Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3131302e3136302e302f32302d3230203d3e203237393031.roa
File:                     3139302e3131302e3136302e302f32302d3230203d3e203237393031.roa (raw, json)
Hash identifier:          rehlTwRYi4iRxYGJe5tgvtrUpizsWRjwrFT4nxfStg0=
Subject key identifier:   5E:D4:85:BA:31:2A:D8:C9:28:4D:EB:0A:E1:B4:69:56:BD:8C:D5:2B
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       7D760A389A023476BDADAC2ADFEAB074C780EB7C
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3131302e3136302e302f32302d3230203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:42 +0000
ROA not before:           Tue 05 Mar 2024 17:37:42 +0000
ROA not after:            Tue 04 Mar 2025 17:42:42 +0000
asID:                     27901
IP address blocks:        190.110.160.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:76:0a:38:9a:02:34:76:bd:ad:ac:2a:df:ea:b0:74:c7:80:eb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:42 2024 GMT
            Not After : Mar  4 17:42:42 2025 GMT
        Subject: CN=5ED485BA312AD8C9284DEB0AE1B46956BD8CD52B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:21:e7:59:74:63:1c:f9:c4:69:09:bf:13:
                    ec:45:90:86:bf:d6:b5:88:a1:fb:b7:74:f8:12:10:
                    c1:31:32:62:5a:cc:f0:e6:02:5c:d7:60:6a:fa:fb:
                    2c:97:6e:a1:04:cb:70:f3:84:88:c6:f9:ef:c3:eb:
                    a2:31:a2:21:e8:b0:44:9f:6b:93:47:4d:93:d6:ab:
                    ff:d8:e6:83:46:f7:af:13:89:93:d6:9e:bb:7e:1b:
                    1c:45:a4:30:5e:41:41:bb:0a:6d:fb:23:62:79:04:
                    ad:41:dc:ad:36:b8:37:7c:70:58:68:ab:c3:96:c9:
                    50:53:42:1b:84:43:d6:2e:6e:f5:86:14:ec:3e:95:
                    31:df:84:55:50:7f:c5:b4:0e:45:fd:bd:6d:16:af:
                    85:b8:14:cf:22:eb:13:61:d6:36:43:b7:2a:14:d8:
                    70:26:7d:8e:1f:8d:30:ee:09:ab:37:97:35:80:dd:
                    1b:d0:03:c6:42:69:3e:c3:dd:37:50:4c:af:5b:42:
                    2d:07:37:4a:bf:65:e6:e2:d4:78:c3:88:4a:15:cd:
                    3f:c2:8b:29:cf:2a:08:02:ef:f6:7c:b2:00:02:ba:
                    df:d6:12:02:a2:24:32:18:bf:ef:bf:10:0a:86:e0:
                    5a:81:46:d3:33:61:b3:4a:61:eb:03:9e:dc:25:83:
                    08:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D4:85:BA:31:2A:D8:C9:28:4D:EB:0A:E1:B4:69:56:BD:8C:D5:2B
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3131302e3136302e302f32302d3230203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:1f:b1:11:c7:d8:eb:cd:88:5c:15:3f:10:30:0e:a6:5b:ab:
         8f:65:76:24:c4:8a:b2:3b:6e:49:8a:58:6a:ab:0f:83:db:4d:
