Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e302e302f31372d3137203d3e203130323639.roa
File:                     3139302e3139372e302e302f31372d3137203d3e203130323639.roa (raw, json)
Hash identifier:          Q2hGPyXBc1xhYUBpWnNI6ePYgHdrqhPWhdI0IdhGW2E=
Subject key identifier:   69:D0:DB:65:0E:7C:53:97:36:9A:6A:A8:FB:77:FE:59:62:9C:21:B3
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       6B97A1B2884B1205561E7254CCC85B82DB865ADF
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e302e302f31372d3137203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:40 +0000
ROA not before:           Tue 05 Mar 2024 17:41:40 +0000
ROA not after:            Tue 04 Mar 2025 17:46:40 +0000
asID:                     10269
IP address blocks:        190.197.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 19:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:97:a1:b2:88:4b:12:05:56:1e:72:54:cc:c8:5b:82:db:86:5a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:40 2024 GMT
            Not After : Mar  4 17:46:40 2025 GMT
        Subject: CN=69D0DB650E7C5397369A6AA8FB77FE59629C21B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:30:a6:27:a6:b3:ec:ca:d1:2c:69:64:39:0e:
                    05:51:16:72:41:e6:81:30:f0:fc:a7:69:39:92:b0:
                    c5:61:9d:e5:86:01:ea:4c:df:fb:da:fa:b4:e7:8c:
                    18:4b:3a:bc:cc:65:16:33:43:fb:2f:9e:39:ae:34:
                    2b:b3:d5:fb:4a:3f:ab:7a:ed:a3:61:c7:04:e9:99:
                    81:ad:73:55:d9:d2:30:d2:12:62:e1:37:d6:52:7d:
                    29:c7:1c:c8:d8:68:5f:12:59:f6:81:6e:36:52:44:
                    9c:18:bf:c5:3c:b3:03:1b:14:b1:25:1e:69:35:37:
                    37:91:66:8f:ee:e8:04:b7:fa:4b:81:5e:2e:d4:a2:
                    b6:09:3c:38:76:f4:4a:01:69:9a:0a:d1:31:a3:7c:
                    40:40:93:48:34:03:4f:6c:b4:a6:4a:87:bd:b3:ce:
                    a4:df:a8:db:8f:1a:f4:57:d7:51:cd:9b:ef:b4:fb:
                    cb:67:6a:45:42:6b:27:bb:f7:8d:98:3d:0f:ae:25:
                    5c:08:7c:64:4c:83:f7:e5:13:fe:6b:cb:71:e7:83:
                    00:5d:07:3b:1a:2b:50:97:c5:cf:14:4f:19:f4:91:
                    1d:30:86:a5:40:41:e3:8b:28:81:04:66:4e:68:e3:
                    2e:60:8d:a6:0b:71:b9:ae:14:d6:c1:15:f7:f4:9a:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D0:DB:65:0E:7C:53:97:36:9A:6A:A8:FB:77:FE:59:62:9C:21:B3
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e302e302f31372d3137203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.197.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         76:a7:7d:5b:eb:69:d3:e6:43:12:ca:14:8b:d7:17:30:8f:2b:
         13:b4:fc:0b:01:54:fa:2a:31:87:18:0e:79:43:66:eb:4e:81:
         ba:77:c7:8d:5f:98:b9:cd:e9:17:21:e0:07:16:75:e5:77:d9:
         df:81:e6:96:9e:f7:8a:61:e6:52:be:01:28:3f:c9:65:39:cc:
         87:35:9b:11:c3:51:99:db:90:7f:ca:67:81:6c:5e:9a:ff:a0:
         8d:93:72:ec:94:74:18:4c:5b:37:01:5a:b0:0e:c1:6c:89:c4:
         df:2e:c9:98:5b:a3:64:ff:26:60:ce:fd:89:ed:be:2c:4c:96:
         50:88:e5:a2:8e:17:3a:b4:1e:fd:db:47:d8:c8:f2:c0:a9:6e:
         9b:89:17:5f:37:83:69:a7:4c:e2:e5:f0:a3:c1:c1:42:28:ba:
         ef:4b:99:b5:eb:c4:77:f4:c4:39:7f:79:fc:0f:26:f9:31:57:
         9d:89:67:c3:97:8e:55:fc:8f:ab:3a:a9:2c:75:2c:04:4d:4b:
         09:e2:d8:32:ab:c4:dc:93:62:e4:84:7e:e6:cf:03:da:04:b1:
         8d:49:af:03:a9:c8:a6:6d:90:6c:54:25:5b:7c:07:61:a6:53:
         b9:cb:20:af:a7:29:38:18:76:87:22:d1:30:8e:6e:a5:87:a8:
         42:2a:b3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----