Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e362e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3130392e362e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          3G70dp3Tni2AQ4AXMri2pVNksuAAtSrSx/n7ZAq5Zls=
Subject key identifier:   A2:B5:20:8C:D0:C6:90:82:07:9A:31:B3:50:8A:1A:4C:C7:4B:0F:3B
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       7CADD2BE070471FD1F2F75215BD0D8F12632EE75
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e362e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:08:47 +0000
ROA not before:           Tue 05 Mar 2024 18:03:47 +0000
ROA not after:            Tue 04 Mar 2025 18:08:47 +0000
asID:                     262191
IP address blocks:        190.109.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 14:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ad:d2:be:07:04:71:fd:1f:2f:75:21:5b:d0:d8:f1:26:32:ee:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Mar  5 18:03:47 2024 GMT
            Not After : Mar  4 18:08:47 2025 GMT
        Subject: CN=A2B5208CD0C69082079A31B3508A1A4CC74B0F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:4b:84:8f:34:8d:39:7a:1e:1f:ad:cf:3d:
                    20:3e:2e:a8:6f:e0:0c:02:45:c1:96:55:64:9e:d4:
                    7d:33:bc:96:12:57:2d:2a:5e:e1:13:9c:3c:3f:1f:
                    2b:e5:51:f3:85:85:fb:9d:8b:a9:c4:14:c2:7a:b8:
                    d9:10:da:99:97:46:53:92:3b:0b:71:af:68:9c:a4:
                    44:d0:8c:d4:ee:d3:1b:47:82:51:41:9e:1d:44:40:
                    6a:67:35:ad:d4:da:08:77:72:9d:18:c0:4a:bf:d4:
                    d7:b1:b4:04:b0:ad:76:48:1e:ee:29:81:2b:8d:cf:
                    b5:e6:5a:60:e0:18:4a:13:79:16:fb:bd:59:72:71:
                    4b:24:59:2e:f3:53:ef:b2:8b:ea:ee:4a:08:e0:e6:
                    e0:95:ed:3c:ee:d7:5e:ef:ea:10:db:b0:69:d3:f7:
                    a8:28:7e:b4:71:3b:e1:17:7a:24:ea:8a:ba:45:29:
                    ae:45:65:8e:4e:ee:0c:00:83:30:b5:63:d4:5d:e8:
                    65:e1:47:c5:05:ae:3a:89:e8:d3:94:7a:01:ab:e0:
                    08:42:8a:aa:7e:fa:87:89:7c:cf:50:5c:1e:df:36:
                    8c:92:aa:a7:b3:3c:ca:96:90:7c:08:bf:3a:7d:92:
                    27:5b:1b:72:0f:43:e2:f1:86:0d:10:8e:8a:c6:99:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B5:20:8C:D0:C6:90:82:07:9A:31:B3:50:8A:1A:4C:C7:4B:0F:3B
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e362e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:44:8a:30:d6:1a:d0:e9:42:54:7e:e6:85:41:3c:dc:bc:cd:
         24:cb:a4:38:80:10:a7:11:36:f3:60:79:ea:41:75:be:07:91:
         e1:e2:29:db:85:f5:3f:7c:de:48:a6:44:c8:78:30:7c:91:90:
         87:15:a4:9c:1a:df:83:2f:00:38:86:dd:d2:75:e3:d3:5d:cd:
         0c:25:fb:0c:23:60:52:64:0c:5c:87:ad:fe:c0:2d:2c:b7:ea:
         b7:7f:46:6a:54:a4:24:d1:96:0a:51:27:46:46:05:63:24:c5:
         75:f3:b5:ce:45:02:bd:29:60:99:89:fe:73:22:ed:cd:59:db:
         be:cd:ff:39:6e:7f:57:f3:78:2a:01:e5:c8:ce:d0:23:f4:12:
         48:01:9a:35:77:c4:91:d9:d6:cc:a2:45:06:7d:a9:bf:34:b7:
         0c:97:31:15:1f:3b:ee:e9:bf:53:2a:f8:4b:12:d4:44:2a:a1:
         3f:56:77:38:2d:2d:ff:01:61:cc:70:7c:36:6f:bb:78:39:1f:
         8b:d2:3e:d0:63:c8:6a:1b:bc:f1:6d:a9:6a:54:ae:f8:45:d9:
         01:10:79:6e:99:43:36:05:17:b4:b5:0d:9c:3f:14:92:61:bc:
         88:36:ad:80:a7:b7:0d:b2:ba:ff:f3:2d:5a:d5:67:d1:8a:d4:
         83:1f:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 17:40:30 2024 by rpki-client on console-fra.rpki-client.org