Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203230343534.roa
File:                     3230302e33352e3135352e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier:          r763QueGlRxTgf/Q1xr9kJBYo2Fg3E/GacnoC2MPpFM=
Subject key identifier:   9E:7B:BF:7B:8D:30:36:38:00:5A:FB:E2:56:2C:29:FC:DC:42:9E:1E
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       4421274DD15C78EE4084AB07591AA4B9B1C93183
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203230343534.roa
Signing time:             Wed 02 Apr 2025 18:50:00 +0000
ROA not before:           Wed 02 Apr 2025 18:45:00 +0000
ROA not after:            Wed 01 Apr 2026 18:50:00 +0000
asID:                     20454
IP address blocks:        200.35.155.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 09 May 2025 10:50:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:21:27:4d:d1:5c:78:ee:40:84:ab:07:59:1a:a4:b9:b1:c9:31:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Apr  2 18:45:00 2025 GMT
            Not After : Apr  1 18:50:00 2026 GMT
        Subject: CN=9E7BBF7B8D303638005AFBE2562C29FCDC429E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:7a:7f:66:db:f2:fe:bb:76:60:2e:a3:09:
                    5d:77:cc:69:dd:8b:ac:1b:e4:03:04:17:cd:da:ed:
                    cd:e2:09:48:01:6b:fe:a1:e4:2f:6c:fb:f9:7c:27:
                    0e:a3:0a:05:8f:16:3a:6d:f2:25:9a:9e:8d:aa:0d:
                    b9:de:d8:c2:af:c3:34:30:b0:ec:45:94:88:c4:b9:
                    20:79:ad:58:86:49:1f:37:d5:80:fc:37:fd:68:6d:
                    ea:cb:1b:10:72:7b:18:c4:c1:0e:f6:b8:1f:ed:b9:
                    48:bc:7e:a2:8e:51:6e:c1:fa:46:cd:3a:78:c6:cc:
                    ac:0c:39:8c:1e:83:fb:6e:db:eb:ad:f0:12:25:b5:
                    ca:6a:fc:e0:cb:10:1e:60:b5:a0:35:08:0f:ac:96:
                    11:fc:d8:ab:fa:a3:8b:f3:e2:30:f9:72:b5:3b:54:
                    42:7e:70:e6:3f:f7:ce:7d:f8:96:a4:e4:d4:76:c1:
                    d7:9d:7d:cf:23:d4:36:a4:b2:a6:e7:7c:7c:8e:d3:
                    b3:88:5c:50:70:86:e5:40:16:d0:67:3e:20:aa:85:
                    77:09:95:f7:87:3c:bd:52:ff:07:b2:c6:f7:25:a9:
                    54:1f:4f:77:16:75:84:19:62:2a:fe:fc:5d:93:00:
                    59:78:43:83:5a:14:08:30:b0:a3:35:82:b8:67:ea:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7B:BF:7B:8D:30:36:38:00:5A:FB:E2:56:2C:29:FC:DC:42:9E:1E
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203230343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:79:94:3e:4d:4e:82:5d:cc:ae:90:8e:26:70:6e:86:dc:c4:
         31:98:96:2a:8d:1b:b3:80:14:5c:29:01:fe:b1:e7:c7:37:c0:
         98:50:9c:55:80:7a:07:44:21:a8:14:22:1f:4e:53:92:91:09:
