Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e991a6d73217797d22cae2603e3177ea9fef6416.roa
File:                     e991a6d73217797d22cae2603e3177ea9fef6416.roa (raw, json)
Hash identifier:          MBOoIk+u14KzCx+AGXhCMFmuIeOTweejYFKTxIO2hJ0=
Subject key identifier:   31:A5:D5:B2:99:0C:B0:96:4B:BA:6D:85:92:4B:76:AF:BF:2E:A9:A1
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       0CFAFB
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e991a6d73217797d22cae2603e3177ea9fef6416.roa
Signing time:             Thu 09 Mar 2023 13:58:01 +0000
ROA not before:           Sun 19 Jun 2022 03:00:00 +0000
ROA not after:            Wed 30 Apr 2025 03:00:00 +0000
asID:                     11830
IP address blocks:        181.224.72.0/24 maxlen: 24
                          181.224.73.0/24 maxlen: 24
                          2801:151:3::/48 maxlen: 48
                          2801:151:f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850683 (0xcfafb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Jun 19 03:00:00 2022 GMT
            Not After : Apr 30 03:00:00 2025 GMT
        Subject: CN=e991a6d73217797d22cae2603e3177ea9fef6416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cc:a8:97:e7:fd:1b:3f:b0:5a:60:af:13:a7:
                    b7:b9:f7:b7:3f:e3:8c:a8:86:9a:19:3f:6e:6a:e0:
                    c0:df:a2:cb:2c:4a:fc:e2:5e:ba:34:42:44:02:be:
                    a6:3b:b4:1d:6e:a8:4b:84:6a:02:ec:a6:d6:5c:49:
                    f5:d9:c9:be:3b:bc:59:ad:e7:6f:43:0f:1d:58:ef:
                    7d:53:18:64:dd:be:5a:57:11:25:7e:f6:b0:1a:a1:
                    ec:46:34:75:f1:f0:b4:dd:42:3b:e8:ab:1d:53:1c:
                    f2:b6:38:26:44:89:37:14:42:01:f0:28:28:24:de:
                    83:8b:70:59:79:31:d1:55:cc:c3:21:c5:90:93:37:
                    f2:7e:b8:1c:0b:ec:b5:7f:c5:16:48:b8:97:00:1a:
                    34:b1:d9:48:64:17:79:a0:9f:63:5d:61:5b:3d:3f:
                    8c:4a:8f:1e:b3:e5:0e:71:89:de:f7:9b:2f:73:d4:
                    ab:81:26:aa:43:51:d4:d0:60:ea:8f:04:11:31:2f:
                    54:e7:98:02:c1:3f:ac:7d:43:9e:34:85:79:52:e9:
                    ac:16:57:d8:fd:6c:9a:63:72:7a:6f:12:4f:6d:6a:
                    68:86:f4:01:07:a6:63:25:f9:ac:b2:f9:28:87:ad:
                    3c:20:9a:c9:4e:ca:e2:57:89:93:50:04:74:50:57:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A5:D5:B2:99:0C:B0:96:4B:BA:6D:85:92:4B:76:AF:BF:2E:A9:A1
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e991a6d73217797d22cae2603e3177ea9fef6416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.72.0/23
                IPv6:
                  2801:151:3::/48
                  2801:151:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:0d:e2:3d:09:d4:ea:63:79:13:fe:f2:eb:cd:bc:63:a3:a6:
