIwMzIzNjM0MzczNDMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAH
AwUHqu+3gDANBgkqhkiG9w0BAQsFAAOCAQEAtZpKOSBHS6oepa9TixYgmmJOizUc
LapNG/qe6qdqtgqQur/jsCRUZISkTr0Ri6xtQEcPyPYjt33hmX6ZFqOCZdVOeUX0
p7EiMmeGgZWFjg6kzohlPF3sibzGTgC5yiJ0SKCCsnjBhj9a4deUZASrsVRjhiOA
7lbfzR3DPDE6SQ4gxt1UEcnwglGXIdZbMXXUDSvAILm5vY+R6tvZogIK4QD06816
GlZzE3sCDMxfnVPOiElM18QfpCV0amigsnZ7UPTr64khSfWltoRTdeNPxSccZsyk
Di2sTHm8UgzFddXEk5+9CV8JY5DNEdzUlxP+AMEmWExyDNOVdVPgux0LHw==
-----END CERTIFICATE-----