Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e31392e302f32342d3234203d3e20323632353839.roa
File:                     3139302e39302e31392e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          fo8C5FGKG6ZskBS5pX97+Chw/xyu05oLVqVFKDvDac4=
Subject key identifier:   BB:D7:52:8B:F3:6D:56:41:44:6B:1C:D8:69:07:C5:58:75:88:19:B2
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       4C10CB6176B1C9EA883008D7D8FB7BC2D9E1EC48
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e31392e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 25 Feb 2025 20:15:00 +0000
ROA not before:           Tue 25 Feb 2025 20:10:00 +0000
ROA not after:            Tue 24 Feb 2026 20:15:00 +0000
asID:                     262589
IP address blocks:        190.90.19.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 03 Mar 2025 19:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:10:cb:61:76:b1:c9:ea:88:30:08:d7:d8:fb:7b:c2:d9:e1:ec:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 25 20:10:00 2025 GMT
            Not After : Feb 24 20:15:00 2026 GMT
        Subject: CN=BBD7528BF36D5641446B1CD86907C558758819B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f5:0d:ab:f2:fb:ed:4d:c8:8a:2f:6e:ad:d8:
                    2d:76:62:f4:af:b0:34:f2:cc:5b:ae:3a:66:8e:1b:
                    d8:3d:d4:26:43:fd:e8:f8:83:63:21:d7:ae:c5:be:
                    89:86:11:a4:f2:5c:26:a2:c5:98:e3:58:b0:ef:6b:
                    f3:8f:15:7f:c5:5c:d9:e6:e3:58:cf:e6:85:1e:dd:
                    6e:37:cc:fa:4f:0c:df:c8:ca:4c:1e:25:8c:0a:3c:
                    fa:93:07:31:de:1b:9b:06:af:ff:79:2b:e2:9b:3f:
                    7d:c9:7e:88:8f:61:5b:a8:d1:6f:8a:8e:3c:a6:b1:
                    4d:80:00:a4:56:b5:43:a5:8b:cf:16:af:f9:c1:33:
                    41:5c:d8:c2:56:7c:b2:e2:ce:9e:5d:87:2a:d2:f6:
                    a9:a3:88:0d:95:4d:e7:1c:44:78:db:d6:6f:ab:b7:
                    f6:de:e0:a9:50:6c:d2:82:fe:e4:f1:8c:15:d4:9b:
                    db:b0:51:e9:aa:63:68:0a:9d:b5:a1:8e:33:f1:fe:
                    f1:9c:dd:7f:0e:ed:49:6b:cf:77:ea:94:c5:69:84:
                    ca:6e:3c:c7:08:0a:59:a8:9b:45:b9:64:3c:a0:5d:
                    c5:43:b7:4d:f4:f3:e5:16:4c:9e:83:cd:38:cd:68:
                    8d:58:37:dc:88:cd:ea:8e:01:06:85:19:ad:37:fe:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D7:52:8B:F3:6D:56:41:44:6B:1C:D8:69:07:C5:58:75:88:19:B2
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e31392e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:e8:a6:b1:b9:c7:0a:60:57:08:d3:5b:59:7d:d2:9b:dd:cb:
         d9:3d:a1:35:76:cb:b7:c2:d1:6a:f4:c8:bd:f9:b8:b3:30:19:
         86:84:70:25:b9:6e:c8:8c:6f:3b:36:80:66:cd:a5:c4:73:00:
         4d:50:92:30:14:e2:55:3f:4d:54:cf:40:41:c9:38:58:80:b8:
         38:d5:0d:9b:31:39:65:f3:80:99:c8:dd:96:77:9a:e6:90:10:
         7f:ad:90:c2:4e:54:eb:c9:f2:5e:71:20:7c:ff:0d:3b:52:07:
         44:7b:f8:98:f7:cd:59:4a:4a:13:57:67:90:cf:27:00:07:72:
         f2:ad:94:0d:06:1b:03:31:ae:97:f3:d8:d9:d8:9e:b2:73:dd:
         d1:91:24:2a:05:b9:d1:65:59:e8:0c:45:ee:ae:25:ae:06:03:
         d4:a9:9b:9b:8f:64:ba:63:86:3a:65:c9:dc:68:0f:20:71:5d:
         32:1c:d5:54:6a:ec:d8:48:26:83:c5:09:52:cf:4e:fa:d1:2f:
         95:88:3d:65:08:81:96:7f:79:e0:5e:6c:cc:79:75:e6:ef:84:
         d1:01:42:3d:16:c5:31:f2:71:f3:71:4b:b4:52:58:70:f3:49:
         f3:55:25:43:5c:21:53:fa:32:94:6f:0d:17:72:67:00:b5:31:
         b1:c1:0b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----