Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3139302e3138352e3130352e302f32342d3234203d3e203532343338.roa
File:                     3139302e3138352e3130352e302f32342d3234203d3e203532343338.roa (raw, json)
Hash identifier:          cz11zJfYtzN76kvwwNGlUateddV41UCyGy7XraDQIls=
Subject key identifier:   F8:51:91:01:E5:7B:27:99:F3:54:E8:FD:0A:A1:6D:4C:DD:E0:CE:19
Certificate issuer:       /CN=A537F8449EAA5150B4958CB0F49E0C2358347988
Certificate serial:       4EFCB6FECBAA65892FC3A1B4B074868E326A7043
Authority key identifier: A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3139302e3138352e3130352e302f32342d3234203d3e203532343338.roa
Signing time:             Tue 05 Mar 2024 17:40:37 +0000
ROA not before:           Tue 05 Mar 2024 17:35:37 +0000
ROA not after:            Tue 04 Mar 2025 17:40:37 +0000
asID:                     52438
IP address blocks:        190.185.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 15:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fc:b6:fe:cb:aa:65:89:2f:c3:a1:b4:b0:74:86:8e:32:6a:70:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537F8449EAA5150B4958CB0F49E0C2358347988
        Validity
            Not Before: Mar  5 17:35:37 2024 GMT
            Not After : Mar  4 17:40:37 2025 GMT
        Subject: CN=F8519101E57B2799F354E8FD0AA16D4CDDE0CE19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:3d:5c:18:b3:2c:0c:33:57:f0:db:10:36:
                    1c:36:4a:e4:c4:49:39:20:3a:7e:fe:a9:de:b0:2f:
                    75:ad:66:4e:50:39:99:32:4a:3c:0a:25:f4:dc:34:
                    1a:96:29:3d:95:7b:5f:bc:84:92:ca:e8:9e:f0:24:
                    ac:3a:15:47:66:cf:57:de:13:de:27:13:cb:d8:a8:
                    ac:ca:d9:54:ef:7b:c1:76:16:44:06:49:7d:7d:cf:
                    5d:9e:09:a4:35:3e:71:2e:9e:f5:97:12:b4:b6:b7:
                    cb:cc:d7:14:71:7c:11:00:2f:f0:b0:61:f4:08:33:
                    59:9b:6d:87:bb:16:7f:a7:50:07:e2:6c:13:60:43:
                    d8:14:4f:c1:c6:66:73:ef:f6:39:ff:01:ff:5d:65:
                    57:2b:01:f7:36:fb:e1:b3:2b:82:e7:d4:27:97:0c:
                    58:2e:c5:e7:37:a7:13:98:1b:6d:23:de:b8:bb:ff:
                    6f:a7:cb:3b:11:50:6b:a5:90:99:b3:20:9c:63:1b:
                    56:9a:91:c3:9e:80:19:82:28:d0:a4:04:51:27:e0:
                    7b:16:ec:e6:30:98:8c:bd:da:12:1d:bf:0c:8c:b3:
                    74:89:89:f8:73:57:c8:9a:0e:0c:74:50:a7:bf:5a:
                    66:1f:6f:0f:19:e7:8f:a8:34:de:2d:cb:67:67:1d:
                    46:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:51:91:01:E5:7B:27:99:F3:54:E8:FD:0A:A1:6D:4C:DD:E0:CE:19
            X509v3 Authority Key Identifier:
                keyid:A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3139302e3138352e3130352e302f32342d3234203d3e203532343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:a9:49:83:0d:15:f0:64:cf:ff:e0:98:7d:87:08:58:80:1e:
         f3:b0:c9:7b:55:3b:bb:77:65:55:b9:8e:b3:e3:cd:00:a9:55:
         82:00:16:4c:3d:58:95:fd:2b:fc:fd:a7:b2:bf:c1:af:b3:2b:
         42:4c:16:de:a4:96:82:35:de:b4:b3:88:ba:da:90:ea:eb:e1:
         1b:0b:e6:4c:84:0a:44:66:cc:d7:c7:f9:f3:fa:6b:48:92:89:
         7b:38:f4:ae:70:cd:98:a0:f3:fb:07:fb:43:2d:4b:ca:cd:81:
         21:9a:f1:2b:c6:fe:bd:57:27:f1:54:c9:f3:2d:11:3d:0c:14:
         8f:e7:7b:6a:a6:5c:59:c0:fe:2c:c3:93:d0:7f:7a:66:cb:aa:
         eb:9d:c1:0e:3c:82:3f:56:98:84:ed:0d:be:29:04:b5:f5:b6:
         e9:be:83:e8:e8:1e:d2:b3:68:4a:b9:77:2c:44:ec:17:3d:87:
         df:48:30:40:57:6f:b4:bc:2b:4b:40:a4:ab:0b:f9:3f:53:bc:
         30:cf:92:2d:98:70:0d:a1:89:fe:7f:82:b7:23:9f:0a:14:dc:
         3e:9d:bc:98:e2:f3:99:d6:21:6b:8e:9a:46:31:49:cb:88:35:
         89:9c:ef:59:88:d8:6c:6f:9b:4f:49:37:1f:94:97:5d:d3:92:
         02:60:d8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 16:54:12 2024 by rpki-client on console-ams.rpki-client.org