Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137392e36302e36342e302f31392d3139203d3e203237393031.roa
File:                     3137392e36302e36342e302f31392d3139203d3e203237393031.roa (raw, json)
Hash identifier:          3CP1GtZW7001KyUD6blfCpC794Ww4XW0BInA90wKS3c=
Subject key identifier:   A3:F0:7B:F4:F6:A1:61:36:91:28:CF:7D:03:6A:B7:4A:AA:AF:F3:C7
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       5B6E0C25E80FF28805CD92A5D10D70F6CE5F434D
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137392e36302e36342e302f31392d3139203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:46 +0000
ROA not before:           Tue 05 Mar 2024 17:37:46 +0000
ROA not after:            Tue 04 Mar 2025 17:42:46 +0000
asID:                     27901
IP address blocks:        179.60.64.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6e:0c:25:e8:0f:f2:88:05:cd:92:a5:d1:0d:70:f6:ce:5f:43:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:46 2024 GMT
            Not After : Mar  4 17:42:46 2025 GMT
        Subject: CN=A3F07BF4F6A161369128CF7D036AB74AAAAFF3C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:05:53:3f:b3:d6:c8:de:fa:27:0e:2d:ad:
                    d6:29:d9:ee:b0:ba:1a:ad:e1:e7:a4:c5:df:b2:73:
                    35:59:0a:c5:67:bb:1d:5a:b1:ca:29:2d:c2:61:f4:
                    4b:70:b7:37:75:86:59:61:ab:50:58:21:78:f8:dc:
                    c0:39:34:75:f1:91:a3:45:c0:df:89:3f:4a:1b:0f:
                    b9:8f:26:b5:46:14:6e:9c:a7:1d:1f:9f:94:01:52:
                    68:e5:42:2f:d5:a4:95:95:1c:39:af:2b:89:cb:47:
                    20:f9:4c:25:ae:96:f0:c5:1e:f4:29:90:29:eb:9f:
                    03:d8:89:30:cf:7a:9b:e6:64:b4:5f:b8:b3:25:37:
                    1e:04:ef:ed:a6:d4:04:af:c2:88:e0:f0:30:ba:6a:
                    52:17:5a:fa:67:ef:de:b7:11:7a:ce:7a:56:df:cf:
                    6b:b0:e3:e5:7e:77:61:c2:b7:e7:56:fc:24:8c:6a:
                    1b:af:c0:f1:55:4e:dc:9c:60:81:c3:56:14:a2:1c:
                    79:21:91:55:19:5b:8a:10:bf:63:bc:81:57:16:bf:
                    91:59:75:0d:82:e5:5d:1f:ce:33:e8:ef:34:6e:31:
                    b9:02:a6:57:16:53:e3:a6:b1:a1:0c:44:4f:a5:ba:
                    d1:b8:b3:23:05:39:4b:88:0e:e9:89:c7:cd:e4:5d:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F0:7B:F4:F6:A1:61:36:91:28:CF:7D:03:6A:B7:4A:AA:AF:F3:C7
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137392e36302e36342e302f31392d3139203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b0:4f:33:25:de:ae:e8:4f:1d:41:2b:14:ff:9e:cb:21:ae:53:
         24:01:d9:0b:fe:70:93:be:56:27:5f:d9:21:27:e7:af:95:79:
         35:17:f5:01:7b:4c:b3:2e:d6:59:cd:d9:db:2c:16:f2:da:fd:
         79:b1:fa:2e:bb:ac:a3:90:a8:4c:41:6f:d6:36:96:37:c5:fd:
         3e:81:bb:5a:c7:ce:ab:8d:73:8f:f3:09:ef:6a:74:69:96:3e:
         e5:b5:b7:8e:8b:be:9e:3d:2d:62:82:b5:21:52:44:02:ea:66:
         34:7d:22:b7:d7:17:1d:cb:a3:4f:11:b8:b1:0c:fb:d1:1e:fd:
         8c:8f:eb:18:b2:33:67:8d:2e:2a:c7:21:74:39:31:a7:2a:a0:
         2b:4a:08:45:3a:c7:53:d9:a6:41:68:93:a7:f8:a3:30:f3:e1:
         b7:3e:1e:a9:6c:54:14:ae:cb:c3:be:4d:5a:bb:ad:65:54:f7:
         d1:42:ad:e9:10:1e:38:f6:d7:e8:ba:9e:3a:c5:b4:53:ad:6e:
         ac:d8:a3:fe:d3:7a:91:93:21:8c:2a:12:6b:67:30:f8:b1:04:
         a9:0d:0e:b7:54:9a:72:22:29:7d:b8:eb:31:1e:0b:95:77:1d:
         db:10:bd:b3:31:23:88:5f:7c:95:cd:e1:18:aa:c6:24:56:bd:
         37:50:61:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-ams.rpki-client.org