Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3130322e3232342e302f32302d3234203d3e203237393031.roa
File:                     3139302e3130322e3232342e302f32302d3234203d3e203237393031.roa (raw, json)
Hash identifier:          dkc2sn91MLg1SbUO60JTS3Suia4jH27wokIMI5fKLYY=
Subject key identifier:   2A:2D:21:A1:A0:F3:FB:59:75:1C:D6:75:31:AA:85:9A:C6:11:CF:08
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       2C69F3E6656501C21B2FA09703F612928F315AB0
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3130322e3232342e302f32302d3234203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:39 +0000
ROA not before:           Tue 05 Mar 2024 17:37:39 +0000
ROA not after:            Tue 04 Mar 2025 17:42:39 +0000
asID:                     27901
IP address blocks:        190.102.224.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:69:f3:e6:65:65:01:c2:1b:2f:a0:97:03:f6:12:92:8f:31:5a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:39 2024 GMT
            Not After : Mar  4 17:42:39 2025 GMT
        Subject: CN=2A2D21A1A0F3FB59751CD67531AA859AC611CF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:63:aa:7b:83:cc:e8:0c:ab:c2:b7:08:f5:2d:
                    47:be:12:4e:27:a0:0d:3d:53:84:2b:06:a1:0a:93:
                    a3:2c:b0:27:f1:cd:0b:08:71:d9:f8:22:91:eb:d9:
                    0f:a7:0e:83:15:22:17:18:54:96:1c:dc:1f:99:a5:
                    d8:be:d9:2a:80:71:65:0f:fe:e4:ff:34:ca:8f:cc:
                    c3:85:c2:b2:f6:f6:61:46:f3:ac:9c:56:a7:8d:86:
                    97:c0:f2:43:0b:58:f7:2e:b2:cc:98:b3:d8:e1:09:
                    3e:55:54:cb:02:5b:c0:27:27:e1:91:4d:cb:b6:91:
                    4a:49:f1:8c:ba:b3:4d:2d:38:61:4c:72:fa:31:d9:
                    91:c7:23:5a:0e:d2:7d:0b:d8:2b:67:3a:4e:51:95:
                    dd:04:e8:ce:2b:39:db:86:16:8e:ac:93:15:cf:80:
                    44:cc:55:a6:5a:32:af:23:b9:22:dd:9c:2c:db:1a:
                    c3:3b:82:a1:4c:9e:99:e7:fc:2e:7a:db:53:5e:8d:
                    d1:38:e2:56:50:d5:62:be:3e:09:59:71:d0:94:89:
                    59:c7:54:b2:98:ac:fd:cc:68:ee:75:45:9e:78:12:
                    78:8a:11:84:7b:3d:e7:3f:01:42:45:8a:8a:52:13:
                    d3:71:cd:e7:51:49:5a:d7:82:99:9a:46:18:71:c1:
                    60:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2D:21:A1:A0:F3:FB:59:75:1C:D6:75:31:AA:85:9A:C6:11:CF:08
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3130322e3232342e302f32302d3234203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:29:26:45:92:e4:04:a7:68:a1:ef:24:58:96:17:d3:9e:88:
         7e:66:a1:96:c2:4b:51:c6:3d:d2:fa:48:73:d6:bb:c3:0f:e7:
         59:b3:61:61:12:09:a9:8a:34:5f:f9:ac:31:ec:cd:d5:28:50:
         73:2f:b6:66:d1:51:c1:26:ee:19:73:3d:90:46:d9:2e:c6:68:
         fa:77:30:3c:35:80:0e:ca:b0:91:88:61:0c:e4:ac:a6:c8:6f:
         8f:0d:a1:43:10:b0:49:c3:22:a4:f5:74:93:d8:69:ee:f1:d2:
         7a:c5:ec:6f:de:86:d9:13:0a:f1:7a:8b:1e:0f:87:2f:06:7a:
         a5:0b:56:19:36:82:da:4a:89:7f:2f:eb:64:85:4f:5c:f7:b6:
         7f:7e:46:6d:cb:f1:c8:65:8e:65:9f:aa:4f:e9:2b:a6:96:f9:
         65:46:84:da:ac:e4:ed:16:8e:3f:db:fc:f0:c8:2d:70:78:cd:
         52:91:62:1d:2a:b0:4a:bf:7a:cc:d3:d0:16:68:7c:1c:30:d0:
         4b:65:69:8b:ba:c5:da:eb:3f:86:03:81:8c:2b:d1:32:4f:8b:
         cc:89:cb:6b:75:e7:32:86:f8:d9:64:2d:21:a2:3d:f1:14:a1:
         23:d0:89:48:9a:a5:b0:ed:ff:ba:a2:c0:5d:8d:5f:7b:02:d0:
         78:0a:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-ams.rpki-client.org