Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137302e38322e3138382e302f32322d3233203d3e203237393031.roa
File:                     3137302e38322e3138382e302f32322d3233203d3e203237393031.roa (raw, json)
Hash identifier:          jF0yr0vSgRfNZ5VnCE4oQeVfsnGUdUV3nJE4ekwbNHY=
Subject key identifier:   52:A9:29:D4:B1:88:86:2B:21:E2:9C:00:7F:DB:55:AC:2A:84:9A:86
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       10903CE2EE28041176C9725165A827DEED3CD36E
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137302e38322e3138382e302f32322d3233203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:42 +0000
ROA not before:           Tue 05 Mar 2024 17:37:42 +0000
ROA not after:            Tue 04 Mar 2025 17:42:42 +0000
asID:                     27901
IP address blocks:        170.82.188.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:90:3c:e2:ee:28:04:11:76:c9:72:51:65:a8:27:de:ed:3c:d3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:42 2024 GMT
            Not After : Mar  4 17:42:42 2025 GMT
        Subject: CN=52A929D4B188862B21E29C007FDB55AC2A849A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:8d:87:ba:d8:8a:ae:e0:ce:ab:f4:2a:62:
                    a0:15:fb:07:a3:a4:09:4e:22:d4:14:74:48:ad:e7:
                    81:78:78:85:df:81:8f:52:ec:a0:02:c3:07:58:d7:
                    54:24:a7:99:e4:79:3b:b2:52:0c:9e:1a:56:e4:60:
                    2b:8c:69:ce:3b:e8:63:14:ea:9f:8b:1e:d6:5f:f3:
                    8e:e7:14:da:52:9f:18:6e:41:9a:76:2a:68:46:a4:
                    04:34:f7:d6:84:79:57:56:7e:fe:2e:04:ad:a8:04:
                    2c:90:e2:97:ce:5d:91:10:91:46:4d:8e:42:5e:7f:
                    0c:d1:b9:48:1f:66:2f:2b:90:38:3e:d6:26:e6:6b:
                    91:4a:66:81:a0:23:e1:ab:5c:e2:3b:95:17:39:19:
                    0c:a3:1f:5c:6d:9e:40:83:3a:9d:c3:51:b1:58:1e:
                    bb:0b:64:14:41:f5:65:de:7c:a7:24:3c:5e:ca:45:
                    03:17:49:ac:77:c2:f6:09:ab:1b:fa:75:4c:e1:7e:
                    15:64:6d:f4:89:33:7f:1c:8f:7f:f4:a2:09:52:5d:
                    83:a3:a3:8f:5d:1f:87:95:20:ac:94:0f:3b:b9:23:
                    ea:ad:04:fd:6c:9c:43:5e:17:73:5b:87:1d:9d:0e:
                    ab:a1:e4:58:be:c2:c3:f4:d6:d7:00:31:63:90:0f:
                    14:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A9:29:D4:B1:88:86:2B:21:E2:9C:00:7F:DB:55:AC:2A:84:9A:86
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137302e38322e3138382e302f32322d3233203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:cc:9b:91:da:a5:80:2a:8a:ec:4e:b0:4a:84:81:ec:c8:c4:
         7e:84:55:f3:61:bf:02:16:29:c4:94:4d:66:4d:8f:8e:eb:98:
         de:d0:7c:7b:b4:2b:50:67:e0:23:7a:75:39:1a:de:65:f5:d1:
         16:24:b1:2d:37:05:22:db:50:80:62:c3:24:25:94:90:57:0d:
         48:62:fa:cd:d7:43:8c:26:cc:0c:08:cd:00:2c:ab:dc:da:d5:
         f0:3f:cd:ef:07:9b:37:be:78:f7:14:e8:0a:a1:d4:68:ef:94:
         b7:0d:fc:40:72:13:e0:b5:63:8b:f0:13:aa:67:ee:38:e9:d8:
         03:38:6a:86:ec:30:18:9e:8e:ec:38:b3:4f:7c:b8:20:e9:72:
         ac:c2:1a:09:ad:bc:01:72:e0:49:6d:59:52:8f:75:ad:06:a5:
         64:d7:95:c5:85:89:36:be:58:3f:57:a2:40:33:11:bb:1c:87:
         4b:56:f9:48:a5:3e:1e:9a:03:85:6e:92:50:d9:ac:14:bd:8a:
         4e:19:e8:be:71:f7:63:c6:f4:4c:cb:c9:21:2f:56:d9:ba:eb:
         7e:29:c7:e2:37:39:74:12:89:9a:cd:68:23:3c:fc:8b:79:df:
         9d:13:fe:35:9f:3f:b9:8a:65:74:c5:f6:b9:63:f8:07:0e:5c:
         4a:97:2a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org