         a1:3b:0b:ba:2d:67:2e:f3:77:bf:d6:35:c1:87:77:a6:f0:c7:
         62:3c:3f:3b:f8:d0:9c:3a:78:a5:df:a1:de:a3:61:5a:85:57:
         33:87:20:26:62:49:e0:3a:00:03:cd:87:8d:29:38:99:3c:82:
         dd:91:37:40:32:cf:cb:aa:e5:e1:81:75:20:77:13:43:28:4c:
         d7:d8:f3:8d:d1:79:eb:92:ed:9b:a0:52:7b:17:f6:5d:40:95:
         b3:76:51:c2:e7:ff:b4:44:c4:f8:f3:7d:5b:a5:cf:7a:78:d6:
         66:81:b3:d7:ef:0a:27:54:b6:89:08:77:b6:5c:4e:fb:a6:3e:
         b6:01:1f:3e:11:78:4d:cc:8f:74:c3:30:7d:32:e6:27:c7:74:
         14:95:ff:8c:9f:6c:f8:51:a6:5a:09:97:18:3a:57:f0:59:75:
         7a:b2:e7:07:f6:67:28:18:41:55:2c:85:ec:26:22:db:4a:d1:
         7f:40:fb:ac:7b:ea:45:4e:bd:ed:3f:53:cf:b9:ea:f6:13:e2:
         a1:b1:1f:77
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIURCEnTdFceO5AhKsHWRqkubHJMYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyRTcxOUYzNjBCRjlDOUVFODlFQzJFMjVDRjBERTIy
OEI2RUJGQzAeFw0yNTA0MDIxODQ1MDBaFw0yNjA0MDExODUwMDBaMDMxMTAvBgNV
BAMTKDlFN0JCRjdCOEQzMDM2MzgwMDVBRkJFMjU2MkMyOUZDREM0MjlFMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWXp/Ztvy/rt2YC6jCV13zGnd
i6wb5AMEF83a7c3iCUgBa/6h5C9s+/l8Jw6jCgWPFjpt8iWano2qDbne2MKvwzQw
sOxFlIjEuSB5rViGSR831YD8N/1oberLGxByexjEwQ72uB/tuUi8fqKOUW7B+kbN
OnjGzKwMOYweg/tu2+ut8BIltcpq/ODLEB5gtaA1CA+slhH82Kv6o4vz4jD5crU7
VEJ+cOY/9859+Jak5NR2wdedfc8j1DaksqbnfHyO07OIXFBwhuVAFtBnPiCqhXcJ
lfeHPL1S/weyxvclqVQfT3cWdYQZYir+/F2TAFl4Q4NaFAgwsKM1grhn6ktfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUnnu/e40wNjgAWvviViwp/NxCnh4wHwYDVR0j
BBgwFoAUti5xnzYL+cnuiewuJc8N4ii26/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNUZERjY0QjYxN0ZDRTBFNDUxNUVCRkE4MEU0MUQ4RjZC
RjVEOENGRTc4RjJCRUEzQTdDOTNFNDNGMEU1RDQwLzAvQjYyRTcxOUYzNjBCRjlD
OUVFODlFQzJFMjVDRjBERTIyOEI2RUJGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjJFNzE5RjM2MEJGOUM5RUU4
OUVDMkUyNUNGMERFMjI4QjZFQkZDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDVGREY2NEI2MTdGQ0UwRTQ1MTVFQkZBODBFNDFEOEY2QkY1RDhDRkU3
OEYyQkVBM0E3QzkzRTQzRjBFNUQ0MC8wLzMyMzAzMDJlMzMzNTJlMzEzNTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzUzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgjmzAN
BgkqhkiG9w0BAQsFAAOCAQEAgnmUPk1Ogl3MrpCOJnBuhtzEMZiWKo0bs4AUXCkB
/rHnxzfAmFCcVYB6B0QhqBQiH05TkpEJoTsLui1nLvN3v9Y1wYd3pvDHYjw/O/jQ
nDp4pd+h3qNhWoVXM4cgJmJJ4DoAA82HjSk4mTyC3ZE3QDLPy6rl4YF1IHcTQyhM
19jzjdF565Ltm6BSexf2XUCVs3ZRwuf/tETE+PN9W6XPenjWZoGz1+8KJ1S2iQh3
tlxO+6Y+tgEfPhF4TcyPdMMwfTLmJ8d0FJX/jJ9s+FGmWgmXGDpX8Fl1erLnB/Zn
KBhBVSyF7CYi20rRf0D7rHvqRU697T9Tz7nq9hPiobEfdw==
-----END CERTIFICATE-----
Generated at Mon May 19 08:01:41 2025 by rpki-client