Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232342e302f31392d3234203d3e20323632353839.roa
File:                     3139302e39302e3232342e302f31392d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          HKcRhtCJHyETgMAUXkPMwLWK0DPrDLxWOuUGP7G4JJA=
Subject key identifier:   65:BC:E2:48:0D:4E:F6:89:33:FD:9F:3B:89:32:CB:5C:D3:AE:D2:60
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       57036FAE4CE72ED58A2BC87CB1D9E3EAAD7A698A
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232342e302f31392d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:17:27 +0000
ROA not before:           Tue 04 Feb 2025 18:12:27 +0000
ROA not after:            Tue 03 Feb 2026 18:17:27 +0000
asID:                     262589
IP address blocks:        190.90.224.0/19 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Mar 2025 01:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:03:6f:ae:4c:e7:2e:d5:8a:2b:c8:7c:b1:d9:e3:ea:ad:7a:69:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:27 2025 GMT
            Not After : Feb  3 18:17:27 2026 GMT
        Subject: CN=65BCE2480D4EF68933FD9F3B8932CB5CD3AED260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:7f:ec:bd:a8:c1:c9:5b:5c:8e:8a:6b:b8:
                    04:0b:ed:37:d3:15:7a:2e:e4:a5:53:e6:6e:5d:82:
                    a0:ed:3c:b5:50:09:83:1d:a9:25:84:45:5a:ee:46:
                    48:37:d4:87:8c:00:d5:9e:9b:83:2d:50:06:ca:03:
                    71:49:28:60:d8:3a:7e:ec:75:23:85:0f:d6:f0:e5:
                    a3:46:37:c2:29:6f:64:4b:d5:c3:a2:de:ba:3a:52:
                    71:57:cc:10:4e:cf:d8:50:41:02:69:52:f2:a3:7e:
                    5c:58:31:77:58:63:40:7d:31:e7:92:75:62:fc:90:
                    41:a6:1d:81:b7:11:2c:45:40:fe:40:d1:79:d7:38:
                    74:c1:76:46:0d:44:a6:37:b1:25:f3:63:2b:10:3d:
                    82:88:70:a4:b0:f6:e1:9b:f6:65:21:89:e1:d6:94:
                    25:26:f9:e2:a1:59:27:6e:1d:c0:a5:83:2b:ff:db:
                    a6:2b:03:83:c0:b3:67:27:38:da:2f:e0:1f:20:40:
                    f1:36:82:2b:d9:cc:c5:54:b4:08:78:39:ff:6c:c6:
                    47:17:ed:73:1f:70:78:9d:00:34:ac:91:fb:fe:1b:
                    7a:ca:ac:fe:66:2b:d1:e0:81:f8:99:29:07:55:fb:
                    12:00:c9:dc:64:99:26:25:be:80:07:08:58:7f:52:
                    89:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BC:E2:48:0D:4E:F6:89:33:FD:9F:3B:89:32:CB:5C:D3:AE:D2:60
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232342e302f31392d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:24:16:e1:72:0c:44:16:ad:fb:ad:3f:ca:76:ac:67:cb:d5:
         3b:ae:d9:fb:ea:fd:f1:a4:2a:a3:a0:0d:f1:aa:9b:9b:f0:14:
         03:df:3e:f9:78:4a:9d:81:8e:da:ad:ec:c3:31:8c:ba:96:13:
         d9:01:cb:32:c9:06:6a:56:70:71:9f:6f:72:1b:70:fa:65:d0:
         ea:4d:5c:31:7d:8f:92:71:64:28:b5:11:23:00:0c:51:6a:a7:
         93:d9:04:e3:48:7c:48:30:2d:de:18:67:4f:13:21:57:c8:9f:
         6a:06:50:4f:14:5c:3e:f3:d2:b6:44:92:5b:56:95:c7:70:12:
         b2:a3:79:63:3c:e6:39:94:0f:47:dc:45:53:f6:ca:fa:7a:e1:
         16:bf:90:82:c1:f1:56:0f:de:72:7d:c1:83:47:e1:03:02:8c:
         12:7b:83:b4:88:7c:06:a9:5e:a9:dd:66:02:87:0a:42:0f:21:
         d6:49:fe:b8:a6:7e:79:fe:40:bf:94:e9:34:6d:bc:f6:5d:1d:
         71:2a:d1:89:e1:ac:e1:6e:33:6a:79:89:60:7d:06:95:cf:5e:
         8a:2c:60:cc:d0:b9:94:1f:2c:d1:41:d1:23:f0:84:7a:3e:72:
         59:9e:34:1e:69:9f:12:a5:0a:af:e7:7c:ef:62:fd:13:02:60:
         d5:1c:df:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:08 2025 by rpki-client