Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/3139302e38332e37382e302f32332d3234203d3e203138373437.roa
File:                     3139302e38332e37382e302f32332d3234203d3e203138373437.roa (raw, json)
Hash identifier:          +M7BziagpjzRWCP8dL9ThDiXEGtF19tGndHNKEF9+u8=
Subject key identifier:   61:ED:4D:6D:69:FF:AC:84:2F:60:84:B9:57:B5:07:D6:32:DD:3F:B1
Certificate issuer:       /CN=A597442BE252949C19F9D69F7BF6A9CDDB54134B
Certificate serial:       7071E70F081EE36EE525566AD5B5F45EA9C0593C
Authority key identifier: A5:97:44:2B:E2:52:94:9C:19:F9:D6:9F:7B:F6:A9:CD:DB:54:13:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/3139302e38332e37382e302f32332d3234203d3e203138373437.roa
Signing time:             Sun 09 Mar 2025 01:30:00 +0000
ROA not before:           Sun 09 Mar 2025 01:25:00 +0000
ROA not after:            Sun 08 Mar 2026 01:30:00 +0000
asID:                     18747
IP address blocks:        190.83.78.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Sun 09 Mar 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:71:e7:0f:08:1e:e3:6e:e5:25:56:6a:d5:b5:f4:5e:a9:c0:59:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A597442BE252949C19F9D69F7BF6A9CDDB54134B
        Validity
            Not Before: Mar  9 01:25:00 2025 GMT
            Not After : Mar  8 01:30:00 2026 GMT
        Subject: CN=61ED4D6D69FFAC842F6084B957B507D632DD3FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:d7:76:91:8d:d6:83:12:27:dd:3d:d4:2b:
                    d0:5d:07:78:03:73:c0:0e:6c:6d:de:f0:77:c1:00:
                    fb:d7:ae:8a:e7:12:25:b6:21:2d:94:d0:84:7f:38:
                    90:ee:1f:a8:ae:9c:5c:c8:0c:ef:39:d1:35:f6:24:
                    45:64:3e:b2:1b:8d:84:b9:6c:ce:53:50:24:e9:26:
                    e1:42:c4:ed:66:ab:41:5f:25:c2:1c:7b:1f:41:32:
                    e2:dc:fa:95:3d:8e:dc:30:20:c5:76:ac:66:d8:fb:
                    b8:d5:42:23:02:9b:bd:fb:41:a4:83:16:32:53:67:
                    23:7a:1b:c6:b2:ed:9e:8e:13:d8:98:c8:b7:1f:b0:
                    31:a0:e7:10:ef:1a:6e:e2:2b:75:c1:a7:36:0a:ca:
                    3c:0a:f9:5a:46:44:68:f8:9e:ad:90:6d:34:64:0d:
                    c9:40:0f:46:ab:a0:58:65:f0:aa:12:c6:6f:06:c3:
                    05:85:77:a6:60:1d:a0:cd:f6:d0:12:01:da:c4:e5:
                    33:c1:ae:b6:33:93:b4:70:a5:f9:2f:ae:e7:8f:e8:
                    09:db:dd:b2:77:70:89:80:54:f1:60:5b:a7:e9:68:
                    ef:38:a6:eb:a6:6d:af:df:8c:5a:b8:cd:ed:1d:22:
                    da:e9:77:d4:3c:68:7d:fe:c5:bc:b5:a9:c9:78:81:
                    f1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:ED:4D:6D:69:FF:AC:84:2F:60:84:B9:57:B5:07:D6:32:DD:3F:B1
            X509v3 Authority Key Identifier:
                keyid:A5:97:44:2B:E2:52:94:9C:19:F9:D6:9F:7B:F6:A9:CD:DB:54:13:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/3139302e38332e37382e302f32332d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:75:63:45:4c:eb:4a:d9:bb:2e:eb:29:72:60:3e:62:0d:c5:
         13:52:c5:a9:76:3a:eb:68:be:ff:54:b2:a3:f2:53:40:13:c6:
         7d:10:c2:6e:ec:7c:60:fd:ff:cb:9f:de:b9:8c:dd:0a:6d:13:
         25:ab:3d:9e:ab:91:72:f9:cd:71:11:22:2f:16:6b:7c:3b:23:
         6e:e4:35:65:15:f0:6c:fa:7b:be:ac:8a:97:74:ea:51:32:bb:
         6a:5d:fd:2e:03:30:0e:8e:ed:8c:12:d6:b6:4a:88:a9:e1:bb:
         8a:c5:b7:89:77:10:5a:9b:74:e1:97:48:93:5e:e3:ee:58:9b:
         22:8b:8c:e4:4e:42:ba:c1:78:d7:1d:0e:fa:f3:8d:df:46:04:
         53:ca:13:5f:5e:99:ab:c4:10:00:18:f9:77:98:0e:a6:46:b4:
         da:97:be:37:03:91:6e:7e:73:ff:be:5c:72:f5:f4:6a:78:21:
         78:cc:9a:84:58:37:d6:36:fa:6f:f0:2a:7b:d6:cd:86:89:27:
         e4:46:92:51:6e:76:ea:0c:04:31:66:7c:3a:29:26:2d:39:3a:
         96:b1:c3:05:2f:12:66:1e:98:b4:47:eb:91:66:c8:c7:02:1e:
         87:8a:eb:7b:57:24:50:4e:d8:f9:9b:3c:72:17:e8:1c:86:46:
         9b:55:bf:46
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUcHHnDwge427lJVZq1bX0XqnAWTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU5NzQ0MkJFMjUyOTQ5QzE5RjlENjlGN0JGNkE5Q0RE
QjU0MTM0QjAeFw0yNTAzMDkwMTI1MDBaFw0yNjAzMDgwMTMwMDBaMDMxMTAvBgNV
BAMTKDYxRUQ0RDZENjlGRkFDODQyRjYwODRCOTU3QjUwN0Q2MzJERDNGQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5Nd2kY3WgxIn3T3UK9BdB3gD
c8AObG3e8HfBAPvXrornEiW2IS2U0IR/OJDuH6iunFzIDO850TX2JEVkPrIbjYS5
bM5TUCTpJuFCxO1mq0FfJcIcex9BMuLc+pU9jtwwIMV2rGbY+7jVQiMCm737QaSD
FjJTZyN6G8ay7Z6OE9iYyLcfsDGg5xDvGm7iK3XBpzYKyjwK+VpGRGj4nq2QbTRk
DclAD0aroFhl8KoSxm8GwwWFd6ZgHaDN9tASAdrE5TPBrrYzk7RwpfkvrueP6Anb
3bJ3cImAVPFgW6fpaO84puumba/fjFq4ze0dItrpd9Q8aH3+xby1qcl4gfFzAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUYe1NbWn/rIQvYIS5V7UH1jLdP7EwHwYDVR0j
BBgwFoAUpZdEK+JSlJwZ+dafe/apzdtUE0swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMjAzOTEwMzk3MDFDNzkzNDZCNzZGQjEwRUFCNkY0NzE3
RUE3MUVEMTI1Q0NGRTlCOTU3NDRDRjAzNDBDOTE5LzAvQTU5NzQ0MkJFMjUyOTQ5
QzE5RjlENjlGN0JGNkE5Q0REQjU0MTM0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTk3NDQyQkUyNTI5NDlDMTlG
OUQ2OUY3QkY2QTlDRERCNTQxMzRCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjIwMzkxMDM5NzAxQzc5MzQ2Qjc2RkIxMEVBQjZGNDcxN0VBNzFFRDEy
NUNDRkU5Qjk1NzQ0Q0YwMzQwQzkxOS8wLzMxMzkzMDJlMzgzMzJlMzczODJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzgzNzM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+U04wDQYJ
KoZIhvcNAQELBQADggEBAJx1Y0VM60rZuy7rKXJgPmINxRNSxal2Outovv9UsqPy
U0ATxn0Qwm7sfGD9/8uf3rmM3QptEyWrPZ6rkXL5zXERIi8Wa3w7I27kNWUV8Gz6
e76sipd06lEyu2pd/S4DMA6O7YwS1rZKiKnhu4rFt4l3EFqbdOGXSJNe4+5YmyKL
jOROQrrBeNcdDvrzjd9GBFPKE19emavEEAAY+XeYDqZGtNqXvjcDkW5+c/++XHL1
9Gp4IXjMmoRYN9Y2+m/wKnvWzYaJJ+RGklFuduoMBDFmfDopJi05OpaxwwUvEmYe
mLRH65FmyMcCHoeK63tXJFBO2PmbPHIX6ByGRptVv0Y=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:06:26 2025 by rpki-client