Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/aee28079ac63a8daa542ce99e31f2aa2fceeb13b.roa
File:                     aee28079ac63a8daa542ce99e31f2aa2fceeb13b.roa (raw, json)
Hash identifier:          18PWIvZ+sAFk3MPXC/eC/HrDip22bw/IG2F3GJVfHVg=
Subject key identifier:   ED:9C:3C:34:A8:52:8F:4F:4C:D9:4D:B3:B5:39:AD:43:3C:76:53:47
Certificate issuer:       /CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
Certificate serial:       0E04BB
Authority key identifier: 66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/aee28079ac63a8daa542ce99e31f2aa2fceeb13b.roa
Signing time:             Wed 24 Mar 2021 14:42:17 +0000
ROA not before:           Wed 24 Mar 2021 14:42:17 +0000
ROA not after:            Tue 24 Mar 2026 14:42:17 +0000
asID:                     264812
IP address blocks:        181.189.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 21:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918715 (0xe04bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
        Validity
            Not Before: Mar 24 14:42:17 2021 GMT
            Not After : Mar 24 14:42:17 2026 GMT
        Subject: CN=aee28079ac63a8daa542ce99e31f2aa2fceeb13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:67:6b:c6:1d:b9:d1:02:cb:ad:bd:ed:0f:2a:
                    7d:93:e0:fc:4d:c3:5a:ae:39:1c:e4:34:89:8f:8d:
                    b2:cf:ed:2a:c6:93:e5:f1:b5:69:39:c4:73:07:18:
                    60:42:99:ea:ff:5c:ea:22:16:85:50:21:b2:f1:81:
                    f6:af:49:a6:32:34:5f:81:92:a3:1b:42:e5:03:43:
                    d9:1e:87:cb:48:9d:6f:f2:89:db:cc:4a:8c:1d:f1:
                    37:0d:80:f0:89:b9:e5:64:b1:85:bb:1e:6d:45:f4:
                    46:29:49:81:6f:d7:33:02:8d:4d:41:a5:01:78:2d:
                    7b:10:8e:eb:0d:12:b4:29:d7:67:3d:c2:74:1f:e0:
                    56:4e:37:a2:10:d9:2b:3b:cb:79:28:9b:3f:e7:e4:
                    90:78:c3:0d:64:fd:2d:1b:2f:81:5f:01:05:f7:b6:
                    17:d6:b2:d0:fa:1b:31:d4:30:48:8a:54:33:04:57:
                    c4:d9:a5:89:78:b5:91:0e:e7:82:bf:6a:a6:09:00:
                    f6:82:93:73:c1:19:fa:23:4b:a9:ee:57:ba:68:ab:
                    d8:6f:49:00:ff:be:b0:78:32:0f:f5:82:ba:20:cf:
                    a1:55:ba:48:de:05:2f:e6:d2:2d:d7:d1:bc:2b:74:
                    1b:a5:ff:f6:3f:7b:bf:6a:48:3a:e3:e8:eb:32:27:
                    89:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9C:3C:34:A8:52:8F:4F:4C:D9:4D:B3:B5:39:AD:43:3C:76:53:47
            X509v3 Authority Key Identifier:
                keyid:66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/aee28079ac63a8daa542ce99e31f2aa2fceeb13b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/95f676acfc94ecb8278d82cca69a83a7b785bd05.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:bf:04:ce:2b:59:4a:41:80:e1:c2:4c:e3:a7:53:32:4f:a5:
