Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/3139302e342e38302e302f32312d3231203d3e20323635363432.roa
File:                     3139302e342e38302e302f32312d3231203d3e20323635363432.roa (raw, json)
Hash identifier:          TsmPrdwxO9XaWdIZ6TFvQAtRhKuLLZx+o49XuBBn4RQ=
Subject key identifier:   79:ED:8F:D9:A3:6C:0F:76:D3:86:50:EA:06:0B:C5:D2:D4:1C:CC:E6
Certificate issuer:       /CN=F180E837FD7EADABAAE544FD4C3108402270D287
Certificate serial:       14335E6DC907D879C613232E0071CBDA5899DABC
Authority key identifier: F1:80:E8:37:FD:7E:AD:AB:AA:E5:44:FD:4C:31:08:40:22:70:D2:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F180E837FD7EADABAAE544FD4C3108402270D287.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/3139302e342e38302e302f32312d3231203d3e20323635363432.roa
Signing time:             Tue 11 Jun 2024 00:35:00 +0000
ROA not before:           Tue 11 Jun 2024 00:30:00 +0000
ROA not after:            Tue 10 Jun 2025 00:35:00 +0000
asID:                     265642
IP address blocks:        190.4.80.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 03:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:33:5e:6d:c9:07:d8:79:c6:13:23:2e:00:71:cb:da:58:99:da:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180E837FD7EADABAAE544FD4C3108402270D287
        Validity
            Not Before: Jun 11 00:30:00 2024 GMT
            Not After : Jun 10 00:35:00 2025 GMT
        Subject: CN=79ED8FD9A36C0F76D38650EA060BC5D2D41CCCE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:9b:54:6b:3b:cd:6e:ed:b9:35:21:bd:f7:
                    31:45:93:53:28:0b:ba:8b:68:69:aa:e8:b2:30:2d:
                    2e:df:b2:4d:00:3a:50:6c:8e:ef:d5:f8:57:09:f4:
                    e8:ab:48:95:9a:42:f4:b6:56:9d:2d:86:0b:75:f2:
                    0d:4d:68:b4:b4:a6:0f:20:c8:a3:ac:19:d5:8e:75:
                    e7:ec:94:94:64:c6:41:4c:ef:0d:fb:ec:67:a6:8a:
                    e8:4c:9c:26:14:93:88:75:35:0b:90:e4:4d:fb:60:
                    c5:06:f0:be:b4:5e:ea:49:8b:8d:f0:76:09:2f:97:
                    0c:ba:1d:94:86:e5:14:e3:e7:52:02:0d:25:ae:4c:
                    39:1e:49:0c:76:fb:db:86:ae:63:db:f0:2f:28:2a:
                    36:a2:38:f7:60:a3:f7:a7:e0:6d:a7:22:c1:0f:db:
                    73:60:ff:6f:b4:6c:5d:4c:cc:4d:24:80:cb:77:c4:
                    c7:49:40:d5:c9:3b:d3:ec:af:19:cf:97:07:8d:b8:
                    5a:29:6c:43:47:c4:8d:25:05:59:e1:fc:19:f7:0e:
                    aa:45:c7:4f:c7:a4:5d:26:40:fb:c1:ce:68:8a:35:
                    26:dc:0d:38:10:de:b4:2a:fd:6f:f9:6e:be:ce:d2:
                    4e:ab:f6:24:21:26:8f:87:f2:8c:ee:b8:62:fe:fc:
                    66:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:ED:8F:D9:A3:6C:0F:76:D3:86:50:EA:06:0B:C5:D2:D4:1C:CC:E6
            X509v3 Authority Key Identifier:
