Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/3139302e352e3231322e302f32342d3234203d3e203532343638.roa
File:                     3139302e352e3231322e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          bTPovKkXLP9ZNgtzi4gtmstEbIRkWwTYseGB7OVyLaw=
Subject key identifier:   39:56:27:48:EA:88:2A:A9:A1:07:C5:4A:27:53:AC:C2:45:B0:FF:1D
Certificate issuer:       /CN=56CC624428BCED9F377BAC95D562A585D509F1B4
Certificate serial:       6ADFBFE236B6C0D4321D9515CC04E2578516FB34
Authority key identifier: 56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/3139302e352e3231322e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 19:56:43 +0000
ROA not before:           Tue 04 Feb 2025 19:51:43 +0000
ROA not after:            Tue 03 Feb 2026 19:56:43 +0000
asID:                     52468
IP address blocks:        190.5.212.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 06 Mar 2025 15:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:df:bf:e2:36:b6:c0:d4:32:1d:95:15:cc:04:e2:57:85:16:fb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56CC624428BCED9F377BAC95D562A585D509F1B4
        Validity
            Not Before: Feb  4 19:51:43 2025 GMT
            Not After : Feb  3 19:56:43 2026 GMT
        Subject: CN=39562748EA882AA9A107C54A2753ACC245B0FF1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5e:8f:25:f6:76:c4:d4:4f:5a:80:bf:bc:0a:
                    6b:21:fd:36:13:32:a7:77:c5:74:f2:e5:68:6a:3f:
                    3c:30:8f:bb:ba:c8:39:eb:55:f3:9d:24:50:e2:21:
                    e5:d9:b9:1c:e6:0e:c7:36:4f:5e:e6:85:6c:7b:7e:
                    ed:74:6d:90:2d:21:19:38:a6:02:dc:a1:3c:b2:91:
                    a7:f7:38:e3:39:ce:50:cd:27:09:74:c3:4f:55:5e:
                    f2:0f:aa:3e:36:49:53:38:22:cb:9e:e0:34:9f:fb:
                    3f:df:9d:19:bc:28:19:de:09:62:6d:48:ac:b0:7e:
                    8e:98:96:70:12:e6:9c:70:8b:29:4d:6a:d0:73:80:
                    2c:19:69:05:4a:af:72:8e:a5:8b:3d:5a:ff:17:14:
                    1e:42:c4:ae:2d:e9:68:75:a2:39:ac:69:26:92:c4:
                    9b:a8:bd:32:31:50:45:64:fb:3a:f4:bb:49:44:4d:
                    54:ed:86:c4:2f:49:9f:e1:83:15:f0:ed:c9:2f:39:
                    c9:da:63:b5:fe:24:0c:e3:69:ac:63:dc:bd:5a:53:
                    e9:ec:81:17:7e:d6:16:fb:a3:ee:44:fb:e2:0b:5d:
                    ab:b6:aa:05:5f:22:4b:32:12:8b:6b:2e:a5:ac:f1:
                    08:98:b7:ff:6d:72:d9:07:f9:2b:af:a2:dd:2f:3b:
                    f7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:56:27:48:EA:88:2A:A9:A1:07:C5:4A:27:53:AC:C2:45:B0:FF:1D
            X509v3 Authority Key Identifier:
                keyid:56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/3139302e352e3231322e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:a5:66:b3:9f:66:9b:4c:5b:51:5f:48:af:e7:85:46:be:0d:
         a8:3e:8d:16:ec:5d:1a:91:24:15:0a:9e:b5:4b:dc:ab:7d:2f:
         df:31:56:e3:3f:47:7e:7b:65:ed:38:73:6d:a1:a5:b0:d6:50:
         13:64:ae:9a:e8:9e:82:26:9f:38:59:64:1e:3c:67:84:95:63:
         63:73:31:b1:4a:02:07:8f:dd:b2:78:57:89:83:d7:52:d9:36:
         b4:45:b2:8f:68:2a:1d:02:0b:e2:c4:77:14:64:ec:be:59:e0:
         83:55:c1:98:f8:dd:9d:57:28:34:8d:af:9d:05:f3:02:bd:f5:
         90:fe:91:d5:80:89:df:b2:ce:f1:7b:23:a0:87:cd:fa:d2:7b:
         8a:3a:7e:ff:bb:c8:ba:0b:7c:c9:ed:f3:4f:77:1e:8c:80:f4:
         22:ab:76:d7:80:03:b8:28:3a:db:de:e6:0e:85:e4:52:84:e0:
         10:d4:f9:70:ce:1b:04:df:0f:b3:17:89:4e:db:95:ce:1b:8c:
         c5:ca:e1:10:0a:f1:10:29:d4:e5:a9:09:de:cc:9b:69:ec:97:
         ba:e2:17:34:93:d0:b7:ae:b5:91:42:1d:7b:02:bb:93:8d:c9:
         47:4e:72:70:ce:8e:df:f1:ee:49:80:b4:77:0f:06:d6:b5:7d:
         9b:95:4b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:59:06 2025 by rpki-client