Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e312e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3130392e312e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          BsTyhJd38Go8z86Or3Lq312dXPLZZPY7JXqJjzv5HSI=
Subject key identifier:   22:92:59:D8:FD:55:23:6D:8E:DC:9B:36:2B:2C:3A:39:0A:97:87:CC
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       0A56D2DF2A444382ADDBF2818AA21F61242596E0
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e312e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:08:46 +0000
ROA not before:           Tue 05 Mar 2024 18:03:46 +0000
ROA not after:            Tue 04 Mar 2025 18:08:46 +0000
asID:                     262191
IP address blocks:        190.109.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 14:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:56:d2:df:2a:44:43:82:ad:db:f2:81:8a:a2:1f:61:24:25:96:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Mar  5 18:03:46 2024 GMT
            Not After : Mar  4 18:08:46 2025 GMT
        Subject: CN=229259D8FD55236D8EDC9B362B2C3A390A9787CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:ac:cf:70:2f:2c:e3:85:04:e8:6a:a9:7c:
                    d7:6d:d1:60:c8:3a:fd:25:06:a3:e0:c1:b8:21:d6:
                    c0:88:cc:a6:ea:25:46:09:12:8d:05:f3:6d:50:4b:
                    f3:1b:d0:6f:de:80:f5:c6:f8:58:39:56:83:00:16:
                    60:6e:0a:09:f9:13:21:8b:ae:59:bd:84:ad:32:2a:
                    02:6e:c3:77:cd:87:7d:70:7c:86:3c:ab:21:65:18:
                    e5:9b:60:d7:f2:d1:38:24:61:98:1e:89:07:e2:22:
                    43:8a:11:d0:3c:d2:4a:7f:2e:f2:07:4a:93:76:b9:
                    c0:f1:1c:83:f8:f4:04:2b:e4:02:ce:24:f6:bf:35:
                    2c:cf:57:b6:a8:34:49:f9:be:ba:fd:51:4d:4e:32:
                    40:f5:8c:da:37:82:03:93:ef:18:1f:4e:d6:e6:6d:
                    5e:a3:58:46:87:4d:25:64:09:45:3c:63:be:09:39:
                    d8:84:8d:96:42:b4:cf:5f:6a:75:bf:35:80:b3:7c:
                    a8:cb:61:8f:6b:d5:89:12:be:ed:d7:d8:3c:46:f6:
                    3c:2e:9c:0b:95:81:06:08:aa:b8:e9:d0:84:f5:9a:
                    68:71:23:c9:e9:74:4c:32:2d:46:c0:95:b8:06:a1:
                    05:c3:ac:1e:3b:ce:c6:41:e0:d5:d3:13:af:50:2b:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:92:59:D8:FD:55:23:6D:8E:DC:9B:36:2B:2C:3A:39:0A:97:87:CC
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e312e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:97:01:b6:38:23:30:ee:0a:c8:c1:f0:91:50:bd:78:9e:02:
         ce:17:50:03:ce:a2:9a:98:bb:dc:a3:f6:c4:f4:68:72:6e:58:
