Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e39332e302f32342d3234203d3e203138363738.roa
File:                     3139302e39302e39332e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          VCKKjKdt1veLAKOG9Pcb4dm8n/3zHdleYDGrJTJw0PM=
Subject key identifier:   1D:B8:0A:80:73:9A:BE:13:69:A5:BD:2E:15:DF:C5:68:3C:E0:5C:C3
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       33E64CD952587FCFEFCB9D66D3CCB90F08DF7463
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e39332e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 05 Mar 2024 18:00:34 +0000
ROA not before:           Tue 05 Mar 2024 17:55:34 +0000
ROA not after:            Tue 04 Mar 2025 18:00:34 +0000
asID:                     18678
IP address blocks:        190.90.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e6:4c:d9:52:58:7f:cf:ef:cb:9d:66:d3:cc:b9:0f:08:df:74:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:34 2024 GMT
            Not After : Mar  4 18:00:34 2025 GMT
        Subject: CN=1DB80A80739ABE1369A5BD2E15DFC5683CE05CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:fd:38:6f:49:87:ad:c3:6a:6d:ea:14:36:
                    b3:b8:a3:12:af:97:40:00:d2:e9:9e:5b:1a:a0:3e:
                    5d:78:1e:74:24:47:e0:7b:b6:3e:54:e1:cb:07:12:
                    6a:1c:51:89:02:2c:1b:18:fa:d0:63:9c:47:06:f1:
                    01:c8:56:1a:97:23:78:62:b6:c6:b5:43:71:42:b5:
                    17:0b:b7:99:76:ed:f7:34:de:13:f3:cf:5e:dc:e1:
                    12:a2:c1:7a:20:24:fb:83:66:45:a6:fa:c3:5e:6c:
                    0d:fc:29:09:85:a3:9b:b1:59:62:f0:5a:ec:b5:b2:
                    52:75:1c:85:a2:a5:20:d5:1e:d0:1b:2e:03:ec:f9:
                    84:46:05:5e:89:61:50:3c:e3:24:f0:28:4c:47:30:
                    67:ec:9a:4a:0b:c3:52:5d:ed:50:44:07:f0:6f:4c:
                    bb:d2:f8:39:70:d8:02:26:b3:27:b5:58:c6:f2:ec:
                    cb:6d:e4:6c:b1:12:74:66:19:73:05:34:78:eb:6c:
                    2e:7c:c1:f5:3a:8c:e9:f7:41:f9:12:2c:e0:f7:a4:
                    30:12:cc:73:e8:5a:43:3e:04:6f:ad:11:47:e9:30:
                    61:0d:72:84:33:d1:ba:1e:9e:2e:64:fd:aa:aa:74:
                    b2:1c:5f:68:0f:a7:44:a0:80:72:f4:08:07:43:a7:
                    93:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B8:0A:80:73:9A:BE:13:69:A5:BD:2E:15:DF:C5:68:3C:E0:5C:C3
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e39332e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:81:9a:51:43:32:d1:04:aa:04:ba:c7:1d:05:26:68:2b:c3:
         aa:77:fe:9e:34:42:b8:fa:12:d6:36:e6:25:26:9d:32:14:d7:
         33:06:b4:bc:c7:8e:8a:4c:a1:fb:e4:10:1d:ba:d9:a7:34:11:
         fe:0e:57:59:86:1a:9f:29:a8:f0:a1:d0:a5:20:3e:2d:95:08:
         74:b2:b8:f1:0b:64:4c:69:70:90:3f:29:e2:ad:a6:34:64:45:
         3a:2d:f4:30:9f:18:83:30:6c:df:40:85:97:1d:ee:bb:67:24:
         0e:db:49:b6:62:c3:af:90:f2:0b:ca:76:b6:db:dc:d4:b5:d4:
         4f:97:5c:30:b6:27:59:7d:ca:2d:6e:1a:31:d5:3d:4c:eb:01:
         6d:c0:1f:c8:30:5e:65:6c:5f:a0:bf:33:2a:8e:03:e5:8a:77:
         f1:90:57:30:06:a2:8a:ed:63:7b:cf:e8:1b:a3:67:c5:9e:8b:
         e9:0d:1a:f2:91:40:aa:8b:21:32:21:ad:3d:4d:a1:b3:72:45:
         50:ac:56:57:33:82:b8:4f:72:1d:af:e0:d5:e6:bb:52:7d:ae:
         af:3f:3f:95:39:f9:8f:fe:f5:44:f2:68:94:08:ce:92:49:fd:
         46:b7:ce:79:ae:68:76:4e:ed:1d:6e:e7:57:c7:22:0b:17:49:
         54:46:34:6a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUM+ZM2VJYf8/vy51m08y5DwjfdGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNDAzMDUxNzU1MzRaFw0yNTAzMDQxODAwMzRaMDMxMTAvBgNV
BAMTKDFEQjgwQTgwNzM5QUJFMTM2OUE1QkQyRTE1REZDNTY4M0NFMDVDQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Y/04b0mHrcNqbeoUNrO4oxKv
l0AA0umeWxqgPl14HnQkR+B7tj5U4csHEmocUYkCLBsY+tBjnEcG8QHIVhqXI3hi
tsa1Q3FCtRcLt5l27fc03hPzz17c4RKiwXogJPuDZkWm+sNebA38KQmFo5uxWWLw
Wuy1slJ1HIWipSDVHtAbLgPs+YRGBV6JYVA84yTwKExHMGfsmkoLw1Jd7VBEB/Bv
TLvS+Dlw2AImsye1WMby7Mtt5GyxEnRmGXMFNHjrbC58wfU6jOn3QfkSLOD3pDAS
zHPoWkM+BG+tEUfpMGENcoQz0boeni5k/aqqdLIcX2gPp0SggHL0CAdDp5MDAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUHbgKgHOavhNppb0uFd/FaDzgXMMwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzkzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzgzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+Wl0wDQYJ
KoZIhvcNAQELBQADggEBAHaBmlFDMtEEqgS6xx0FJmgrw6p3/p40Qrj6EtY25iUm
nTIU1zMGtLzHjopMofvkEB262ac0Ef4OV1mGGp8pqPCh0KUgPi2VCHSyuPELZExp
cJA/KeKtpjRkRTot9DCfGIMwbN9AhZcd7rtnJA7bSbZiw6+Q8gvKdrbb3NS11E+X
XDC2J1l9yi1uGjHVPUzrAW3AH8gwXmVsX6C/MyqOA+WKd/GQVzAGoortY3vP6Buj
Z8Wei+kNGvKRQKqLITIhrT1NobNyRVCsVlczgrhPch2v4NXmu1J9rq8/P5U5+Y/+
9UTyaJQIzpJJ/Ua3znmuaHZO7R1u51fHIgsXSVRGNGo=
-----END CERTIFICATE-----
Generated at Mon Jul 15 18:31:49 2024 by rpki-client on console-ams.rpki-client.org