Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137302e38322e3139302e302f32342d3234203d3e203237393031.roa
File:                     3137302e38322e3139302e302f32342d3234203d3e203237393031.roa (raw, json)
Hash identifier:          yFTuPT+zNJWGjegLntXByn9G18nJAby9+1DC/tmIpQM=
Subject key identifier:   88:F6:89:44:5B:9A:C6:35:6E:1E:A5:04:60:3F:0B:77:4C:7A:5A:B1
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       45D7AACA598510BB90AB3EEA75DBDE1FDB609D18
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137302e38322e3139302e302f32342d3234203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:39 +0000
ROA not before:           Tue 05 Mar 2024 17:37:39 +0000
ROA not after:            Tue 04 Mar 2025 17:42:39 +0000
asID:                     27901
IP address blocks:        170.82.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d7:aa:ca:59:85:10:bb:90:ab:3e:ea:75:db:de:1f:db:60:9d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:39 2024 GMT
            Not After : Mar  4 17:42:39 2025 GMT
        Subject: CN=88F689445B9AC6356E1EA504603F0B774C7A5AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:13:67:8f:1a:b7:fa:15:6a:19:09:06:92:96:
                    d2:8f:64:4f:30:e7:a8:95:67:fb:e5:a2:d1:48:42:
                    35:e9:5f:4c:6c:da:65:d0:93:46:b1:be:06:0e:f9:
                    b8:13:63:3a:fc:6f:67:f7:6e:58:bd:73:d4:ec:76:
                    9d:45:3f:9e:f0:2b:92:0b:e1:78:d9:85:21:cd:dc:
                    07:0e:62:7a:0b:b5:e0:f9:cf:05:16:bc:d7:0e:16:
                    8f:72:34:28:90:a1:91:22:c7:35:85:4c:95:fc:5c:
                    e9:60:0b:07:75:b2:10:3d:0e:73:ab:88:5c:5b:f0:
                    de:16:9f:3a:13:90:a8:ac:7c:36:ff:aa:89:08:4c:
                    75:da:6b:08:8a:7d:da:e8:fa:b9:22:c6:37:eb:99:
                    54:32:29:d8:ce:56:66:ac:3a:e5:34:fe:17:0c:7e:
                    4b:34:a1:85:de:bc:85:cf:94:4f:b9:19:a7:5b:a9:
                    e8:bf:bf:5d:d8:f8:b1:0d:7c:af:53:e8:8d:07:9f:
                    6f:03:01:cb:34:5a:ee:3a:a9:4c:78:61:db:b7:92:
                    94:cd:58:4e:e0:ed:51:ab:51:97:e9:39:fe:06:6c:
                    4e:0c:e9:60:45:54:c7:1f:b3:07:d6:dc:14:cc:83:
                    20:6c:e8:eb:d8:1e:3f:8a:23:e1:90:b5:55:7d:cb:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F6:89:44:5B:9A:C6:35:6E:1E:A5:04:60:3F:0B:77:4C:7A:5A:B1
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137302e38322e3139302e302f32342d3234203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:77:35:ac:b9:a4:6f:a0:f5:ec:f3:40:a4:e5:49:b3:45:3a:
         1f:c5:b0:ed:c5:e6:5b:e9:16:58:07:d8:c6:56:f9:7b:d7:5d:
         97:e6:6f:22:44:f6:a4:d5:03:9a:38:a3:da:45:25:76:07:8f:
         a2:04:46:6a:8f:07:92:57:45:6a:bc:41:e5:03:5a:27:ac:3b:
         ea:58:c5:9a:71:27:4a:16:25:48:78:d2:60:ac:1a:04:97:66:
         63:ef:82:58:63:a5:2c:51:b9:6b:bf:db:0d:c6:f1:c8:ed:0a:
         0a:9f:40:90:d9:25:ad:e5:84:6f:06:c2:b0:70:a0:17:cb:1d:
         73:75:8b:df:47:f5:2a:b7:9c:54:2c:ec:79:d3:06:7d:dd:71:
         2b:67:cd:3a:2f:ed:b3:0f:18:4a:82:42:06:8f:19:bf:d6:1a:
         a0:3c:0e:b4:a0:ca:24:74:25:01:1a:24:cf:46:41:6b:ee:3f:
         f5:60:3c:b4:ea:50:87:10:4d:0c:30:8a:a4:f9:df:da:ff:66:
         8b:77:5c:69:93:8b:49:d3:f4:3b:19:a5:d3:5a:51:7c:38:0a:
         d6:83:ae:21:a3:68:d6:87:6e:81:bf:dc:20:6a:68:80:52:ce:
         52:94:1c:43:eb:42:39:8a:03:a0:7d:c6:33:37:65:15:a1:04:
         1f:54:8e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org