Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37302e302e302f31352d3135203d3e203133343839.roa
File:                     3139302e37302e302e302f31352d3135203d3e203133343839.roa (raw, json)
Hash identifier:          9eoAJDlG0j6D/i0b6jtmYDgQ6lT2YeHn9V6CuB5nzCs=
Subject key identifier:   03:D2:A3:CD:67:06:DD:77:27:CF:44:14:81:F5:D1:B4:C1:F9:04:DE
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       6381531DF30D7CAFE557C6E8D27FC577FE805EDB
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37302e302e302f31352d3135203d3e203133343839.roa
Signing time:             Mon 30 Sep 2024 22:45:02 +0000
ROA not before:           Mon 30 Sep 2024 22:40:02 +0000
ROA not after:            Mon 29 Sep 2025 22:45:02 +0000
asID:                     13489
IP address blocks:        190.70.0.0/15 maxlen: 15
Validation:               Failed, certificate revoked on Tue 08 Oct 2024 18:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:81:53:1d:f3:0d:7c:af:e5:57:c6:e8:d2:7f:c5:77:fe:80:5e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Sep 30 22:40:02 2024 GMT
            Not After : Sep 29 22:45:02 2025 GMT
        Subject: CN=03D2A3CD6706DD7727CF441481F5D1B4C1F904DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:45:60:68:18:ca:83:9a:3f:dc:90:46:02:a9:
                    e1:0b:db:01:b2:9f:ce:5a:bf:29:ae:25:5e:92:4f:
                    a4:55:46:63:36:15:6c:ba:af:62:f9:43:25:9f:e6:
                    b7:c3:91:98:40:8c:01:29:e9:e0:09:d7:28:e6:8e:
                    e4:3d:60:50:5c:1b:1b:8d:ca:b1:4b:11:5b:0f:f5:
                    3f:24:0a:12:61:40:fa:e5:e3:1b:72:b2:67:cd:89:
                    78:d0:16:af:24:31:be:3f:e7:a7:ac:0f:31:6b:20:
                    6d:de:e6:63:43:34:36:5c:25:36:a8:fb:7a:08:0f:
                    b0:b3:ef:26:94:2e:2a:1e:b9:0a:6f:de:42:df:ce:
                    1d:5a:3e:49:61:56:64:9e:60:2f:42:fd:26:99:4e:
                    75:8f:18:8f:47:0c:14:f3:6f:98:31:53:5e:a0:cc:
                    6c:61:cd:47:e3:61:a6:6f:e6:c3:ff:3a:88:3b:77:
                    d8:cd:40:46:2c:77:4d:14:4e:73:10:83:c1:2d:cc:
                    11:ba:63:11:6c:83:cd:a1:41:8c:e0:0c:07:fb:90:
                    cd:95:67:5c:b3:af:f6:49:1e:c5:8f:3b:04:c0:6a:
                    17:80:69:b3:d4:bb:f5:4b:13:49:19:cc:39:26:30:
                    0a:3c:7a:24:da:50:39:6a:43:97:20:62:86:fd:f2:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D2:A3:CD:67:06:DD:77:27:CF:44:14:81:F5:D1:B4:C1:F9:04:DE
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37302e302e302f31352d3135203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.70.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         22:1c:cf:0e:fc:11:b5:0f:f2:67:ee:9a:2c:52:bf:c5:89:c8:
         24:23:22:25:42:9c:d0:de:63:34:81:d4:7f:46:b0:7a:b5:c2:
         76:5a:ac:fb:59:bf:c4:49:37:c8:24:6a:26:92:ed:07:f3:53:
         fa:9c:83:bc:5d:3d:80:ee:3e:8d:62:25:f0:c3:f7:0a:17:77:
         02:d8:94:7c:3e:17:f9:f7:35:c8:92:d1:14:61:d5:ba:20:52:
         64:48:9f:56:4a:ce:dd:bb:82:fd:5e:d6:d1:21:0f:c3:1f:a2:
         a2:36:c6:d1:bf:eb:5f:ea:ee:a9:e7:7d:9d:1e:07:e5:c3:54:
         42:7d:93:7c:52:75:bb:15:93:16:57:18:a1:35:8b:8b:34:de:
         79:f5:0e:19:0c:58:a3:3e:9b:b5:5b:62:3d:ba:a6:25:0c:03:
         87:09:bf:9d:aa:82:dc:c7:85:2a:e3:4d:63:8c:49:8d:f1:bb:
         39:2b:49:d3:56:28:1a:18:73:1e:c6:e9:b9:05:f7:a3:1a:c7:
         72:e8:83:08:82:76:ac:3b:4b:94:a3:49:6e:81:a2:4e:66:54:
         b9:42:56:d2:4a:90:c6:3d:3b:99:0a:12:d2:cd:df:5b:c9:f2:
         18:6c:d4:be:0c:6b:4f:30:8a:cf:c1:e2:7c:20:6a:86:65:96:
         d5:fd:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:17:19 2025 by rpki-client