Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e32342e302f32322d3234203d3e203532323632.roa
File:                     3139302e3234322e32342e302f32322d3234203d3e203532323632.roa (raw, json)
Hash identifier:          GgQQaHXdkp1FPtzPEpE2GcfT1SSMRYFSWsfuq1KLxvY=
Subject key identifier:   A5:1F:1A:1B:F9:D1:1E:AF:57:5B:6B:1E:F7:26:4E:B8:56:20:1B:F5
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       41012B2EB9D7B960F378BC195980BC9D3AEACB72
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e32342e302f32322d3234203d3e203532323632.roa
Signing time:             Tue 05 Mar 2024 18:14:44 +0000
ROA not before:           Tue 05 Mar 2024 18:09:44 +0000
ROA not after:            Tue 04 Mar 2025 18:14:44 +0000
asID:                     52262
IP address blocks:        190.242.24.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:01:2b:2e:b9:d7:b9:60:f3:78:bc:19:59:80:bc:9d:3a:ea:cb:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:44 2024 GMT
            Not After : Mar  4 18:14:44 2025 GMT
        Subject: CN=A51F1A1BF9D11EAF575B6B1EF7264EB856201BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:cb:b4:eb:2a:89:06:50:4b:6e:2c:58:a6:
                    d5:df:de:77:a1:e6:dd:8a:45:9e:08:83:f6:16:17:
                    24:6d:82:83:12:7e:59:5c:5e:4c:0d:0b:aa:c2:4f:
                    68:7d:a4:5d:3e:00:93:f8:71:06:ac:03:da:0a:6c:
                    3b:2f:ba:4d:8d:e5:0e:a2:d8:0c:63:78:f4:4f:a8:
                    7f:5e:e1:9e:4b:b9:94:d4:7a:fa:a7:a8:62:00:be:
                    38:06:e0:fc:a8:8a:5e:e4:85:0e:9b:12:dc:6d:13:
                    75:00:86:8d:da:76:69:68:6e:27:9c:08:87:b8:75:
                    3b:27:31:53:2c:37:08:8d:77:7a:97:1e:7b:3d:41:
                    61:04:21:d7:d5:f6:8f:99:f6:2a:e4:d6:9a:51:4c:
                    f6:a0:88:f2:f5:7f:76:f9:74:f4:ed:06:10:c6:58:
                    64:71:ff:ed:dc:38:29:2a:90:da:48:ff:23:aa:c0:
                    3e:61:c5:c5:19:28:1f:59:2a:a8:b7:99:24:f8:6f:
                    21:3b:eb:3b:df:13:f8:e9:37:56:d4:13:92:71:73:
                    4b:a3:01:97:62:50:03:37:d1:6a:7a:a6:67:80:a3:
                    b8:31:ab:8f:22:84:da:ff:43:f9:ef:07:97:ff:82:
                    12:0a:1c:e0:da:dd:9e:ef:8c:ab:29:b3:43:fc:7e:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1F:1A:1B:F9:D1:1E:AF:57:5B:6B:1E:F7:26:4E:B8:56:20:1B:F5
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e32342e302f32322d3234203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:e7:3c:25:09:b8:1c:ea:bc:bc:38:42:d5:53:9a:dd:a6:c6:
         cd:d4:6a:cd:99:b8:b3:f0:e1:9e:a3:9e:14:03:56:f4:55:ae:
         ac:f7:4b:b5:c6:8b:ec:03:1e:eb:51:1f:88:d4:f0:63:33:3d:
