Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3130322e3234302e302f32302d3234203d3e203237393031.roa
File:                     3139302e3130322e3234302e302f32302d3234203d3e203237393031.roa (raw, json)
Hash identifier:          qXkNaCK9BxPAcsHiWT26zllidwrC6JffGMHQIU8C+QE=
Subject key identifier:   47:18:D1:3B:C6:39:8A:B2:BB:F2:64:B8:6A:76:60:B8:1C:58:52:51
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       4AAC2AF29EA20CB1F293DEB52F830842884E1777
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3130322e3234302e302f32302d3234203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:45 +0000
ROA not before:           Tue 05 Mar 2024 17:37:45 +0000
ROA not after:            Tue 04 Mar 2025 17:42:45 +0000
asID:                     27901
IP address blocks:        190.102.240.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ac:2a:f2:9e:a2:0c:b1:f2:93:de:b5:2f:83:08:42:88:4e:17:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:45 2024 GMT
            Not After : Mar  4 17:42:45 2025 GMT
        Subject: CN=4718D13BC6398AB2BBF264B86A7660B81C585251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1e:bf:22:b7:b1:48:64:8e:c4:24:c4:8a:f8:
                    d6:4d:8b:4e:8b:bc:88:1e:cd:eb:b4:10:ec:95:32:
                    bf:6a:fb:59:0a:a0:fc:c1:fc:ff:b1:0b:d5:a9:b9:
                    c6:6f:ed:b6:a4:d9:ff:40:56:03:13:45:75:06:f7:
                    94:7e:76:66:3c:e7:be:97:fe:d0:4b:8b:33:5a:f3:
                    48:55:d0:5c:73:9d:87:ff:b6:16:d2:05:b5:43:d0:
                    e9:55:89:d4:58:ff:4a:52:f1:29:4f:cf:d1:c5:d4:
                    a5:04:41:85:8c:0c:af:37:21:7e:33:e0:82:e5:85:
                    c5:22:14:3f:18:25:f5:d7:b6:81:bd:1b:0d:b8:49:
                    89:c6:cc:f2:ae:0d:00:9a:cf:24:b8:92:f3:a6:2e:
                    dc:23:1a:8a:11:06:b9:03:66:13:74:3a:18:79:25:
                    f8:bb:83:38:a1:9d:94:ec:b1:bb:9a:07:da:94:6f:
                    b4:d2:7c:83:e3:03:8b:28:89:a6:b8:5b:e4:5a:94:
                    8c:d5:f2:ed:28:29:ee:be:3d:0b:7b:d0:59:ce:d3:
                    7f:3e:32:c5:8c:7a:4e:0c:d6:34:83:10:bc:ba:66:
                    91:6e:d7:5c:22:ac:4f:4d:1b:1d:c0:47:cb:e7:b9:
                    3e:22:94:89:d0:05:3d:24:01:3a:a1:55:cb:88:59:
                    07:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:18:D1:3B:C6:39:8A:B2:BB:F2:64:B8:6A:76:60:B8:1C:58:52:51
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3130322e3234302e302f32302d3234203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:b6:67:f3:8b:5b:d9:30:94:4a:43:02:34:56:19:56:45:72:
         1a:f7:41:f7:a9:f0:ef:d7:37:fd:be:01:b7:03:3c:47:6a:c3:
         f3:c7:a6:9e:c4:a3:f6:60:fc:04:91:09:c6:50:a7:73:10:84:
         33:0b:2c:d5:51:7d:22:5e:25:eb:b6:26:55:3a:df:dd:1c:aa:
         ea:f4:5f:77:98:41:7e:3f:f0:19:5a:3e:6a:e6:69:60:9d:08:
         81:62:76:ec:96:a2:fc:c6:25:0e:57:ab:50:ad:2f:cc:ad:15:
         82:09:32:08:08:42:49:fc:39:3f:d6:0a:82:1c:32:3c:78:1a:
         56:fb:81:3f:08:d7:06:4d:9a:31:75:a9:48:04:fb:36:74:f3:
         5d:81:1e:37:4c:f9:fd:18:16:82:7a:b5:a0:d4:6a:ea:8c:f9:
         10:80:bc:b6:28:21:12:f1:ba:61:3e:2f:6d:4f:d1:8d:b0:94:
         19:0e:42:e6:a7:d5:35:ed:cd:6e:5d:eb:da:65:33:78:2b:a3:
         64:1b:9e:25:16:d5:14:f7:80:e8:69:1b:a4:60:70:db:fc:cc:
         db:05:47:14:91:c8:8b:9e:30:ac:23:e8:58:fe:f4:19:b6:c0:
         b7:33:24:84:4d:c4:ef:e6:ed:78:42:47:e5:e8:70:33:b5:dd:
         36:74:87:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org