Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e39362e302f31392d3139203d3e203138373437.roa
File:                     3136382e3137362e39362e302f31392d3139203d3e203138373437.roa (raw, json)
Hash identifier:          FFmE3oOtWV5H7DMVI7msqOF8xEiREgbptGBcgnOE1P0=
Subject key identifier:   91:EF:CD:A5:6D:EA:E8:19:32:2D:88:DB:5C:71:0A:A4:BE:24:AB:82
Certificate issuer:       /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial:       0BC8CC17F4D004D4DAE79603E583A3A7959A1540
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e39362e302f31392d3139203d3e203138373437.roa
Signing time:             Mon 21 Sep 2026 13:05:01 +0000
ROA not before:           Mon 21 Sep 2026 13:00:01 +0000
ROA not after:            Mon 20 Sep 2027 13:05:01 +0000
asID:                     18747
IP address blocks:        168.176.96.0/19 maxlen: 19
Validation:               Failed, certificate revoked on Thu 24 Sep 2026 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c8:cc:17:f4:d0:04:d4:da:e7:96:03:e5:83:a3:a7:95:9a:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
        Validity
            Not Before: Sep 21 13:00:01 2026 GMT
            Not After : Sep 20 13:05:01 2027 GMT
        Subject: CN=91EFCDA56DEAE819322D88DB5C710AA4BE24AB82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bf:73:a0:6d:66:e2:9c:2b:24:d8:2b:42:1f:
                    e8:39:46:c1:bb:a9:21:db:af:b6:95:20:ac:48:57:
                    6b:c5:00:e5:57:e0:70:0f:9c:2a:4c:92:15:af:bf:
                    55:16:04:98:77:db:4c:c8:7d:4c:75:a6:ad:b2:36:
                    5f:75:28:fd:3a:67:c2:32:e7:a2:a2:95:55:bf:e0:
                    a4:fe:9e:10:4c:c0:b4:5c:3e:1a:ae:33:e5:00:30:
                    52:84:86:9f:d7:32:09:94:61:20:b9:d1:34:c5:26:
                    43:ee:51:1c:6a:25:7b:7d:d3:96:f6:21:39:44:f2:
                    66:08:1f:f7:be:82:4c:d4:0d:6d:79:dd:ee:e4:de:
                    01:d8:1e:2b:60:a1:dd:6b:9f:62:01:7f:2a:6a:a2:
                    bc:9d:83:4c:8f:67:d0:7b:63:7c:ae:49:a2:2c:49:
                    49:f1:c3:7e:6c:8c:23:f3:14:25:6b:03:d7:68:40:
                    f6:fd:46:66:7c:61:5e:dc:a5:40:e2:ff:0b:52:e0:
                    92:e1:f7:9d:b9:5b:82:ca:7a:f8:4c:65:a0:91:3e:
                    ce:36:ae:00:97:3b:9e:4b:80:32:31:2d:27:12:e6:
                    95:8c:7a:24:55:f1:46:c1:90:78:d6:5d:70:06:52:
                    41:a7:58:36:97:5a:88:38:16:01:98:8b:1e:72:14:
                    0c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EF:CD:A5:6D:EA:E8:19:32:2D:88:DB:5C:71:0A:A4:BE:24:AB:82
            X509v3 Authority Key Identifier:
                keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e39362e302f31392d3139203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.176.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6b:18:db:75:4c:55:20:a0:d6:f9:dc:dd:4d:6e:c9:4a:ba:cb:
         1a:28:e3:31:5a:1d:08:bb:11:24:b9:d9:62:10:6a:15:40:99:
         26:1c:07:e1:28:dc:66:3f:94:b0:ca:b2:41:6f:8c:52:93:ff:
         63:f9:57:95:00:82:5b:46:4a:7e:95:dc:3b:22:4c:4a:c7:0b:
         9b:62:78:6d:5e:9c:16:0c:8e:ef:6f:59:bf:ab:1e:9a:50:f1:
         1f:ce:7e:bd:39:6d:04:59:2a:a3:23:ae:a4:e1:28:4c:8a:f2:
         41:23:35:00:03:44:78:74:c5:2d:6e:d4:04:7d:f5:77:cf:b6:
         11:2a:46:25:b4:53:d7:63:9d:2a:30:50:b5:bc:6a:db:98:84:
         27:eb:d0:37:b9:00:81:fc:f9:f7:f1:d7:94:a5:5c:b7:ad:07:
         11:8b:70:47:af:74:33:63:99:66:bb:c2:0e:11:07:22:24:75:
         1b:93:d6:73:71:79:3a:c2:1e:ed:ab:9e:b1:56:6d:5a:ec:7c:
         49:5a:85:63:13:a7:38:18:fa:e5:de:33:56:e5:00:39:6b:03:
         4d:50:01:e3:17:3b:cf:ff:c4:1b:f3:cb:0e:28:e3:d6:e4:be:
         ea:1d:71:fd:70:a4:e7:e4:92:08:f8:28:00:e8:c6:ef:41:19:
         40:97:19:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----