         fa:76:8f:34:e1:30:09:b5:82:71:21:9b:c0:e6:18:f0:4d:14:
         75:55:09:82:81:6c:ae:34:4c:e5:44:88:b3:52:ec:fe:6f:35:
         1a:f8:d1:6c:e6:ac:41:3d:f1:69:f0:b5:d1:af:83:c4:91:d2:
         38:34:86:de:43:b2:8a:1d:1e:0b:0a:d7:7b:ab:a9:d5:f2:64:
         dc:f8:db:db:78:0b:5d:db:d1:f4:54:20:86:1e:32:d3:31:db:
         95:67:db:ef:cc:74:2e:c1:2a:23:b9:97:07:5b:a6:a5:45:7b:
         e9:7f:5a:3c:9a:2e:e3:3b:83:fe:60:3a:da:12:bc:dd:97:46:
         2c:e7:c0:3c:1e:25:60:9f:31:0f:b5:48:3b:aa:07:f7:a1:ec:
         94:c9:7e:89:39:81:e0:d2:a3:91:82:1e:c6:6f:ab:06:08:b3:
         c1:68:d0:5a:4c:9f:71:a4:04:7a:9d:15:b9:25:ce:55:b3:9b:
         d1:5b:3e:4e:af:6e:ff:3a:21:da:88:e1:b9:77:46:1f:4b:ff:
         95:f6:50:27
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQQErLrnXuWDzeLwZWYC8nTrqy3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZBREQzMUYwNkEwQjc0NUNGREE2QjkzODM1RTE5OERE
QjBEQjc4NDAeFw0yNDAzMDUxODA5NDRaFw0yNTAzMDQxODE0NDRaMDMxMTAvBgNV
BAMTKEE1MUYxQTFCRjlEMTFFQUY1NzVCNkIxRUY3MjY0RUI4NTYyMDFCRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ksu06yqJBlBLbixYptXf3neh
5t2KRZ4Ig/YWFyRtgoMSfllcXkwNC6rCT2h9pF0+AJP4cQasA9oKbDsvuk2N5Q6i
2AxjePRPqH9e4Z5LuZTUevqnqGIAvjgG4Pyoil7khQ6bEtxtE3UAho3admlobiec
CIe4dTsnMVMsNwiNd3qXHns9QWEEIdfV9o+Z9irk1ppRTPagiPL1f3b5dPTtBhDG
WGRx/+3cOCkqkNpI/yOqwD5hxcUZKB9ZKqi3mST4byE76zvfE/jpN1bUE5Jxc0uj
AZdiUAM30Wp6pmeAo7gxq48ihNr/Q/nvB5f/ghIKHODa3Z7vjKsps0P8flMdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUpR8aG/nRHq9XW2se9yZOuFYgG/UwHwYDVR0j
BBgwFoAUdq3THwagt0XP2muTg14ZjdsNt4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MUU2MzZGOTBFNzIzQ0ExNTlGOERGNTFCMjgzQTJBMDVD
NUE0MDNEOEU0QTQ2NjFCOUQ4NkQ4OTJEQjYyRDAyLzAvNzZBREQzMUYwNkEwQjc0
NUNGREE2QjkzODM1RTE5OEREQjBEQjc4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NkFERDMxRjA2QTBCNzQ1Q0ZE
QTZCOTM4MzVFMTk4RERCMERCNzg0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjFFNjM2RjkwRTcyM0NBMTU5RjhERjUxQjI4M0EyQTA1QzVBNDAzRDhF
NEE0NjYxQjlEODZEODkyREI2MkQwMi8wLzMxMzkzMDJlMzIzNDMyMmUzMjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjMyMzYzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr7yGDAN
BgkqhkiG9w0BAQsFAAOCAQEASuc8JQm4HOq8vDhC1VOa3abGzdRqzZm4s/DhnqOe
FANW9FWurPdLtcaL7AMe61EfiNTwYzM9+naPNOEwCbWCcSGbwOYY8E0UdVUJgoFs
rjRM5USIs1Ls/m81GvjRbOasQT3xafC10a+DxJHSODSG3kOyih0eCwrXe6up1fJk
3Pjb23gLXdvR9FQghh4y0zHblWfb78x0LsEqI7mXB1umpUV76X9aPJou4zuD/mA6
2hK83ZdGLOfAPB4lYJ8xD7VIO6oH96HslMl+iTmB4NKjkYIexm+rBgizwWjQWkyf
caQEep0VuSXOVbOb0Vs+Tq9u/zoh2ojhuXdGH0v/lfZQJw==
-----END CERTIFICATE-----
Generated at Tue Jul 30 19:32:43 2024 by rpki-client on console-fra.rpki-client.org