                keyid:F1:80:E8:37:FD:7E:AD:AB:AA:E5:44:FD:4C:31:08:40:22:70:D2:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/F180E837FD7EADABAAE544FD4C3108402270D287.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F180E837FD7EADABAAE544FD4C3108402270D287.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/3139302e342e38302e302f32312d3231203d3e20323635363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:6a:3f:47:ed:b6:a5:c9:4c:02:43:e7:b7:30:0a:59:31:0c:
         42:f0:78:03:c0:05:7a:15:e1:85:5f:41:92:06:7b:1f:fa:22:
         cf:9f:de:b1:ca:76:05:07:5d:f2:d2:37:ff:6e:73:14:a9:77:
         1d:d3:e2:a7:21:e2:b9:37:85:3c:3a:2c:81:d3:6b:9b:38:17:
         a8:7a:10:fd:c8:ab:df:3e:b9:bf:3e:51:56:7b:3f:52:15:44:
         8c:9a:01:fc:a5:ed:72:56:81:c7:03:d0:7e:f9:7d:7e:3e:f9:
         68:b1:c3:cc:b9:47:3e:19:86:b4:27:51:0c:b6:aa:bf:e5:7b:
         dd:31:d6:9f:f2:7a:1a:85:46:3d:02:e1:16:b8:1b:06:13:3b:
         0e:39:e8:d8:72:79:ea:b0:0e:ac:d0:80:46:51:f7:c4:4d:13:
         fb:c1:f3:36:05:13:08:31:cd:6c:fc:ea:bc:f8:13:81:38:9c:
         00:e0:76:17:00:d0:6e:df:49:c7:22:ce:b9:8c:7d:bd:f0:c9:
         d3:f1:c0:40:78:c2:01:d5:ce:0e:b8:d1:66:62:05:51:14:29:
         91:0c:1d:e7:d6:14:4e:d1:50:45:1c:8b:14:ca:c8:a3:49:61:
         a1:66:73:52:34:e0:4a:48:01:fc:d4:78:41:f2:f8:3d:18:d7:
         f0:4f:a4:b2
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUFDNebckH2HnGEyMuAHHL2liZ2rwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE4MEU4MzdGRDdFQURBQkFBRTU0NEZENEMzMTA4NDAy
MjcwRDI4NzAeFw0yNDA2MTEwMDMwMDBaFw0yNTA2MTAwMDM1MDBaMDMxMTAvBgNV
BAMTKDc5RUQ4RkQ5QTM2QzBGNzZEMzg2NTBFQTA2MEJDNUQyRDQxQ0NDRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA05tUazvNbu25NSG99zFFk1Mo
C7qLaGmq6LIwLS7fsk0AOlBsju/V+FcJ9OirSJWaQvS2Vp0thgt18g1NaLS0pg8g
yKOsGdWOdefslJRkxkFM7w377GemiuhMnCYUk4h1NQuQ5E37YMUG8L60XupJi43w
dgkvlwy6HZSG5RTj51ICDSWuTDkeSQx2+9uGrmPb8C8oKjaiOPdgo/en4G2nIsEP
23Ng/2+0bF1MzE0kgMt3xMdJQNXJO9PsrxnPlweNuFopbENHxI0lBVnh/Bn3DqpF
x0/HpF0mQPvBzmiKNSbcDTgQ3rQq/W/5br7O0k6r9iQhJo+H8ozuuGL+/GZ5AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUee2P2aNsD3bThlDqBgvF0tQczOYwHwYDVR0j
BBgwFoAU8YDoN/1+rauq5UT9TDEIQCJw0ocwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNTk4NUVEMjdBODEyNUJCQTQwMTI1MEZCNzUxQzdCMjVF
RTA4RDQxNDQ0NjdEODE1QjdGRUI2RDU0NEJDMTYyLzAvRjE4MEU4MzdGRDdFQURB
QkFBRTU0NEZENEMzMTA4NDAyMjcwRDI4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMTgwRTgzN0ZEN0VBREFCQUFF
NTQ0RkQ0QzMxMDg0MDIyNzBEMjg3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDU5ODVFRDI3QTgxMjVCQkE0MDEyNTBGQjc1MUM3QjI1RUUwOEQ0MTQ0
NDY3RDgxNUI3RkVCNkQ1NDRCQzE2Mi8wLzMxMzkzMDJlMzQyZTM4MzAyZTMwMmYz
MjMxMmQzMjMxMjAzZDNlMjAzMjM2MzUzNjM0MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO+BFAwDQYJ
KoZIhvcNAQELBQADggEBAANqP0fttqXJTAJD57cwClkxDELweAPABXoV4YVfQZIG
ex/6Is+f3rHKdgUHXfLSN/9ucxSpdx3T4qch4rk3hTw6LIHTa5s4F6h6EP3Iq98+
ub8+UVZ7P1IVRIyaAfyl7XJWgccD0H75fX4++Wixw8y5Rz4ZhrQnUQy2qr/le90x
1p/yehqFRj0C4Ra4GwYTOw456NhyeeqwDqzQgEZR98RNE/vB8zYFEwgxzWz86rz4
E4E4nADgdhcA0G7fSccizrmMfb3wydPxwEB4wgHVzg640WZiBVEUKZEMHefWFE7R
UEUcixTKyKNJYaFmc1I04EpIAfzUeEHy+D0Y1/BPpLI=
-----END CERTIFICATE-----
Generated at Tue Jun 11 05:06:48 2024 by rpki-client on console-fra.rpki-client.org