Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138312e302f32342d3234203d3e203236363139.roa
File:                     3139302e39302e3138312e302f32342d3234203d3e203236363139.roa (raw, json)
Hash identifier:          C19JuT7UAck/93QAoJFX++CNqOYSC3Lw9ipjLEghczY=
Subject key identifier:   31:A0:E7:78:F8:73:C2:7F:D7:22:DC:B9:0F:F0:87:2E:8F:F6:F3:DC
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       66D019256E2886F04AE81862BE53E4439EFCF335
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138312e302f32342d3234203d3e203236363139.roa
Signing time:             Tue 04 Feb 2025 18:17:16 +0000
ROA not before:           Tue 04 Feb 2025 18:12:16 +0000
ROA not after:            Tue 03 Feb 2026 18:17:16 +0000
asID:                     26619
IP address blocks:        190.90.181.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 05 Mar 2025 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d0:19:25:6e:28:86:f0:4a:e8:18:62:be:53:e4:43:9e:fc:f3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:16 2025 GMT
            Not After : Feb  3 18:17:16 2026 GMT
        Subject: CN=31A0E778F873C27FD722DCB90FF0872E8FF6F3DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:4b:f0:e8:06:74:11:a5:d3:fe:66:d5:76:
                    2d:e5:d3:33:49:70:f2:62:06:bb:2a:d6:49:dd:ef:
                    6e:94:9e:ba:d0:0e:93:83:49:1c:0c:2d:b3:96:14:
                    45:6b:1e:cd:ba:c2:78:c8:62:9b:5c:0b:7c:a7:00:
                    b2:3c:a2:00:51:93:c0:16:0a:36:01:a9:96:13:54:
                    c8:95:7d:9e:65:c8:c0:bd:4a:10:8b:a9:2b:b4:b1:
                    b3:af:83:04:78:cd:d2:4c:e0:f8:8d:ab:b0:98:90:
                    83:24:0e:d5:4f:32:48:63:02:b7:87:02:09:f4:d0:
                    e1:ba:d0:87:52:fb:96:59:7e:e6:b4:fb:76:48:b3:
                    37:52:9e:1f:48:df:47:6c:59:a7:81:bf:4e:5a:e8:
                    fa:10:c2:75:98:63:13:4e:7c:fb:85:a6:8f:b1:aa:
                    10:6a:ab:6e:de:37:db:45:13:8b:a7:fd:e4:b5:5b:
                    ba:8f:1a:54:35:c3:20:2c:47:26:b1:5d:16:47:43:
                    29:9d:7f:21:8a:48:74:d5:17:59:0e:41:79:12:56:
                    3c:50:d7:df:3e:7b:55:bd:c5:44:2c:27:e6:5f:06:
                    f5:f9:6e:13:2e:44:df:99:07:c8:a8:b8:40:86:23:
                    0b:57:26:32:26:2f:03:5e:a1:df:bd:f6:30:2f:a4:
                    4d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A0:E7:78:F8:73:C2:7F:D7:22:DC:B9:0F:F0:87:2E:8F:F6:F3:DC
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138312e302f32342d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:7a:b5:f1:40:aa:b4:a5:0d:60:b7:2e:21:11:18:31:fd:dd:
         3b:61:43:d8:11:66:33:07:06:a1:37:a5:e8:2a:9a:21:fc:98:
         b8:b7:c7:df:5b:3b:2b:8d:e7:70:60:46:ee:7d:39:0f:44:5b:
         38:b8:0e:99:4a:92:bc:23:42:b9:92:ab:1d:ff:5a:9e:9e:9b:
         ec:7c:dd:8d:6f:45:bc:4e:65:e2:7d:68:cf:ed:bb:aa:c5:f0:
         fe:1b:6d:bd:21:12:f3:ac:d7:74:99:fb:5e:89:8b:e2:a7:5f:
         a0:d9:68:d9:28:f3:d0:1e:fe:19:41:51:b0:c4:76:3b:ac:62:
         85:b7:5b:74:9d:e3:47:a1:6b:70:96:7b:b6:68:86:2e:fe:2f:
         ec:2c:b4:7c:d8:7a:98:24:7e:7d:3e:dd:c2:72:4d:97:a0:9b:
         49:3e:ef:94:92:52:64:12:56:96:4a:2d:6d:60:06:f2:87:d6:
         01:d1:ff:aa:d0:49:00:e0:a8:f0:2d:68:c2:43:c3:73:67:2c:
         78:18:d0:05:4f:c0:91:87:0a:32:33:09:61:0b:21:18:df:66:
         79:65:d0:a3:d6:c4:08:3f:ff:8c:4e:8e:7d:dc:2e:e7:16:a4:
         e2:bf:38:6f:06:14:e8:61:d6:5c:00:9f:d9:a6:09:ed:b0:e5:
         45:34:71:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:42 2025 by rpki-client