Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3131342e33322e302f31392d3139203d3e203237393031.roa
File:                     3139302e3131342e33322e302f31392d3139203d3e203237393031.roa (raw, json)
Hash identifier:          N/plEDmKfKZTIsXtTJgCjSobVuXJikxhVs0xUev6q94=
Subject key identifier:   41:C9:97:0C:CC:99:DC:FF:1D:50:CA:78:89:AE:1A:9A:18:36:3A:1B
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       295E48BE2C25F0B3FE14993F04B13411A06C06B2
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3131342e33322e302f31392d3139203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:47 +0000
ROA not before:           Tue 05 Mar 2024 17:37:47 +0000
ROA not after:            Tue 04 Mar 2025 17:42:47 +0000
asID:                     27901
IP address blocks:        190.114.32.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5e:48:be:2c:25:f0:b3:fe:14:99:3f:04:b1:34:11:a0:6c:06:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:47 2024 GMT
            Not After : Mar  4 17:42:47 2025 GMT
        Subject: CN=41C9970CCC99DCFF1D50CA7889AE1A9A18363A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:a4:2e:8d:7e:06:4a:38:99:19:c1:72:e0:
                    1a:5e:9b:bf:2c:11:23:cf:d4:ea:1c:e4:00:4e:23:
                    ad:25:5b:3b:6d:33:00:4a:32:ab:fd:2a:1d:ab:94:
                    ff:05:77:78:e0:31:4c:fa:fd:40:e2:47:c7:8e:b0:
                    cb:fe:14:bc:6c:40:1b:ba:9a:39:f6:bb:4b:b1:83:
                    1e:8e:1b:4b:c7:c1:0a:8a:3c:9d:de:70:66:ef:10:
                    0f:49:97:60:46:6c:2c:60:df:5d:f4:e6:54:4a:68:
                    d4:a0:e6:b6:1a:04:0d:32:e7:00:fe:df:94:98:a3:
                    1b:de:48:af:a1:7d:f4:9b:46:d7:88:c6:d1:33:00:
                    28:86:fd:4e:dc:10:70:7d:d2:d4:cf:f9:a6:c2:be:
                    a2:ec:4c:75:7e:22:f0:7c:05:79:0e:31:c3:81:c5:
                    4e:d3:12:3b:bb:a2:0a:40:92:c8:7e:0c:a1:0b:91:
                    b9:58:3f:b2:a0:79:c0:52:a7:1b:9b:80:1c:6a:ce:
                    ef:65:c9:89:1d:9c:e2:b8:ad:1c:38:0f:ea:56:30:
                    6f:29:1b:9f:53:29:8f:22:d7:3a:5e:71:a3:dc:80:
                    1a:49:75:94:a9:f6:d3:e3:74:78:01:8c:7a:0a:51:
                    e1:c1:78:71:19:d0:d5:4c:49:0f:5b:57:c3:76:27:
                    56:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C9:97:0C:CC:99:DC:FF:1D:50:CA:78:89:AE:1A:9A:18:36:3A:1B
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3131342e33322e302f31392d3139203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:57:be:4c:5d:fd:c4:f6:d3:12:5e:61:2c:57:4f:58:f9:f5:
         e2:91:cd:bc:95:a4:cd:8d:b8:56:4d:b6:ef:0e:d0:a5:f9:a7:
         fa:86:94:da:5b:8e:76:6c:01:1c:39:e1:a2:15:a1:95:bf:45:
         52:e7:b2:10:83:7a:9c:2e:39:f4:f9:ca:1f:0c:fa:91:1a:02:
         02:34:50:94:70:35:b2:90:29:91:b3:8a:98:42:15:e2:bb:88:
         06:5c:70:33:ec:2e:6a:44:96:be:55:c9:5c:ee:34:af:d7:5c:
         8c:25:7d:60:2a:8d:95:41:0c:8c:8c:cb:64:21:78:f2:78:7e:
         fe:f9:3c:e0:24:9d:58:b9:ed:15:49:8e:77:b2:f4:71:10:c8:
         49:1f:31:e3:69:99:10:c0:6e:32:c3:39:95:66:47:f9:8c:58:
         8b:2f:21:5d:2b:75:fc:11:55:04:ff:cc:53:62:4b:99:56:76:
         1b:76:05:73:a1:c2:22:79:23:66:ae:32:4a:9b:6b:f0:fe:a4:
         97:21:b1:6f:9e:ce:46:a8:88:7d:ac:08:45:91:76:98:26:06:
         65:d7:80:a9:82:a3:08:3d:31:4e:14:87:3f:f5:e8:8d:aa:3b:
         8d:3e:97:c8:e1:1b:e4:7e:74:28:ea:80:2c:32:77:bc:ec:cd:
         62:42:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org