         e1:1b:fb:24:f3:f6:a9:b1:ac:a4:de:f2:41:85:d3:c1:63:ed:
         84:e5:a1:d8:84:36:3c:8e:42:85:ff:92:eb:2d:46:d1:47:d4:
         88:6f:30:08:6e:60:92:c1:a1:47:e1:87:fc:49:dc:8f:29:a8:
         21:dc:eb:49:50:ab:21:f3:2e:a9:36:41:0d:1f:53:0e:27:d2:
         ce:4a:26:1c:be:d8:e7:19:60:e9:39:79:b1:b0:3e:75:6d:21:
         fb:62:02:2f:fe:3c:88:b6:ee:6e:43:57:14:f9:c4:fb:17:ea:
         cb:8f:38:ed:3c:13:61:ee:be:bc:73:cb:66:80:0f:67:f5:68:
         15:59:9a:98:91:9f:73:5f:ed:f1:0f:e0:0b:ba:2e:3c:cc:10:
         e2:eb:fe:e5:15:ff:e4:7e:57:43:3c:0b:36:f1:79:7b:63:fd:
         64:d0:77:dc:06:2e:9b:25:c5:78:a0:c6:d8:6c:5f:13:bb:28:
         ce:56:81:e7:d0:8b:4a:ab:52:e8:08:3d:6a:e9:e7:37:9e:97:
         c4:27:0b:3d:29:94:3d:89:41:db:7b:4d:6e:4d:4c:42:d7:08:
         6f:c3:24:b3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUfXYKOJoCNHa9rawq3+qwdMeA63wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkxREU1MTlGMjVGREY2OTJDQkRDMTBBMDk2NEE0QjNE
OUNEQTkxRjAeFw0yNDAzMDUxNzM3NDJaFw0yNTAzMDQxNzQyNDJaMDMxMTAvBgNV
BAMTKDVFRDQ4NUJBMzEyQUQ4QzkyODRERUIwQUUxQjQ2OTU2QkQ4Q0Q1MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIpCHnWXRjHPnEaQm/E+xFkIa/
1rWIofu3dPgSEMExMmJazPDmAlzXYGr6+yyXbqEEy3DzhIjG+e/D66IxoiHosESf
a5NHTZPWq//Y5oNG968TiZPWnrt+GxxFpDBeQUG7Cm37I2J5BK1B3K02uDd8cFho
q8OWyVBTQhuEQ9YubvWGFOw+lTHfhFVQf8W0DkX9vW0Wr4W4FM8i6xNh1jZDtyoU
2HAmfY4fjTDuCas3lzWA3RvQA8ZCaT7D3TdQTK9bQi0HN0q/Zebi1HjDiEoVzT/C
iynPKggC7/Z8sgACut/WEgKiJDIYv++/EAqG4FqBRtMzYbNKYesDntwlgwgdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUXtSFujEq2MkoTesK4bRpVr2M1SswHwYDVR0j
BBgwFoAUGR3lGfJf32ksvcEKCWSks9nNqR8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQTI2MzBFRkYxNjFFMzQ5MUE4NEE1QjRGNkZCNjhDRjA0
MzlBQ0M0MDQ0OTRCN0JGMUMzOTE5MjlGQTc2QzNFLzAvMTkxREU1MTlGMjVGREY2
OTJDQkRDMTBBMDk2NEE0QjNEOUNEQTkxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOTFERTUxOUYyNUZERjY5MkNC
REMxMEEwOTY0QTRCM0Q5Q0RBOTFGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkEyNjMwRUZGMTYxRTM0OTFBODRBNUI0RjZGQjY4Q0YwNDM5QUNDNDA0
NDk0QjdCRjFDMzkxOTI5RkE3NkMzRS8wLzMxMzkzMDJlMzEzMTMwMmUzMTM2MzAy
ZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM3MzkzMDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvm6g
MA0GCSqGSIb3DQEBCwUAA4IBAQC4H7ERx9jrzYhcFT8QMA6mW6uPZXYkxIqyO25J
ilhqqw+D203hG/sk8/apsayk3vJBhdPBY+2E5aHYhDY8jkKF/5LrLUbRR9SIbzAI
bmCSwaFH4Yf8SdyPKagh3OtJUKsh8y6pNkENH1MOJ9LOSiYcvtjnGWDpOXmxsD51
bSH7YgIv/jyItu5uQ1cU+cT7F+rLjzjtPBNh7r68c8tmgA9n9WgVWZqYkZ9zX+3x
D+ALui48zBDi6/7lFf/kfldDPAs28Xl7Y/1k0HfcBi6bJcV4oMbYbF8TuyjOVoHn
0ItKq1LoCD1q6ec3npfEJws9KZQ9iUHbe01uTUxC1whvwySz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-ams.rpki-client.org