Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139332e302f32342d3234203d3e203138363738.roa
File:                     3139302e39302e3139332e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          YsXqTFQ3TG8okxjIYyTsLdYYMmWHMZAlFwxVyrtjNpw=
Subject key identifier:   A9:04:97:57:57:A4:73:14:E7:3C:90:B2:DE:19:40:95:E4:92:A6:B5
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       3F0248DD16168BCCFD0040794C745C7CFBA33306
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139332e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 05 Mar 2024 18:00:32 +0000
ROA not before:           Tue 05 Mar 2024 17:55:32 +0000
ROA not after:            Tue 04 Mar 2025 18:00:32 +0000
asID:                     18678
IP address blocks:        190.90.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:02:48:dd:16:16:8b:cc:fd:00:40:79:4c:74:5c:7c:fb:a3:33:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:32 2024 GMT
            Not After : Mar  4 18:00:32 2025 GMT
        Subject: CN=A904975757A47314E73C90B2DE194095E492A6B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:42:02:57:03:ff:76:40:71:69:06:da:1f:
                    15:d5:85:fe:af:11:b7:fb:c9:cf:e9:05:00:fc:7d:
                    16:bf:d5:79:6d:ef:b0:8c:f9:f6:3a:f2:51:2e:64:
                    ef:41:0c:f4:a6:3d:86:78:aa:fd:03:d4:f0:4d:ea:
                    aa:95:97:2d:c5:6f:9c:90:f5:8b:bd:f0:b7:79:ae:
                    00:0b:f6:d5:59:32:17:7e:a6:81:17:a3:71:55:f7:
                    24:11:96:37:10:11:73:aa:24:86:dd:c3:51:0f:d2:
                    08:7f:20:98:22:d0:4a:5a:1a:15:8a:18:0d:6d:86:
                    6b:ef:b9:f6:08:f8:10:7c:81:91:9c:a1:a5:87:5e:
                    25:a7:29:31:dc:16:55:24:ed:f8:51:ff:5d:ba:d7:
                    ef:c4:d9:cc:09:e1:2b:dc:7a:33:f7:dd:f9:70:52:
                    82:1f:c7:22:92:b7:32:86:9e:e3:3a:e4:ee:f8:15:
                    b4:62:50:01:9e:7b:69:d6:e9:d4:40:5d:c1:85:86:
                    a3:f3:2e:6a:ea:b5:d5:13:67:1d:5b:56:4b:9f:1c:
                    c0:43:e8:59:4a:5b:51:f6:24:b4:4c:a2:aa:7a:66:
                    ff:e8:18:e7:b6:bf:15:51:fd:8c:83:c0:f6:9d:30:
                    b2:80:05:ad:e1:d3:97:d4:d6:57:6e:39:62:a1:d6:
                    49:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:04:97:57:57:A4:73:14:E7:3C:90:B2:DE:19:40:95:E4:92:A6:B5
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139332e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f2:92:13:c2:79:cb:3c:73:11:ed:fb:d4:fd:44:6a:fc:9d:
         c0:b5:f6:67:e5:17:d6:f6:57:7c:3f:bd:90:a0:10:12:ae:57:
         ae:be:e5:61:30:cf:09:7b:83:da:c7:ea:84:2a:7b:89:63:5a:
         f8:72:16:80:ad:59:56:c7:05:f4:5e:c7:ec:da:c1:ac:d8:73:
         12:5d:9a:b9:b6:d4:37:65:a4:22:18:58:83:c7:d8:ba:ea:ec:
         78:13:88:75:36:e3:40:75:63:4e:7f:ca:c9:16:74:64:ae:d8:
         23:0f:8e:96:8f:9a:2e:59:77:41:26:a6:21:32:60:2d:c6:e3:
         1b:c9:44:47:c3:54:e6:bd:0b:18:3a:d0:8f:c4:98:21:99:5c:
         28:78:a7:14:cd:54:cb:5b:82:0f:d5:ef:c7:42:63:1d:9c:ce:
         95:9a:31:52:40:c0:fb:b7:df:74:40:2a:69:02:1f:97:55:40:
         2e:a6:7e:48:cc:1c:d4:a5:2b:b2:d8:0e:7c:4c:65:10:37:52:
         b9:f5:f8:05:9a:58:89:92:76:bd:8b:a2:42:9a:f3:79:47:1d:
         4f:0b:1d:7c:ff:4d:e4:ab:75:45:d5:b4:2b:65:47:3c:44:64:
         a7:41:b0:8e:8e:23:3d:ad:93:8d:aa:55:a8:a5:f2:36:ca:c8:
         c7:fc:4a:86
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPwJI3RYWi8z9AEB5THRcfPujMwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNDAzMDUxNzU1MzJaFw0yNTAzMDQxODAwMzJaMDMxMTAvBgNV
BAMTKEE5MDQ5NzU3NTdBNDczMTRFNzNDOTBCMkRFMTk0MDk1RTQ5MkE2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJDEICVwP/dkBxaQbaHxXVhf6v
Ebf7yc/pBQD8fRa/1Xlt77CM+fY68lEuZO9BDPSmPYZ4qv0D1PBN6qqVly3Fb5yQ
9Yu98Ld5rgAL9tVZMhd+poEXo3FV9yQRljcQEXOqJIbdw1EP0gh/IJgi0EpaGhWK
GA1thmvvufYI+BB8gZGcoaWHXiWnKTHcFlUk7fhR/1261+/E2cwJ4SvcejP33flw
UoIfxyKStzKGnuM65O74FbRiUAGee2nW6dRAXcGFhqPzLmrqtdUTZx1bVkufHMBD
6FlKW1H2JLRMoqp6Zv/oGOe2vxVR/YyDwPadMLKABa3h05fU1lduOWKh1kmLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqQSXV1ekcxTnPJCy3hlAleSSprUwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzEzOTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5awTAN
BgkqhkiG9w0BAQsFAAOCAQEAGvKSE8J5yzxzEe371P1EavydwLX2Z+UX1vZXfD+9
kKAQEq5Xrr7lYTDPCXuD2sfqhCp7iWNa+HIWgK1ZVscF9F7H7NrBrNhzEl2aubbU
N2WkIhhYg8fYuurseBOIdTbjQHVjTn/KyRZ0ZK7YIw+Olo+aLll3QSamITJgLcbj
G8lER8NU5r0LGDrQj8SYIZlcKHinFM1Uy1uCD9Xvx0JjHZzOlZoxUkDA+7ffdEAq
aQIfl1VALqZ+SMwc1KUrstgOfExlEDdSufX4BZpYiZJ2vYuiQprzeUcdTwsdfP9N
5Kt1RdW0K2VHPERkp0Gwjo4jPa2TjapVqKXyNsrIx/xKhg==
-----END CERTIFICATE-----
Generated at Mon Jul 15 18:57:40 2024 by rpki-client on console-fra.rpki-client.org