         42:a3:f8:73:28:95:11:a3:6d:b1:0f:0a:fe:ce:de:b7:35:c2:
         c0:b9:52:02:f9:fb:06:58:1b:ce:31:e8:88:f6:fe:b6:41:c6:
         cd:7c:45:39:46:fa:1f:9c:d8:d7:10:f7:40:b2:a7:6c:f5:be:
         05:a8:24:e3:0e:9b:b4:f6:dd:31:91:71:a7:33:92:31:4e:34:
         b3:31:28:25:a7:74:92:ae:3a:af:86:95:b1:64:f2:03:24:48:
         27:3a:b6:6d:a1:6f:8b:a2:92:0e:26:c0:d9:41:7d:5a:0f:c4:
         2a:cf:37:14:e0:77:5f:ac:7f:f1:01:6f:58:7d:f5:cf:ed:0e:
         94:69:3e:e0:ed:f1:3d:ff:da:23:cb:02:66:36:92:1f:58:61:
         55:1d:19:f8:a0:19:cb:38:34:6d:dd:59:24:97:b7:2d:22:d2:
         c4:d1:00:bf:d0:b1:dd:7f:a1:74:0f:b8:6f:6b:29:61:38:cc:
         c3:54:ea:48:ae:ac:d9:63:20:30:35:2a:8c:3b:c4:05:61:07:
         3b:98:37:6b:58:03:cd:11:81:f7:48:d5:9f:79:85:16:f3:3b:
         b2:2b:37:30
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUClbS3ypEQ4Kt2/KBiqIfYSQlluAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTIwRkU4QTZFMzUyQzlDOUVDOUI0QzdDRkZGRjc3QjMy
MzkzNkMxNDAeFw0yNDAzMDUxODAzNDZaFw0yNTAzMDQxODA4NDZaMDMxMTAvBgNV
BAMTKDIyOTI1OUQ4RkQ1NTIzNkQ4RURDOUIzNjJCMkMzQTM5MEE5Nzg3Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmxKzPcC8s44UE6GqpfNdt0WDI
Ov0lBqPgwbgh1sCIzKbqJUYJEo0F821QS/Mb0G/egPXG+Fg5VoMAFmBuCgn5EyGL
rlm9hK0yKgJuw3fNh31wfIY8qyFlGOWbYNfy0TgkYZgeiQfiIkOKEdA80kp/LvIH
SpN2ucDxHIP49AQr5ALOJPa/NSzPV7aoNEn5vrr9UU1OMkD1jNo3ggOT7xgfTtbm
bV6jWEaHTSVkCUU8Y74JOdiEjZZCtM9fanW/NYCzfKjLYY9r1YkSvu3X2DxG9jwu
nAuVgQYIqrjp0IT1mmhxI8npdEwyLUbAlbgGoQXDrB47zsZB4NXTE69QK1WNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIpJZ2P1VI22O3Js2Kyw6OQqXh8wwHwYDVR0j
BBgwFoAUog/opuNSycnsm0x8//93syOTbBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QjMzOTE2NUZDMjkyQUM5RDEzMjZEQ0E3OUIwNUYxN0Qz
OUY4Nzg1MDVDRjMxNkJCNzA2NTA2RjBBQUJERkY1LzAvQTIwRkU4QTZFMzUyQzlD
OUVDOUI0QzdDRkZGRjc3QjMyMzkzNkMxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMjBGRThBNkUzNTJDOUM5RUM5
QjRDN0NGRkZGNzdCMzIzOTM2QzE0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUIzMzkxNjVGQzI5MkFDOUQxMzI2RENBNzlCMDVGMTdEMzlGODc4NTA1
Q0YzMTZCQjcwNjUwNkYwQUFCREZGNS8wLzMxMzkzMDJlMzEzMDM5MmUzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5tATAN
BgkqhkiG9w0BAQsFAAOCAQEAUZcBtjgjMO4KyMHwkVC9eJ4CzhdQA86impi73KP2
xPRocm5YQqP4cyiVEaNtsQ8K/s7etzXCwLlSAvn7BlgbzjHoiPb+tkHGzXxFOUb6
H5zY1xD3QLKnbPW+Bagk4w6btPbdMZFxpzOSMU40szEoJad0kq46r4aVsWTyAyRI
Jzq2baFvi6KSDibA2UF9Wg/EKs83FOB3X6x/8QFvWH31z+0OlGk+4O3xPf/aI8sC
ZjaSH1hhVR0Z+KAZyzg0bd1ZJJe3LSLSxNEAv9Cx3X+hdA+4b2spYTjMw1TqSK6s
2WMgMDUqjDvEBWEHO5g3a1gDzRGB90jVn3mFFvM7sis3MA==
-----END CERTIFICATE-----
Generated at Wed Sep 11 17:40:30 2024 by rpki-client on console-fra.rpki-client.org