Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3134342e302f32302d3230203d3e203138373437.roa
File:                     3136382e3137362e3134342e302f32302d3230203d3e203138373437.roa (raw, json)
Hash identifier:          KFD8kYs2Jkdvw2mupT2alenULpuzK+Sr2IM3Go2JNHE=
Subject key identifier:   75:9D:21:D2:A4:16:88:E9:37:2A:53:13:86:F3:1D:F9:49:39:28:0B
Certificate issuer:       /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial:       3272812FF9B7D96EABEB3E6161FD850A24CDEE2B
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3134342e302f32302d3230203d3e203138373437.roa
Signing time:             Mon 21 Sep 2026 13:05:03 +0000
ROA not before:           Mon 21 Sep 2026 13:00:03 +0000
ROA not after:            Mon 20 Sep 2027 13:05:03 +0000
asID:                     18747
IP address blocks:        168.176.144.0/20 maxlen: 20
Validation:               Failed, certificate revoked on Thu 24 Sep 2026 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:72:81:2f:f9:b7:d9:6e:ab:eb:3e:61:61:fd:85:0a:24:cd:ee:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
        Validity
            Not Before: Sep 21 13:00:03 2026 GMT
            Not After : Sep 20 13:05:03 2027 GMT
        Subject: CN=759D21D2A41688E9372A531386F31DF94939280B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:f0:92:06:04:a0:00:7c:39:8a:a3:4e:c9:
                    00:92:5d:9b:bf:40:31:9d:23:dc:6e:4b:b9:d2:8d:
                    07:9a:c4:e6:55:47:57:22:48:91:28:cd:81:0e:1c:
                    14:5b:77:be:9f:c6:11:8b:8f:1c:01:49:9b:c0:bb:
                    0d:fc:a9:28:ad:60:b9:62:78:0b:f3:3f:d8:95:46:
                    0f:22:bb:df:98:73:d1:20:ad:12:74:75:21:2a:e1:
                    4a:45:9e:1a:7b:fa:81:4e:09:99:0a:fa:21:bb:20:
                    54:b3:7b:83:c8:f3:43:08:30:f8:dc:97:61:49:c7:
                    02:6a:91:bd:fd:a6:9c:ab:20:2b:d2:87:1a:0a:c1:
                    18:16:fe:78:9d:a5:4d:9e:bc:ff:58:76:c4:f7:3a:
                    4e:81:6b:ca:7e:c1:ed:a2:3e:bf:64:56:c9:64:91:
                    bc:d3:6d:e8:34:e9:3c:0f:3c:55:d5:2e:2a:4f:26:
                    4b:51:07:22:5f:ad:3e:cf:15:2d:3e:73:33:3a:90:
                    3b:75:a4:7b:33:c4:b0:2e:98:99:98:9d:62:54:9e:
                    6e:55:2f:bd:91:e1:c6:dc:11:92:d8:43:4a:11:49:
                    b7:3d:6f:75:85:03:65:ce:e5:8d:dc:e2:46:59:b3:
                    fb:ec:cc:84:c4:0b:da:6d:47:22:37:8d:57:f8:34:
                    91:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9D:21:D2:A4:16:88:E9:37:2A:53:13:86:F3:1D:F9:49:39:28:0B
            X509v3 Authority Key Identifier:
                keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3134342e302f32302d3230203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.176.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:72:ea:cc:e7:70:41:1a:7e:6b:2c:d5:e0:a8:b4:a8:ab:df:
         10:e0:68:f8:bd:ac:a7:74:51:1d:77:34:70:35:ed:82:e0:c5:
         6e:b4:cb:8b:13:1f:9d:be:3a:62:95:3a:e3:6a:6e:de:3b:9e:
         44:f7:9b:c8:70:a8:0c:9c:c3:ab:12:8f:69:5b:e3:4b:9a:a1:
         5d:ba:92:a9:9c:32:d2:2d:51:17:80:c2:50:d0:af:d2:2f:9f:
         a3:f9:d8:a5:14:6b:8c:41:58:05:73:79:e9:70:a0:50:45:02:
         b5:ea:f8:06:bf:eb:82:7a:6e:de:f2:ba:5a:8d:19:29:31:fc:
         29:bf:bd:ed:2f:84:13:94:8a:63:da:7f:8e:25:cb:7f:97:98:
         07:c2:b4:1b:86:6b:8a:b1:ab:3e:ca:d4:57:0b:51:0c:15:f3:
         d1:f3:42:f6:57:07:78:54:4f:a6:30:6e:d5:f8:67:52:bf:bd:
         a2:8f:b2:5a:46:cf:e6:3a:06:94:d9:71:50:3c:17:50:fa:42:
         be:28:16:e5:9c:9e:13:ca:d8:8e:e3:21:e0:eb:17:f2:bc:25:
         a1:77:f7:88:5f:da:1c:cb:85:9d:f5:26:8b:0c:cd:5c:40:00:
         ed:54:09:6c:6b:66:78:36:c6:32:c5:67:c5:39:3a:b5:5e:a1:
         9a:3a:f8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----