Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e33302e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3130392e33302e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          phT6pucqNjE1FfKntmpeqDun1Blddj7GwYd+nw2lIxs=
Subject key identifier:   28:52:C7:B2:1B:D4:5E:52:6F:AF:CB:F7:67:F6:15:F8:6D:53:9A:BA
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       5841F4F641A423C069F16BA7622712E756517B9C
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e33302e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:08:44 +0000
ROA not before:           Tue 05 Mar 2024 18:03:44 +0000
ROA not after:            Tue 04 Mar 2025 18:08:44 +0000
asID:                     262191
IP address blocks:        190.109.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 14:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:41:f4:f6:41:a4:23:c0:69:f1:6b:a7:62:27:12:e7:56:51:7b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Mar  5 18:03:44 2024 GMT
            Not After : Mar  4 18:08:44 2025 GMT
        Subject: CN=2852C7B21BD45E526FAFCBF767F615F86D539ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:98:a4:46:35:aa:b7:04:21:5a:83:ed:13:
                    a3:b9:b4:44:ee:bf:50:bb:7c:f3:12:91:4e:f0:61:
                    91:1d:bd:c4:59:7d:c8:df:5a:24:a4:fd:2e:c0:2a:
                    72:a8:e0:e0:f6:fc:1a:74:c4:9c:bf:e7:49:15:95:
                    4e:58:df:76:da:4e:3f:84:f0:b6:fc:83:24:ab:5d:
                    dd:0e:1c:86:8c:de:ac:53:d7:13:fc:48:e9:89:b5:
                    26:0b:d4:f6:95:4a:88:64:fc:85:7a:6c:2d:09:11:
                    45:74:b0:e3:28:8c:5d:a4:c1:e9:81:7e:3a:9e:33:
                    bd:f0:04:f2:9c:2e:26:a6:b4:ca:37:76:3f:1b:c9:
                    c8:2c:65:e7:a4:32:8f:98:35:f2:bb:b5:a1:ee:6d:
                    16:17:67:c0:43:79:89:d3:de:0a:21:88:72:a3:cc:
                    a0:87:98:1a:d8:7c:61:1e:d9:14:59:96:68:50:a3:
                    75:47:d1:3c:e8:fc:97:2b:34:e0:a2:3b:38:90:75:
                    a1:80:ff:4d:5a:ca:c6:fc:8e:e5:4b:d2:b5:5a:a0:
                    16:34:2c:0d:bf:f9:67:0a:1b:12:0f:fd:b5:0d:29:
                    91:74:db:82:cc:73:c3:74:28:60:cd:c4:14:d2:20:
                    e6:e9:2c:c8:98:fa:b1:42:c0:12:31:92:82:52:61:
                    13:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:52:C7:B2:1B:D4:5E:52:6F:AF:CB:F7:67:F6:15:F8:6D:53:9A:BA
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e33302e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b0:c6:24:ad:cf:09:33:c1:6a:e6:58:e8:45:aa:cf:56:09:
         08:05:4d:fc:e7:75:56:69:40:5d:1f:9d:26:5f:09:b4:2a:61:
         2d:2b:5c:95:41:5e:05:f6:73:b2:93:3f:ee:89:28:5e:9a:01:
         d3:d3:5d:a6:e0:49:71:2d:7f:10:fb:02:9d:4d:7b:2e:63:32:
         6c:ae:5e:86:2a:c0:e1:cd:e5:d7:fe:40:47:df:0e:fe:ec:de:
         e1:21:f5:71:01:1a:63:af:43:04:3a:da:ac:5b:38:f2:11:4b:
         ba:32:86:f0:4e:c3:be:e9:f5:94:4e:9b:15:c3:f8:aa:79:18:
         11:cc:9d:e8:0a:ee:cc:90:93:ac:59:8e:1d:07:90:a2:57:09:
         3b:d0:48:67:30:2d:73:21:ce:6b:05:eb:f6:c6:d5:2e:f4:e6:
         78:bf:48:36:da:35:b7:81:33:cc:cc:2a:80:31:d7:5b:66:c8:
         df:0a:d7:f7:4e:31:5d:fe:9f:e1:60:ab:c2:ea:8f:f4:77:1d:
         de:8a:c1:58:74:e4:c7:c1:aa:77:42:0a:3e:a5:f7:8c:6d:9a:
         48:1c:6f:68:0d:98:43:3c:b9:cd:65:d0:1e:68:ec:63:20:29:
         9c:f6:df:3d:93:7b:31:a0:03:1b:45:ca:11:17:1d:d5:63:89:
         dc:81:de:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 18:35:53 2024 by rpki-client on console-ams.rpki-client.org