Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/3139302e38332e37382e302f32332d3233203d3e20323639393534.roa
File:                     3139302e38332e37382e302f32332d3233203d3e20323639393534.roa (raw, json)
Hash identifier:          YOhn92XevIAN/a9vO3lIBZZTQ5GVVVr/ieRfM15ASNI=
Subject key identifier:   6E:80:65:E1:8F:D6:06:EE:10:34:6E:CE:22:CD:AC:8F:C8:0F:3F:9E
Certificate issuer:       /CN=A597442BE252949C19F9D69F7BF6A9CDDB54134B
Certificate serial:       7A83EC592BCEC5BA9348409142490C1A3D702BE6
Authority key identifier: A5:97:44:2B:E2:52:94:9C:19:F9:D6:9F:7B:F6:A9:CD:DB:54:13:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/3139302e38332e37382e302f32332d3233203d3e20323639393534.roa
Signing time:             Fri 07 Mar 2025 14:40:00 +0000
ROA not before:           Fri 07 Mar 2025 14:35:00 +0000
ROA not after:            Fri 06 Mar 2026 14:40:00 +0000
asID:                     269954
IP address blocks:        190.83.78.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Sun 09 Mar 2025 01:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:83:ec:59:2b:ce:c5:ba:93:48:40:91:42:49:0c:1a:3d:70:2b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A597442BE252949C19F9D69F7BF6A9CDDB54134B
        Validity
            Not Before: Mar  7 14:35:00 2025 GMT
            Not After : Mar  6 14:40:00 2026 GMT
        Subject: CN=6E8065E18FD606EE10346ECE22CDAC8FC80F3F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f2:f7:a9:a1:22:e7:a0:6d:af:a2:ea:24:96:
                    12:2f:40:8b:12:80:f2:e7:c7:fa:17:58:67:64:51:
                    7b:e4:11:c5:64:53:29:f7:8c:90:09:19:52:a4:bf:
                    92:13:b2:8c:8c:bf:a2:7f:c1:fd:3a:52:61:11:62:
                    7e:13:bd:1d:29:28:e3:c1:49:c9:52:f7:98:56:fa:
                    a1:4c:f0:6b:fc:fd:df:b5:33:56:31:c4:de:cd:b5:
                    12:93:71:6f:93:fb:b6:99:67:ad:a7:13:3d:a1:87:
                    ac:11:91:28:8f:65:ab:44:cb:58:1b:0e:03:72:9e:
                    fc:d5:c6:99:55:c8:c7:77:9a:99:f5:cf:9d:13:0b:
                    2a:b5:94:69:e5:d8:1a:86:40:16:8c:2f:d5:0b:95:
                    4e:e5:0b:77:d8:c4:b2:24:76:a5:2f:54:fb:fa:4e:
                    14:1f:67:b6:2d:85:1c:d9:f9:24:c2:29:9c:2f:6d:
                    ba:1e:ac:52:e2:58:30:a7:24:cf:d3:34:a5:82:57:
                    ce:88:9a:cd:86:de:3e:cb:63:71:a6:93:66:d3:ca:
                    73:4b:08:b5:87:47:ba:27:52:6e:cb:f0:cd:cd:60:
                    9c:59:e4:64:04:a5:03:17:3f:d5:f2:e8:3f:19:d9:
                    53:45:74:50:9d:dd:29:67:c2:d8:07:74:23:63:02:
                    ec:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:80:65:E1:8F:D6:06:EE:10:34:6E:CE:22:CD:AC:8F:C8:0F:3F:9E
            X509v3 Authority Key Identifier:
                keyid:A5:97:44:2B:E2:52:94:9C:19:F9:D6:9F:7B:F6:A9:CD:DB:54:13:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/3139302e38332e37382e302f32332d3233203d3e20323639393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:fc:3b:48:26:d5:2f:0a:f4:3a:a6:2e:e4:ed:f2:69:3e:0f:
         7b:eb:d0:13:d6:f1:5f:ed:f0:85:91:2d:21:56:ba:6d:40:5e:
         a3:71:29:13:8d:d3:a8:62:f8:c8:51:82:c5:c2:80:ba:e6:76:
         b2:48:71:da:40:c5:8c:0d:fe:5c:12:6c:a1:d5:2e:69:91:c0:
         39:79:fa:d4:0e:9e:db:45:c7:a5:f7:f0:48:84:cf:dd:68:1c:
         0a:a8:cd:71:51:2a:0f:34:06:ef:21:ba:8f:18:59:37:21:35:
         b8:07:25:3c:e0:0b:ae:91:49:07:cd:0b:60:6a:15:35:53:53:
         8b:0a:a2:7a:4f:1a:1f:3b:91:78:1a:d7:cd:03:c7:50:4b:af:
         79:e0:79:b2:9d:15:55:b7:33:5b:06:42:d0:6d:c7:b7:d1:d3:
         18:d4:d0:52:f8:8a:23:ae:9c:50:2e:43:21:06:53:6f:8e:79:
         80:a2:3a:10:fb:fc:90:ca:05:70:ac:1a:fa:c4:f3:5e:49:cf:
         51:3b:db:9a:2b:2c:42:93:89:f3:1f:ad:84:29:d4:d6:28:1b:
         ab:33:3b:4e:0d:0b:40:88:e6:e5:e5:c8:fc:ba:7f:4c:6c:d6:
         1f:33:de:eb:af:20:81:03:77:fa:6a:9e:34:64:3c:1f:be:fa:
         3b:17:a7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:55:00 2025 by rpki-client