         cc:73:1a:ff:46:bc:85:d1:71:ba:cb:ce:af:91:c2:ac:0c:66:
         61:4d:25:e2:35:41:88:d2:6d:33:01:4a:f7:74:5e:6c:59:0e:
         c8:60:ce:7a:d1:8b:10:a2:08:3a:19:2a:32:59:b5:7a:36:7c:
         be:bc:0f:e7:ea:8b:7a:50:fc:95:0d:b2:06:18:1a:56:ed:c9:
         e3:9e:c0:9e:6e:5c:44:ed:48:a0:56:52:94:f8:7d:0f:49:79:
         94:44:fe:e7:42:7f:6c:a4:14:16:55:b7:58:79:b3:d0:57:c4:
         78:f9:3f:d4:d3:b0:cb:64:ca:3d:c7:79:61:c9:ef:19:46:69:
         a2:02:7f:61:13:d1:e5:05:ca:10:6f:f0:c8:34:a9:cc:05:97:
         9f:03:5a:64:e6:ef:16:a5:fc:de:bb:0d:85:09:9e:52:2f:4f:
         b3:f1:f1:c0:7a:92:2a:28:91:39:5a:1b:76:7d:4e:4b:4e:a0:
         38:8f:5a:e7:2d:6e:81:63:de:71:67:ae:ea:3f:ed:07:fc:64:
         31:81:b9:91:72:15:28:ee:4c:0b:2a:d3:6b:0e:67:44:78:96:
         64:55:22:c1:80:bc:a5:90:92:79:c1:39:ce:11:3a:50:35:e0:
         c2:20:65:d9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDgS7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk1
ZjY3NmFjZmM5NGVjYjgyNzhkODJjY2E2OWE4M2E3Yjc4NWJkMDUwHhcNMjEwMzI0
MTQ0MjE3WhcNMjYwMzI0MTQ0MjE3WjAzMTEwLwYDVQQDEyhhZWUyODA3OWFjNjNh
OGRhYTU0MmNlOTllMzFmMmFhMmZjZWViMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgWdrxh250QLLrb3tDyp9k+D8TcNarjkc5DSJj42yz+0qxpPl
8bVpOcRzBxhgQpnq/1zqIhaFUCGy8YH2r0mmMjRfgZKjG0LlA0PZHofLSJ1v8onb
zEqMHfE3DYDwibnlZLGFux5tRfRGKUmBb9czAo1NQaUBeC17EI7rDRK0KddnPcJ0
H+BWTjeiENkrO8t5KJs/5+SQeMMNZP0tGy+BXwEF97YX1rLQ+hsx1DBIilQzBFfE
2aWJeLWRDueCv2qmCQD2gpNzwRn6I0up7le6aKvYb0kA/76weDIP9YK6IM+hVbpI
3gUv5tIt19G8K3Qbpf/2P3u/akg64+jrMieJ2wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFO2cPDSoUo9PTNlNs7U5rUM8dlNHMB8GA1UdIwQYMBaAFGZ5bnmgBXMzCEbS
4yGydSTMf/quMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTVmNjc2
YWNmYzk0ZWNiODI3OGQ4MmNjYTY5YTgzYTdiNzg1YmQwNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWYyNTkyZGEtODE3My00MGRmLWE3OWEtZTkwNzVm
NzY5ZTcyL2FlZTI4MDc5YWM2M2E4ZGFhNTQyY2U5OWUzMWYyYWEyZmNlZWIxM2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjI1OTJkYS04MTczLTQwZGYtYTc5YS1lOTA3
NWY3NjllNzIvOTVmNjc2YWNmYzk0ZWNiODI3OGQ4MmNjYTY5YTgzYTdiNzg1YmQw
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALW94jANBgkqhkiG9w0BAQsFAAOCAQEAfr8EzitZSkGA4cJM
46dTMk+lzHMa/0a8hdFxusvOr5HCrAxmYU0l4jVBiNJtMwFK93RebFkOyGDOetGL
EKIIOhkqMlm1ejZ8vrwP5+qLelD8lQ2yBhgaVu3J457Anm5cRO1IoFZSlPh9D0l5
lET+50J/bKQUFlW3WHmz0FfEePk/1NOwy2TKPcd5YcnvGUZpogJ/YRPR5QXKEG/w
yDSpzAWXnwNaZObvFqX83rsNhQmeUi9Ps/HxwHqSKiiROVobdn1OS06gOI9a5y1u
gWPecWeu6j/tB/xkMYG5kXIVKO5MCyrTaw5nRHiWZFUiwYC8pZCSecE5zhE6UDXg
wiBl2Q==
-----END CERTIFICATE-----
Generated at Thu Feb 1 00:36:23 2024 by rpki-client on console-ams.rpki-client.org