Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3138382e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3234322e3138382e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          HD+Z8n1P1NiVBZPeWdTaBOS/XHTMfbWN8iKheMoW1CI=
Subject key identifier:   2B:F2:28:C0:B1:92:27:D9:F3:3E:09:6C:EA:7E:71:16:B9:1D:E1:E8
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       77066E15A48B88297A5EF815E1732A9417BAE264
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3138382e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:36 +0000
ROA not before:           Tue 05 Mar 2024 18:09:36 +0000
ROA not after:            Tue 04 Mar 2025 18:14:36 +0000
asID:                     262191
IP address blocks:        190.242.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:06:6e:15:a4:8b:88:29:7a:5e:f8:15:e1:73:2a:94:17:ba:e2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:36 2024 GMT
            Not After : Mar  4 18:14:36 2025 GMT
        Subject: CN=2BF228C0B19227D9F33E096CEA7E7116B91DE1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:52:64:6b:c9:38:eb:2d:3b:e1:01:67:81:34:
                    69:62:f3:b5:d7:f6:65:c5:9c:93:6e:67:63:a4:bf:
                    45:4a:a1:0b:9b:ab:f4:68:45:9e:ed:71:68:40:a6:
                    78:d4:29:c6:da:ca:e6:b7:7f:f3:d2:91:9c:c1:8d:
                    77:60:80:e2:10:30:3f:63:b0:c6:da:ee:fd:7b:24:
                    91:84:cf:f3:fc:a3:3c:8e:a6:2b:d6:af:7f:a5:24:
                    93:1a:ad:9f:85:94:30:a8:dc:a6:16:60:af:0d:0d:
                    b6:42:eb:0c:58:0a:f8:25:52:90:95:07:d6:80:b0:
                    ed:db:f0:3b:a5:a4:c5:b2:63:f5:70:69:41:a4:b9:
                    19:50:9a:77:71:b9:66:e8:c8:b5:0a:35:35:fa:83:
                    3d:b1:49:63:25:26:59:0b:d3:67:ba:67:08:29:c9:
                    78:a9:65:8b:13:ea:79:02:18:c1:4e:e8:67:33:73:
                    cd:39:dd:34:5f:5a:77:ad:45:f8:1c:59:4a:ad:31:
                    d2:a1:2b:f3:72:eb:d5:07:a4:77:bb:ad:ec:40:96:
                    09:40:12:79:9b:fb:54:d5:2f:30:ae:df:c5:0d:48:
                    c9:f2:8f:43:8d:ae:3b:66:08:59:97:04:87:66:f5:
                    9a:b5:6a:bc:91:97:8f:8a:7f:f6:87:a1:97:19:c1:
                    59:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F2:28:C0:B1:92:27:D9:F3:3E:09:6C:EA:7E:71:16:B9:1D:E1:E8
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3138382e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:2d:69:70:28:f3:48:ab:2f:32:d7:d9:7b:15:4d:62:c6:8e:
         da:05:22:ce:8c:b1:9a:39:83:12:c5:2c:fb:8c:a6:03:57:25:
         23:a7:03:64:11:9d:ac:e0:62:a7:53:2f:43:ae:57:db:7e:3c:
         85:06:09:54:e4:63:ce:a6:6d:38:04:a4:8f:bc:f8:3c:58:0c:
         55:39:8c:f6:80:7e:8d:5e:23:fa:17:c0:60:cb:d6:1a:f8:f9:
         8c:dc:c7:a0:a4:1e:f1:09:4f:d1:71:38:25:4a:58:3d:2b:9b:
         4b:c3:fe:0f:1d:53:4a:ab:a7:9d:56:ab:22:4a:43:59:d4:dd:
         2b:86:04:67:da:27:7f:65:de:12:93:70:91:a2:b5:17:7c:22:
         9f:cb:01:81:6f:69:4c:d6:b2:62:44:98:1c:9a:64:27:e1:e2:
         b9:d9:76:63:70:dc:46:f3:d2:6b:8d:cd:da:01:30:ce:4e:7d:
         ec:ef:0a:b2:b5:7a:e1:21:d8:7c:95:18:a9:a2:cf:3c:b3:22:
         86:67:92:af:24:5e:fe:f5:57:86:8e:9f:e8:58:89:18:a2:a0:
         7e:bf:94:75:c5:c5:16:46:15:36:b7:8c:1a:3f:88:3e:7a:26:
         b4:c5:c1:ac:6b:d8:b5:b8:5a:a2:cc:7a:fe:62:08:91:7c:1a:
         ed:6d:9b:68
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUdwZuFaSLiCl6XvgV4XMqlBe64mQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZBREQzMUYwNkEwQjc0NUNGREE2QjkzODM1RTE5OERE
QjBEQjc4NDAeFw0yNDAzMDUxODA5MzZaFw0yNTAzMDQxODE0MzZaMDMxMTAvBgNV
BAMTKDJCRjIyOEMwQjE5MjI3RDlGMzNFMDk2Q0VBN0U3MTE2QjkxREUxRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpUmRryTjrLTvhAWeBNGli87XX
9mXFnJNuZ2Okv0VKoQubq/RoRZ7tcWhApnjUKcbayua3f/PSkZzBjXdggOIQMD9j
sMba7v17JJGEz/P8ozyOpivWr3+lJJMarZ+FlDCo3KYWYK8NDbZC6wxYCvglUpCV
B9aAsO3b8DulpMWyY/VwaUGkuRlQmndxuWboyLUKNTX6gz2xSWMlJlkL02e6Zwgp
yXipZYsT6nkCGMFO6Gczc8053TRfWnetRfgcWUqtMdKhK/Ny69UHpHe7rexAlglA
Enmb+1TVLzCu38UNSMnyj0ONrjtmCFmXBIdm9Zq1aryRl4+Kf/aHoZcZwVmVAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUK/IowLGSJ9nzPgls6n5xFrkd4egwHwYDVR0j
BBgwFoAUdq3THwagt0XP2muTg14ZjdsNt4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MUU2MzZGOTBFNzIzQ0ExNTlGOERGNTFCMjgzQTJBMDVD
NUE0MDNEOEU0QTQ2NjFCOUQ4NkQ4OTJEQjYyRDAyLzAvNzZBREQzMUYwNkEwQjc0
NUNGREE2QjkzODM1RTE5OEREQjBEQjc4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NkFERDMxRjA2QTBCNzQ1Q0ZE
QTZCOTM4MzVFMTk4RERCMERCNzg0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjFFNjM2RjkwRTcyM0NBMTU5RjhERjUxQjI4M0EyQTA1QzVBNDAzRDhF
NEE0NjYxQjlEODZEODkyREI2MkQwMi8wLzMxMzkzMDJlMzIzNDMyMmUzMTM4Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
8rwwDQYJKoZIhvcNAQELBQADggEBAIAtaXAo80irLzLX2XsVTWLGjtoFIs6MsZo5
gxLFLPuMpgNXJSOnA2QRnazgYqdTL0OuV9t+PIUGCVTkY86mbTgEpI+8+DxYDFU5
jPaAfo1eI/oXwGDL1hr4+Yzcx6CkHvEJT9FxOCVKWD0rm0vD/g8dU0qrp51WqyJK
Q1nU3SuGBGfaJ39l3hKTcJGitRd8Ip/LAYFvaUzWsmJEmByaZCfh4rnZdmNw3Ebz
0muNzdoBMM5OfezvCrK1euEh2HyVGKmizzyzIoZnkq8kXv71V4aOn+hYiRiioH6/
lHXFxRZGFTa3jBo/iD56JrTFwaxr2LW4WqLMev5iCJF8Gu1tm2g=
-----END CERTIFICATE-----