Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130382e302f32342d3234203d3e203532323633.roa
File:                     3139302e36312e3130382e302f32342d3234203d3e203532323633.roa (raw, json)
Hash identifier:          fdTZ8ZqyiKo/+iq3mqRJ21y6wYpBniPc5Y4xOR0wn0w=
Subject key identifier:   4C:34:66:96:0E:C3:12:B8:F9:7E:ED:48:CD:B6:0F:8D:33:74:A9:E9
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       72F1608A8A0D5A24E2733D5125F71DCEB3BB3D5B
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130382e302f32342d3234203d3e203532323633.roa
Signing time:             Tue 05 Mar 2024 17:59:19 +0000
ROA not before:           Tue 05 Mar 2024 17:54:19 +0000
ROA not after:            Tue 04 Mar 2025 17:59:19 +0000
asID:                     52263
IP address blocks:        190.61.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 16:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f1:60:8a:8a:0d:5a:24:e2:73:3d:51:25:f7:1d:ce:b3:bb:3d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:19 2024 GMT
            Not After : Mar  4 17:59:19 2025 GMT
        Subject: CN=4C3466960EC312B8F97EED48CDB60F8D3374A9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:9c:be:21:48:21:ce:99:01:1b:4a:a1:30:
                    1e:12:dc:81:f9:f9:95:ee:17:43:b7:e9:98:d3:1b:
                    53:74:93:6f:65:cc:26:8f:5f:dc:ab:89:04:3e:7a:
                    db:b3:b6:e1:6c:1e:cb:d1:d5:12:58:a2:c7:a7:4a:
                    af:83:48:ab:b8:a5:0c:a9:e9:a6:62:e7:7a:c8:2c:
                    fb:55:d8:61:ea:24:84:f6:72:76:d7:ae:ee:5d:91:
                    1b:87:5f:2c:0c:47:47:c2:bd:81:d7:c7:4a:52:30:
                    7a:dc:26:be:38:3f:85:69:38:8c:49:23:a8:a1:a4:
                    38:3e:b3:3a:8d:23:ac:4d:84:0a:c2:61:fb:b3:e0:
                    ec:35:53:21:47:4d:e4:81:c5:53:52:f5:43:0b:d8:
                    ec:cd:5b:d2:0e:17:ff:dc:2d:0a:c7:44:f8:ed:9d:
                    ee:79:ea:55:3b:63:e7:9d:a8:a0:78:d7:ae:d3:1d:
                    a8:1b:a8:73:e6:c1:f5:fc:24:24:01:32:24:77:c9:
                    e5:29:bf:37:77:44:e4:08:ff:af:c3:a6:15:18:78:
                    29:0a:74:40:4b:83:15:93:40:d2:7f:41:6d:9c:51:
                    67:bd:fc:72:7a:20:79:21:de:c9:16:20:ff:2a:6a:
                    9d:3f:c8:f0:19:7c:b9:f2:4b:b1:d7:f6:d5:7f:0f:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:34:66:96:0E:C3:12:B8:F9:7E:ED:48:CD:B6:0F:8D:33:74:A9:E9
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130382e302f32342d3234203d3e203532323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f8:63:e6:94:4f:0f:7e:07:e6:f8:32:eb:4b:25:6d:dd:a3:
         c9:1f:8f:65:9d:65:f0:2c:7d:4d:1a:fe:8b:d7:b2:b6:be:f7:
         cf:86:3a:60:f1:c9:a9:55:73:03:f3:6f:db:ed:f3:f2:67:bc:
         f3:a0:da:24:13:6b:6c:ab:5c:23:67:fb:9a:b2:59:fe:d5:79:
         1b:8e:8c:b1:83:f1:f6:95:65:8b:ea:d0:35:fb:26:0a:23:0b:
         2a:31:2e:1a:11:81:a6:12:7c:f8:ef:99:73:e5:f0:0f:46:7a:
         da:c5:17:7c:61:1d:98:85:bd:b0:f0:e3:5f:13:78:93:44:de:
         44:5f:53:b0:b9:ce:c0:ef:df:9f:cc:0f:ef:8e:41:0b:8f:cd:
         e5:bb:4b:e8:87:c5:de:7f:3d:3b:1e:07:4c:c6:e1:cc:88:40:
         16:49:9c:05:5a:a8:e8:c6:c7:da:88:4f:51:a7:e4:18:d8:14:
         17:1b:23:5f:7e:06:35:3c:4d:44:80:c1:48:33:e8:59:e3:90:
         b7:b3:63:e8:ad:9d:0f:ff:41:85:e6:a1:f2:ba:17:87:53:16:
         d2:39:66:f5:7a:1c:43:75:bd:25:df:7c:7a:86:a8:c0:dc:6b:
         96:0a:61:49:8e:df:35:68:b1:eb:50:f6:8d:25:ee:24:d9:8e:
         6c:10:6f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org