Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3130322e3234302e302f32302d3230203d3e203237393031.roa
File:                     3139302e3130322e3234302e302f32302d3230203d3e203237393031.roa (raw, json)
Hash identifier:          2UB2Cx4s1r8YS2cjcke/6vVvkzNThU16SI2NfI/5Gzs=
Subject key identifier:   A4:7D:82:9D:22:01:62:47:83:85:43:FA:FF:A9:66:35:8A:54:05:4E
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       7919096538535B9D42FBE130BE82DF3AACC59CC7
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3130322e3234302e302f32302d3230203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:43 +0000
ROA not before:           Tue 05 Mar 2024 17:37:43 +0000
ROA not after:            Tue 04 Mar 2025 17:42:43 +0000
asID:                     27901
IP address blocks:        190.102.240.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:19:09:65:38:53:5b:9d:42:fb:e1:30:be:82:df:3a:ac:c5:9c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:43 2024 GMT
            Not After : Mar  4 17:42:43 2025 GMT
        Subject: CN=A47D829D22016247838543FAFFA966358A54054E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:97:bb:24:2e:f9:af:81:f0:3b:2f:8f:19:75:
                    56:8e:fb:66:ba:cd:c3:2a:ec:68:71:33:93:f6:88:
                    02:93:1d:36:d2:0a:0d:a9:41:c8:41:c2:56:98:63:
                    bf:07:65:d4:51:b5:8f:0e:8f:c5:2e:61:86:97:4b:
                    cd:18:d4:1a:17:06:e7:aa:21:8e:3e:da:87:f1:49:
                    5e:e6:87:6b:dd:79:55:ef:ac:e7:33:00:f3:71:e1:
                    69:25:dd:2a:05:6f:21:d2:c2:cf:ba:30:7e:6b:ed:
                    3d:10:f9:9c:77:87:ad:27:a8:06:53:20:4d:cf:2d:
                    3e:78:4e:66:42:93:c1:8b:7f:fe:dd:e6:f8:72:66:
                    cd:6d:7a:c3:e2:53:05:dd:c6:4a:2d:51:4b:6f:72:
                    69:51:0a:60:00:58:f8:e4:fe:4b:6f:e4:1f:02:c9:
                    a1:31:bf:fb:08:cf:11:7f:4d:e8:ac:15:c1:48:ae:
                    af:dc:98:4f:23:a8:d4:3c:2b:38:a0:3d:96:57:3c:
                    d8:6b:d7:44:de:81:a6:f3:d2:96:45:08:14:5a:cf:
                    5d:1d:ef:a0:64:42:7c:4b:36:75:5b:31:b8:4f:86:
                    0e:31:8c:97:b9:4b:ea:8e:c1:b7:33:e8:7e:fd:17:
                    23:ec:b5:81:67:19:78:6a:13:7d:a3:39:95:ee:6e:
                    31:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7D:82:9D:22:01:62:47:83:85:43:FA:FF:A9:66:35:8A:54:05:4E
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3130322e3234302e302f32302d3230203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:3b:ce:6a:50:d8:6c:81:95:6c:c8:2b:c8:a3:c4:47:bf:95:
         65:22:3d:9a:90:67:3a:42:06:f5:40:41:2f:35:4c:fe:96:2c:
         76:23:f0:d7:0b:a2:5a:36:8f:a8:24:ea:a8:04:d8:c0:e2:55:
         4f:85:4e:71:36:1b:cc:a3:a5:13:fc:4a:04:e4:38:8d:3b:6a:
         ab:f5:ff:08:a4:07:35:b9:b2:a7:0d:e0:cd:4e:eb:d3:35:26:
         28:2f:42:95:49:11:3f:68:55:27:5a:08:75:c7:0f:69:4a:e3:
         d3:ad:b3:2f:f2:5f:43:7f:40:a1:31:f6:fa:9d:eb:9c:16:41:
         9b:44:83:97:8e:89:bd:99:54:53:a3:07:5a:20:6d:73:75:dd:
         d0:58:ad:83:0b:5b:23:84:c5:dd:e0:97:76:3e:4e:9a:4a:f0:
         cf:c0:e3:3a:a2:28:39:bc:3c:64:c1:96:9a:4f:e0:07:46:32:
         05:42:86:fc:68:6a:b5:f4:6b:0e:c3:64:b7:3a:23:44:68:ba:
         21:12:41:7a:3f:e4:7f:00:9f:04:ae:c1:05:2c:60:3c:6f:db:
         71:b1:01:81:47:8a:69:d8:c3:73:c8:5b:c5:0e:bc:dd:b4:d1:
         b6:bc:4e:f6:2e:4b:d5:9b:c2:ce:24:57:d7:6e:12:9e:c7:4a:
         e1:12:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-ams.rpki-client.org