Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e34382e302f32312d3231203d3e20323733323631.roa
File:                     3134382e3232342e34382e302f32312d3231203d3e20323733323631.roa (raw, json)
Hash identifier:          eUzq2mdAuDnRf3rgW/4CipT0Egtx7O1xiM3NeWfiHbQ=
Subject key identifier:   12:8E:B8:91:7A:A6:B2:CE:97:23:7E:65:C6:F2:E4:C2:23:6C:1C:1C
Certificate issuer:       /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial:       19EC6B7F7F682F85C73FE8A2F77C78A4E55A9E48
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e34382e302f32312d3231203d3e20323733323631.roa
Signing time:             Fri 02 May 2025 18:40:01 +0000
ROA not before:           Fri 02 May 2025 18:35:01 +0000
ROA not after:            Fri 01 May 2026 18:40:01 +0000
asID:                     273261
IP address blocks:        148.224.48.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Wed 07 May 2025 16:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ec:6b:7f:7f:68:2f:85:c7:3f:e8:a2:f7:7c:78:a4:e5:5a:9e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
        Validity
            Not Before: May  2 18:35:01 2025 GMT
            Not After : May  1 18:40:01 2026 GMT
        Subject: CN=128EB8917AA6B2CE97237E65C6F2E4C2236C1C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:52:b4:2a:24:e3:83:e3:c8:ae:93:8a:17:
                    68:78:af:52:9a:b8:20:a5:2e:bf:f5:79:0d:a1:fd:
                    a6:c3:3a:ec:19:49:af:46:58:de:02:ad:7e:26:5f:
                    48:41:4c:cc:59:5f:76:64:54:4a:9d:d5:5f:8c:b5:
                    4f:b5:7f:bd:7f:30:2e:48:ec:57:38:a2:9e:fc:71:
                    72:98:ec:6f:0b:4a:a6:3b:fa:c2:56:c3:6b:6e:c1:
                    ec:b6:42:5d:5a:d9:8e:ef:f1:59:04:e8:60:7a:0b:
                    d7:7f:c4:80:b0:3e:28:47:f1:af:cc:81:08:5f:93:
                    03:9e:f6:a4:f7:a8:75:85:5d:af:1d:83:3d:84:1c:
                    57:b4:32:f9:79:5f:45:2f:5f:1f:5a:3e:cf:d7:9a:
                    38:c3:51:87:6a:19:ab:02:e8:10:67:d5:c4:43:16:
                    61:e6:5b:18:ff:72:d8:91:f4:15:22:f0:b2:f5:0a:
                    35:77:69:72:ba:4b:4d:3f:aa:31:83:da:3e:fe:af:
                    50:9a:d6:4b:e4:e1:e2:6e:bd:c8:63:b7:66:41:92:
                    65:ca:c4:ad:14:b4:46:ce:13:0f:2f:f3:1a:53:7f:
                    9d:4e:d8:5f:e4:aa:32:53:6c:4a:ea:73:d0:78:41:
                    62:e8:17:17:46:0b:7f:2b:17:9f:15:2f:57:a7:e3:
                    19:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8E:B8:91:7A:A6:B2:CE:97:23:7E:65:C6:F2:E4:C2:23:6C:1C:1C
            X509v3 Authority Key Identifier:
                keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e34382e302f32312d3231203d3e20323733323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:b0:af:76:75:fe:59:14:62:1f:8a:35:0b:ba:e7:6a:d6:e8:
         46:ca:43:3e:b0:f9:09:34:96:8b:8d:1f:d9:32:fd:98:8e:df:
         a2:37:f6:55:0f:a5:ae:93:15:3d:87:04:b0:a2:4b:34:18:9e:
         e9:49:86:b2:0b:81:4b:cd:93:fc:05:49:31:3c:6b:0c:23:13:
         5a:cb:1d:fb:01:fd:ec:97:fe:13:90:04:81:37:bb:cd:ea:0e:
         ad:b4:c2:02:2c:b4:95:b8:d1:68:34:9d:4c:84:4a:0a:63:c5:
         fd:65:1c:80:8d:92:38:8e:67:88:b9:7b:de:94:84:32:8b:73:
         1d:bb:4a:6c:e5:33:5a:66:45:56:41:4d:aa:9a:8e:88:9b:24:
         72:40:8e:97:fe:0b:e7:f6:55:c1:a3:85:e2:23:1c:52:62:dd:
         e7:81:cc:91:b5:7f:37:36:a3:b6:ab:9b:66:50:22:cf:a8:1f:
         19:86:68:ac:42:34:25:e2:09:3b:0d:b7:ee:39:f6:35:ae:af:
         f5:f3:3c:fc:ac:8d:fa:e9:9b:93:fa:34:32:38:6a:8c:90:f5:
         33:68:46:26:ac:34:3a:a3:26:76:19:b5:77:3a:b6:49:75:4f:
         f8:a3:5c:34:dc:cc:1b:94:ca:b2:2d:ef:cc:14:89:b9:b0:af:
         83:8b:b0:82
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGexrf39oL4XHP+ii93x4pOVankgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwQzA2ODlDNUE0ODI1REJFMTM1MzM3NEExQ0YxNDhG
RjQxODBFODAeFw0yNTA1MDIxODM1MDFaFw0yNjA1MDExODQwMDFaMDMxMTAvBgNV
BAMTKDEyOEVCODkxN0FBNkIyQ0U5NzIzN0U2NUM2RjJFNEMyMjM2QzFDMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fFK0KiTjg+PIrpOKF2h4r1Ka
uCClLr/1eQ2h/abDOuwZSa9GWN4CrX4mX0hBTMxZX3ZkVEqd1V+MtU+1f71/MC5I
7Fc4op78cXKY7G8LSqY7+sJWw2tuwey2Ql1a2Y7v8VkE6GB6C9d/xICwPihH8a/M
gQhfkwOe9qT3qHWFXa8dgz2EHFe0Mvl5X0UvXx9aPs/XmjjDUYdqGasC6BBn1cRD
FmHmWxj/ctiR9BUi8LL1CjV3aXK6S00/qjGD2j7+r1Ca1kvk4eJuvchjt2ZBkmXK
xK0UtEbOEw8v8xpTf51O2F/kqjJTbErqc9B4QWLoFxdGC38rF58VL1en4xm5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUEo64kXqmss6XI35lxvLkwiNsHBwwHwYDVR0j
BBgwFoAUKQwGicWkgl2+E1M3ShzxSP9BgOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMDM0OEQ5RTcwQzRCNjc2RUQwNjdENTE4MzAyM0U3RjRE
MjdFNjZCODc2RTg4NzhCRUI0QThGMERGQTY2NEM0LzAvMjkwQzA2ODlDNUE0ODI1
REJFMTM1MzM3NEExQ0YxNDhGRjQxODBFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTBDMDY4OUM1QTQ4MjVEQkUx
MzUzMzc0QTFDRjE0OEZGNDE4MEU4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTAzNDhEOUU3MEM0QjY3NkVEMDY3RDUxODMwMjNFN0Y0RDI3RTY2Qjg3
NkU4ODc4QkVCNEE4RjBERkE2NjRDNC8wLzMxMzQzODJlMzIzMjM0MmUzNDM4MmUz
MDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNzMzMzIzNjMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlOAw
MA0GCSqGSIb3DQEBCwUAA4IBAQAhsK92df5ZFGIfijULuudq1uhGykM+sPkJNJaL
jR/ZMv2Yjt+iN/ZVD6WukxU9hwSwoks0GJ7pSYayC4FLzZP8BUkxPGsMIxNayx37
Af3sl/4TkASBN7vN6g6ttMICLLSVuNFoNJ1MhEoKY8X9ZRyAjZI4jmeIuXvelIQy
i3Mdu0ps5TNaZkVWQU2qmo6ImyRyQI6X/gvn9lXBo4XiIxxSYt3ngcyRtX83NqO2
q5tmUCLPqB8ZhmisQjQl4gk7DbfuOfY1rq/18zz8rI366ZuT+jQyOGqMkPUzaEYm
rDQ6oyZ2GbV3OrZJdU/4o1w03MwblMqyLe/MFIm5sK+Di7CC
-----END CERTIFICATE-----
Generated at Sat May 17 09:30:58 2025 by rpki-client