Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3138342e302f32332d3233203d3e203237393130.roa
File:                     3139302e3234322e3138342e302f32332d3233203d3e203237393130.roa (raw, json)
Hash identifier:          HEL3poWH/j2/GcUxE1JtnKrYtwK0AHOeusog4QKZW80=
Subject key identifier:   3B:1A:9F:8B:8B:54:28:8B:8E:DB:41:4C:F5:BC:85:9A:31:02:6D:A1
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       27DC741B77DAD14FA2096A59A20CD122F781584A
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3138342e302f32332d3233203d3e203237393130.roa
Signing time:             Fri 29 Mar 2024 00:15:00 +0000
ROA not before:           Fri 29 Mar 2024 00:10:00 +0000
ROA not after:            Fri 28 Mar 2025 00:15:00 +0000
asID:                     27910
IP address blocks:        190.242.184.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:dc:74:1b:77:da:d1:4f:a2:09:6a:59:a2:0c:d1:22:f7:81:58:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar 29 00:10:00 2024 GMT
            Not After : Mar 28 00:15:00 2025 GMT
        Subject: CN=3B1A9F8B8B54288B8EDB414CF5BC859A31026DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:8a:f7:61:12:dc:e6:f0:c2:0f:90:74:c5:
                    6b:78:cd:ab:96:6f:63:d0:0e:44:73:1d:d1:33:82:
                    48:7b:d0:b1:62:49:fe:28:00:9c:dd:88:65:5f:5e:
                    58:da:07:5a:22:90:2b:4b:d5:c0:c0:2b:e7:51:57:
                    77:a6:7b:30:36:5d:ce:43:eb:30:4d:a7:c2:2f:bd:
                    1a:71:f3:2a:cd:93:5a:70:6e:07:fd:42:51:ca:c1:
                    2e:7a:1b:14:30:af:7e:e5:ca:0f:d8:ec:8e:13:f9:
                    ac:63:6b:61:e3:c6:d5:38:93:31:b8:4e:d0:ac:f0:
                    47:f7:f4:f6:26:43:24:19:8d:1a:61:94:8d:2e:11:
                    f2:6e:00:b7:d1:ce:6d:98:4b:ba:c3:d3:2a:6a:ef:
                    ca:0f:9d:55:5a:2c:77:60:b3:31:c7:97:ab:51:29:
                    3e:17:5b:80:51:5f:02:ed:51:ee:40:9b:89:88:d9:
                    63:58:d2:db:96:a3:ab:17:d5:55:4d:bf:fe:40:62:
                    86:d3:5e:87:74:e1:15:21:ae:1b:66:02:a2:60:eb:
                    be:d0:03:18:26:83:1f:5c:1e:88:64:08:6e:34:cc:
                    b1:2b:3c:cb:ca:cb:e2:20:73:5c:0e:60:44:ea:6e:
                    af:21:c5:66:e5:b0:d9:55:47:3f:94:86:d9:5f:43:
                    77:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1A:9F:8B:8B:54:28:8B:8E:DB:41:4C:F5:BC:85:9A:31:02:6D:A1
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3138342e302f32332d3233203d3e203237393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:6c:51:62:84:1f:df:a8:4a:76:b0:58:ea:63:a1:12:d1:1b:
         0f:ba:71:b9:ba:d0:38:4c:b0:a3:b4:d5:b3:d3:8f:79:60:76:
         aa:c8:28:7c:22:16:43:f8:26:08:a2:29:94:55:65:a7:bb:7a:
         98:66:86:20:33:53:fb:05:4e:f2:1d:cd:6a:13:93:54:65:a5:
         7c:df:9a:e4:7c:ed:a3:95:18:48:58:ac:3e:ef:50:90:5c:b2:
         4c:b5:6c:52:5d:60:f1:0c:50:83:43:0d:e3:0d:8b:5d:0f:62:
         64:7a:dd:8b:9b:66:73:9d:10:cb:4f:5b:21:6e:86:bc:1a:75:
         de:a3:ca:84:5d:c3:d9:29:42:33:22:a2:02:35:75:bd:46:5c:
         9d:18:e5:01:87:6b:d5:1c:f0:8e:90:04:ba:3a:92:8b:66:ba:
         39:76:60:ab:fe:e8:64:18:bc:1c:80:b1:3d:bb:97:75:62:82:
         f4:d9:90:f5:ff:3a:3e:ba:20:2b:4a:92:e0:03:e6:58:0c:a0:
         2d:94:7f:e3:e8:6d:87:9b:6f:b9:8f:43:b7:d2:16:2a:9f:91:
         e2:09:02:0f:89:e4:c3:95:8d:09:2f:09:c7:4d:a7:53:ce:ed:
         45:9f:ae:0a:0d:c7:37:a3:94:a8:61:c8:b5:5c:4d:90:0a:45:
         2e:fa:ef:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----