Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3139302e39332e3234302e302f32302d3230203d3e203133333335.roa
File:                     3139302e39332e3234302e302f32302d3230203d3e203133333335.roa (raw, json)
Hash identifier:          y3QPrWJ2WnQYDfMC5zPAwsk698uk9HeJxQ0TuB641I4=
Subject key identifier:   31:93:FE:10:18:89:BC:18:7D:C7:85:CB:3F:36:CD:5E:73:E8:A2:9E
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       31D794756B77096F192D7ECE2516C93F615979EF
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3139302e39332e3234302e302f32302d3230203d3e203133333335.roa
Signing time:             Tue 05 Mar 2024 18:17:53 +0000
ROA not before:           Tue 05 Mar 2024 18:12:53 +0000
ROA not after:            Tue 04 Mar 2025 18:17:53 +0000
asID:                     13335
IP address blocks:        190.93.240.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 15:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d7:94:75:6b:77:09:6f:19:2d:7e:ce:25:16:c9:3f:61:59:79:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Mar  5 18:12:53 2024 GMT
            Not After : Mar  4 18:17:53 2025 GMT
        Subject: CN=3193FE101889BC187DC785CB3F36CD5E73E8A29E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0d:c6:61:3d:98:ef:6e:05:a2:da:dc:3d:1c:
                    7a:f3:c5:e5:e9:a0:e3:d5:b2:43:26:69:5e:43:9b:
                    62:e0:93:a2:59:d0:89:c3:dc:e6:cd:0e:4f:97:32:
                    84:46:57:37:71:9e:51:53:9e:5c:5d:12:d9:02:d5:
                    fd:a4:1d:b8:a7:87:0f:07:8b:de:32:4f:c8:59:eb:
                    73:e6:cf:f0:fc:7f:15:17:1b:bf:1b:10:e6:33:95:
                    51:b4:f7:d4:bb:fb:4c:eb:4d:ed:72:1a:c5:22:5f:
                    3b:e2:c9:1d:36:9f:e5:2f:b4:bb:82:b3:c0:84:24:
                    66:23:e3:51:fd:ea:35:d7:0e:a2:cb:18:e0:65:d1:
                    73:c0:c2:63:8c:3b:b6:1c:2a:cd:b9:68:bc:8d:5f:
                    7e:03:34:13:54:4f:83:fe:9a:3b:f9:dd:0f:a8:47:
                    de:df:a6:69:67:1c:72:a7:1b:df:14:59:cc:82:ab:
                    72:5f:cf:98:64:59:65:33:48:4f:b8:8a:40:b0:cc:
                    1e:03:82:ca:1e:c9:2c:e0:da:f8:8e:c1:1a:a8:6d:
                    43:d4:d9:36:fc:4b:39:f4:12:6e:89:90:26:fd:ee:
                    15:d3:a2:db:51:8b:b2:f5:18:0f:b1:f7:71:3c:66:
                    01:fd:9c:ef:d4:a8:c9:e6:98:29:06:83:f9:d2:23:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:93:FE:10:18:89:BC:18:7D:C7:85:CB:3F:36:CD:5E:73:E8:A2:9E
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3139302e39332e3234302e302f32302d3230203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:6d:ef:30:2e:eb:c5:ff:f8:48:d5:8a:9b:58:8e:f1:78:cd:
         b5:8b:2a:38:6f:20:4d:d6:66:40:f8:1e:67:b5:dc:05:c3:c2:
         d2:2f:ea:81:4d:17:05:df:a3:ea:fc:b6:c2:b7:05:2b:eb:79:
         85:0f:82:91:5e:6e:6f:94:76:fa:24:5a:e3:7c:04:fe:bf:60:
         66:72:b9:f9:63:f3:91:84:cc:09:bc:3c:16:11:b6:d7:21:dd:
         92:03:ab:b5:26:b6:30:97:18:3f:46:70:6f:be:44:1b:5a:58:
         e3:e4:41:3b:30:43:55:5a:c7:e9:ce:61:da:75:76:49:92:9c:
         18:16:6c:39:6d:a6:0e:f2:a4:59:7f:63:cb:a8:d7:21:57:de:
         3c:6a:2b:37:68:f0:20:7f:7d:44:85:0e:13:9a:65:19:fa:bc:
         75:d8:fc:ef:d9:f8:02:5d:62:e6:11:35:94:39:e5:40:77:bc:
         b3:23:3f:5b:07:f3:9b:77:78:87:0b:d2:64:0f:3d:73:de:f8:
         80:c3:c5:4f:21:2c:2f:2f:f7:98:ef:4f:e9:03:2c:e6:d9:ee:
         10:f2:9b:e3:7d:17:5c:90:05:88:08:00:c5:ac:c3:6a:2a:ee:
         db:81:b6:99:1b:1c:b3:7e:be:3e:58:aa:6e:b9:97:c9:4c:cd:
         24:28:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 19:47:16 2024 by rpki-client on console-fra.rpki-client.org