Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/3139302e352e3231322e302f32322d3233203d3e20323632313834.roa
File:                     3139302e352e3231322e302f32322d3233203d3e20323632313834.roa (raw, json)
Hash identifier:          mRKOkYhJRPCZjUuTSUMi/231Bv12XaVvlN6e2gSaFW8=
Subject key identifier:   84:F6:53:FA:23:BF:CE:6E:85:8F:0A:66:FB:B9:59:02:52:FD:65:22
Certificate issuer:       /CN=56CC624428BCED9F377BAC95D562A585D509F1B4
Certificate serial:       7789DB44A14FE66DEB51F1F7411050DCB8F887D6
Authority key identifier: 56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/3139302e352e3231322e302f32322d3233203d3e20323632313834.roa
Signing time:             Tue 04 Feb 2025 19:56:42 +0000
ROA not before:           Tue 04 Feb 2025 19:51:42 +0000
ROA not after:            Tue 03 Feb 2026 19:56:42 +0000
asID:                     262184
IP address blocks:        190.5.212.0/22 maxlen: 23
Validation:               Failed, certificate revoked on Thu 06 Mar 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:89:db:44:a1:4f:e6:6d:eb:51:f1:f7:41:10:50:dc:b8:f8:87:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56CC624428BCED9F377BAC95D562A585D509F1B4
        Validity
            Not Before: Feb  4 19:51:42 2025 GMT
            Not After : Feb  3 19:56:42 2026 GMT
        Subject: CN=84F653FA23BFCE6E858F0A66FBB9590252FD6522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:7c:7a:b0:bd:a0:b1:68:d7:b6:f5:21:5e:
                    da:20:35:0d:9b:25:c0:f5:c5:6a:58:9f:b4:7f:4e:
                    0d:35:d2:81:7c:4a:f3:77:33:57:d8:31:f6:46:4a:
                    c9:d5:7f:8c:ad:8e:09:95:e2:7c:c7:de:9a:ec:b5:
                    46:c6:74:e3:c1:5c:7c:6c:64:cd:d2:1b:c7:53:bd:
                    71:71:7d:a8:d6:4f:e0:22:62:65:db:26:32:04:92:
                    da:a0:42:d8:fb:fe:35:11:fa:fa:a8:89:f6:91:90:
                    80:35:09:90:12:e0:68:39:04:30:ee:cc:77:84:bd:
                    76:36:94:3f:6e:26:27:2d:91:56:a9:62:80:e1:dc:
                    1a:a8:d0:cd:d2:4a:90:ef:a1:9c:3f:69:c0:52:7c:
                    7e:be:82:e5:9a:ad:c5:bf:cd:69:1a:1e:d7:23:85:
                    72:e6:30:ad:57:aa:0d:3a:18:d7:41:8d:45:ca:02:
                    36:1b:67:74:c7:3d:2c:2e:ff:74:6d:48:5b:21:c5:
                    6c:da:f7:c2:75:af:93:80:e6:e7:ef:db:23:bb:1c:
                    9c:97:ba:91:66:09:fd:9c:c3:5a:f3:3e:9a:eb:12:
                    1e:32:1e:3c:98:7e:27:4f:59:88:b0:8a:fd:82:91:
                    dc:0a:f3:09:1f:ce:eb:54:a2:06:4f:1c:8a:70:40:
                    dd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F6:53:FA:23:BF:CE:6E:85:8F:0A:66:FB:B9:59:02:52:FD:65:22
            X509v3 Authority Key Identifier:
                keyid:56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/3139302e352e3231322e302f32322d3233203d3e20323632313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:b9:b0:28:0f:bb:39:4f:ce:ac:1e:6e:fe:17:88:fd:72:4d:
         3e:0d:d1:ef:92:13:dc:af:25:ff:08:f3:64:db:e4:61:2b:d5:
         24:cf:bc:8a:0f:16:a9:8e:ca:9d:21:d2:e1:ab:82:bf:3b:a4:
         53:7c:4a:ff:43:6d:2e:3a:06:bd:a7:cf:e9:ce:43:9b:b4:86:
         d7:8c:20:95:1f:c5:69:16:1d:bd:ad:2d:7b:ee:9b:a1:9e:ee:
         e4:ae:a8:a1:3b:ae:2a:ea:d8:69:bb:98:56:cc:3b:2f:16:f5:
         16:72:10:96:12:d1:2b:dc:84:ac:a9:79:e3:6d:bc:d6:28:8f:
         03:a5:82:77:8d:1e:d5:00:36:28:98:d7:e5:c9:f0:bc:0a:5d:
         35:f3:b2:48:4b:b4:b5:0e:b6:06:e5:5c:f6:ca:e0:23:a7:e6:
         1b:57:31:c4:f2:d3:55:a9:7f:d5:99:b5:eb:34:e0:04:78:e3:
         4f:4f:b7:80:1b:74:71:b8:8f:0d:7b:2c:60:60:48:b8:c2:95:
         e7:db:5b:f5:51:34:25:6a:6e:a2:48:2e:94:d9:62:5a:6d:d0:
         62:c7:85:dd:a8:d1:13:1b:37:73:4a:de:bc:00:48:bc:25:fc:
         c5:00:fe:12:41:cb:9d:05:35:29:da:e2:69:79:83:27:76:bc:
         07:b7:f2:78
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUd4nbRKFP5m3rUfH3QRBQ3Lj4h9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZDQzYyNDQyOEJDRUQ5RjM3N0JBQzk1RDU2MkE1ODVE
NTA5RjFCNDAeFw0yNTAyMDQxOTUxNDJaFw0yNjAyMDMxOTU2NDJaMDMxMTAvBgNV
BAMTKDg0RjY1M0ZBMjNCRkNFNkU4NThGMEE2NkZCQjk1OTAyNTJGRDY1MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6MXx6sL2gsWjXtvUhXtogNQ2b
JcD1xWpYn7R/Tg010oF8SvN3M1fYMfZGSsnVf4ytjgmV4nzH3prstUbGdOPBXHxs
ZM3SG8dTvXFxfajWT+AiYmXbJjIEktqgQtj7/jUR+vqoifaRkIA1CZAS4Gg5BDDu
zHeEvXY2lD9uJictkVapYoDh3Bqo0M3SSpDvoZw/acBSfH6+guWarcW/zWkaHtcj
hXLmMK1Xqg06GNdBjUXKAjYbZ3THPSwu/3RtSFshxWza98J1r5OA5ufv2yO7HJyX
upFmCf2cw1rzPprrEh4yHjyYfidPWYiwiv2CkdwK8wkfzutUogZPHIpwQN3lAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhPZT+iO/zm6Fjwpm+7lZAlL9ZSIwHwYDVR0j
BBgwFoAUVsxiRCi87Z83e6yV1WKlhdUJ8bQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QkRFM0FGNjhCMUE4N0U3OTQ1OEFBNkQxQjE3NUUxMzU3
Qjg5ODAyRjBGMjQwNEVDRDdDMTMwRTc3QTM2RkY1LzAvNTZDQzYyNDQyOEJDRUQ5
RjM3N0JBQzk1RDU2MkE1ODVENTA5RjFCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NkNDNjI0NDI4QkNFRDlGMzc3
QkFDOTVENTYyQTU4NUQ1MDlGMUI0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUJERTNBRjY4QjFBODdFNzk0NThBQTZEMUIxNzVFMTM1N0I4OTgwMkYw
RjI0MDRFQ0Q3QzEzMEU3N0EzNkZGNS8wLzMxMzkzMDJlMzUyZTMyMzEzMjJlMzAy
ZjMyMzIyZDMyMzMyMDNkM2UyMDMyMzYzMjMxMzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr4F1DAN
BgkqhkiG9w0BAQsFAAOCAQEAx7mwKA+7OU/OrB5u/heI/XJNPg3R75IT3K8l/wjz
ZNvkYSvVJM+8ig8WqY7KnSHS4auCvzukU3xK/0NtLjoGvafP6c5Dm7SG14wglR/F
aRYdva0te+6boZ7u5K6ooTuuKurYabuYVsw7Lxb1FnIQlhLRK9yErKl542281iiP
A6WCd40e1QA2KJjX5cnwvApdNfOySEu0tQ62BuVc9srgI6fmG1cxxPLTVal/1Zm1
6zTgBHjjT0+3gBt0cbiPDXssYGBIuMKV59tb9VE0JWpuokgulNliWm3QYseF3ajR
Exs3c0revABIvCX8xQD+EkHLnQU1KdriaXmDJ3a8B7fyeA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:50:20 2025 by rpki-client