Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132342e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e3132342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          sfSReYj2lodY91fGc/9k97NDQbnlTiJ+i2/Y30zHDQQ=
Subject key identifier:   AF:02:D7:37:E2:1C:AA:62:93:63:0F:D0:74:A8:60:5F:68:ED:1B:A9
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       2776A98EC7F0C80B678007842C424F731AC627CC
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132342e302f32342d3234203d3e20383334.roa
Signing time:             Thu 31 Jul 2025 11:10:00 +0000
ROA not before:           Thu 31 Jul 2025 11:05:00 +0000
ROA not after:            Thu 30 Jul 2026 11:10:00 +0000
asID:                     834
IP address blocks:        190.93.124.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 04 Aug 2025 11:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:76:a9:8e:c7:f0:c8:0b:67:80:07:84:2c:42:4f:73:1a:c6:27:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jul 31 11:05:00 2025 GMT
            Not After : Jul 30 11:10:00 2026 GMT
        Subject: CN=AF02D737E21CAA6293630FD074A8605F68ED1BA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:8f:99:bc:96:94:9c:e7:d7:22:44:7d:86:
                    09:6a:c1:60:e1:d5:5b:30:f9:dd:7b:68:2d:01:ae:
                    ab:86:42:3f:84:31:2a:41:21:eb:77:e9:0f:36:27:
                    df:8e:5c:8e:62:c1:a8:36:3c:1c:17:8a:1d:80:ee:
                    c5:08:cf:83:dd:f0:ed:b5:74:ed:69:2e:dd:d6:c4:
                    44:da:8b:7d:e3:68:ba:e0:d4:73:0a:8c:d4:54:5d:
                    21:4a:04:2a:46:6a:7f:72:a9:3a:5d:93:65:34:a1:
                    f0:38:aa:56:1d:b3:84:33:85:1e:7b:ff:72:47:87:
                    a3:cd:c4:9c:d6:3d:1e:15:cc:5f:ba:e9:f9:f3:26:
                    c6:25:47:ea:81:5d:64:9e:37:38:b3:0d:b0:15:f8:
                    d6:16:5e:09:bc:4a:2f:6b:ba:eb:61:34:98:3f:ac:
                    cb:b3:ca:63:d4:2d:26:ca:44:3c:00:44:c9:24:07:
                    fa:e0:9f:70:e3:9b:55:fe:1f:4f:a4:c6:60:36:57:
                    ef:b5:92:89:d3:68:fb:f8:ae:f3:88:24:3b:54:0b:
                    b4:a6:b7:b2:cd:cf:a0:28:c8:4d:9e:12:df:14:43:
                    fa:78:51:3c:45:38:02:e4:c6:bf:fa:48:1c:cf:dd:
                    0f:fd:cc:0f:fb:f6:a6:c5:41:88:1b:23:20:f8:31:
                    49:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:02:D7:37:E2:1C:AA:62:93:63:0F:D0:74:A8:60:5F:68:ED:1B:A9
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:6a:18:5c:f6:e8:b3:90:75:8a:7f:fb:75:92:71:b0:82:35:
         26:14:00:aa:07:4a:12:6f:d4:d7:d9:20:be:f9:81:58:8a:0f:
         a5:f6:d5:e7:9d:4c:25:f3:ad:0a:41:5e:ee:0c:12:5a:cd:1a:
         d1:0f:e6:d5:d9:13:e9:91:55:00:da:c4:3d:2d:62:35:1b:ef:
         ec:ff:ec:df:4d:91:fb:cc:d0:6a:99:2d:cf:48:11:ac:aa:16:
         82:24:a3:ed:ba:fb:84:10:26:71:ca:0c:51:21:63:a2:8d:2f:
         f3:e8:88:90:32:2c:a8:f5:53:1e:43:61:03:8c:80:5e:3b:87:
         00:a5:18:ac:ab:1e:9b:b2:f9:91:21:66:79:6b:4e:28:e3:0b:
         e9:da:37:13:a7:66:35:e2:24:08:f4:fb:1c:5f:9b:74:9d:d2:
         e1:f9:45:73:67:58:4e:8c:2b:8c:24:59:a0:9d:a4:11:cd:f4:
         c6:cd:3e:5f:32:f2:d0:d8:e2:ca:c4:5d:ec:25:27:01:4f:bf:
         2d:e2:bb:e2:26:e6:b2:75:14:69:11:0e:10:b8:82:f2:e4:2b:
         08:f4:52:39:57:61:04:e7:fb:eb:0c:fb:79:30:dd:45:ad:b6:
         ae:d2:43:5a:1f:85:1f:a0:b1:e4:f6:11:fd:f5:56:f4:01:cc:
         a3:db:50:a3
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUJ3apjsfwyAtngAeELEJPcxrGJ8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNTA3MzExMTA1MDBaFw0yNjA3MzAxMTEwMDBaMDMxMTAvBgNV
BAMTKEFGMDJENzM3RTIxQ0FBNjI5MzYzMEZEMDc0QTg2MDVGNjhFRDFCQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMI4+ZvJaUnOfXIkR9hglqwWDh
1Vsw+d17aC0BrquGQj+EMSpBIet36Q82J9+OXI5iwag2PBwXih2A7sUIz4Pd8O21
dO1pLt3WxETai33jaLrg1HMKjNRUXSFKBCpGan9yqTpdk2U0ofA4qlYds4QzhR57
/3JHh6PNxJzWPR4VzF+66fnzJsYlR+qBXWSeNzizDbAV+NYWXgm8Si9ruuthNJg/
rMuzymPULSbKRDwARMkkB/rgn3Djm1X+H0+kxmA2V++1konTaPv4rvOIJDtUC7Sm
t7LNz6AoyE2eEt8UQ/p4UTxFOALkxr/6SBzP3Q/9zA/79qbFQYgbIyD4MUmhAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUrwLXN+IcqmKTYw/QdKhgX2jtG6kwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzEzMjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvl18MA0GCSqG
SIb3DQEBCwUAA4IBAQAMahhc9uizkHWKf/t1knGwgjUmFACqB0oSb9TX2SC++YFY
ig+l9tXnnUwl860KQV7uDBJazRrRD+bV2RPpkVUA2sQ9LWI1G+/s/+zfTZH7zNBq
mS3PSBGsqhaCJKPtuvuEECZxygxRIWOijS/z6IiQMiyo9VMeQ2EDjIBeO4cApRis
qx6bsvmRIWZ5a04o4wvp2jcTp2Y14iQI9PscX5t0ndLh+UVzZ1hOjCuMJFmgnaQR
zfTGzT5fMvLQ2OLKxF3sJScBT78t4rviJuaydRRpEQ4QuILy5CsI9FI5V2EE5/vr
DPt5MN1Frbau0kNaH4UfoLHk9hH99Vb0Acyj21Cj
-----END CERTIFICATE-----
Generated at Mon Aug 11 02:08:05 2025 by rpki-client