         02:d1:56:c7:2d:85:5b:33:29:f8:e4:be:31:93:90:e9:d4:7c:
         19:01:48:29:2f:96:25:e0:97:c5:84:b5:4c:68:0c:d7:f3:e4:
         70:a9:65:92:bf:14:d3:17:1d:cc:88:11:e3:29:c1:06:fb:8e:
         1f:a9:d7:85:23:d2:95:8f:44:4d:68:ce:82:c6:12:70:02:a5:
         b0:f1:05:31:66:62:53:27:bb:e1:6c:4d:c1:88:e7:23:27:33:
         f8:4a:36:cd:61:ac:13:81:5f:70:d0:1f:5e:37:99:f3:ba:9c:
         bf:22:3b:f8:97:14:45:5c:fd:14:be:29:59:d5:02:7b:42:98:
         89:a7:24:b9:28:2e:ce:34:44:4b:99:ac:8b:e2:93:f9:6a:fb:
         77:56:a6:3b:d2:fe:c0:36:cd:b6:5e:01:69:7a:b7:5c:ab:ce:
         af:c4:79:2b:67:a5:55:33:b1:90:2e:9a:8b:95:53:8a:4c:b5:
         5f:ec:cd:1f:9a:71:2d:fe:ae:a4:0b:fb:4c:c0:ce:dc:9d:cb:
         b2:7a:e0:a7:2d:e3:fa:35:38:ba:bf:38:9b:9f:9b:ea:3a:83:
         25:82:71:9a:48:af:59:26:b5:3d:ba:08:fa:36:16:de:ff:0e:
         b3:c5:f1:62
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIDDPr7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVi
N2RiYjE0ODJiNDcwNWM0MTE1ZjQ2OThkMDE4NzUwMDcwYmNlY2IwHhcNMjIwNjE5
MDMwMDAwWhcNMjUwNDMwMDMwMDAwWjAzMTEwLwYDVQQDEyhlOTkxYTZkNzMyMTc3
OTdkMjJjYWUyNjAzZTMxNzdlYTlmZWY2NDE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgcyol+f9Gz+wWmCvE6e3ufe3P+OMqIaaGT9uauDA36LLLEr8
4l66NEJEAr6mO7QdbqhLhGoC7KbWXEn12cm+O7xZredvQw8dWO99Uxhk3b5aVxEl
fvawGqHsRjR18fC03UI76KsdUxzytjgmRIk3FEIB8CgoJN6Di3BZeTHRVczDIcWQ
kzfyfrgcC+y1f8UWSLiXABo0sdlIZBd5oJ9jXWFbPT+MSo8es+UOcYne95svc9Sr
gSaqQ1HU0GDqjwQRMS9U55gCwT+sfUOeNIV5UumsFlfY/WyaY3J6bxJPbWpohvQB
B6ZjJfmssvkoh608IJrJTsriV4mTUAR0UFeduwIDAQABo4ICdTCCAnEwHQYDVR0O
BBYEFDGl1bKZDLCWS7pthZJLdq+/LqmhMB8GA1UdIwQYMBaAFCs7rHKdDqdCH724
kNkjvaR318opMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWI3ZGJi
MTQ4MmI0NzA1YzQxMTVmNDY5OGQwMTg3NTAwNzBiY2VjYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDQ5ZWNjMTktYzI5MS00ZmNmLTk2OTctNGE5NjY5
YjMwZTgwL2U5OTFhNmQ3MzIxNzc5N2QyMmNhZTI2MDNlMzE3N2VhOWZlZjY0MTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NDllY2MxOS1jMjkxLTRmY2YtOTY5Ny00YTk2
NjliMzBlODAvNWI3ZGJiMTQ4MmI0NzA1YzQxMTVmNDY5OGQwMTg3NTAwNzBiY2Vj
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQq
MCgwDAQCAAEwBgMEAbXgSDAYBAIAAjASAwcAKAEBUQADAwcAKAEBUQAPMA0GCSqG
SIb3DQEBCwUAA4IBAQBbDeI9CdTqY3kT/vLrzbxjo6YC0VbHLYVbMyn45L4xk5Dp
1HwZAUgpL5Yl4JfFhLVMaAzX8+RwqWWSvxTTFx3MiBHjKcEG+44fqdeFI9KVj0RN
aM6CxhJwAqWw8QUxZmJTJ7vhbE3BiOcjJzP4SjbNYawTgV9w0B9eN5nzupy/Ijv4
lxRFXP0UvilZ1QJ7QpiJpyS5KC7ONERLmayL4pP5avt3VqY70v7ANs22XgFperdc
q86vxHkrZ6VVM7GQLpqLlVOKTLVf7M0fmnEt/q6kC/tMwM7cncuyeuCnLeP6NTi6
vzibn5vqOoMlgnGaSK9ZJrU9ugj6Nhbe/w6zxfFi
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:21 2023 by rpki-client on console.sobornost.net