Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e34382e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e34382e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          qmXsnRJrbG9Dmf6ko3Xwjy/48wjoQRi/tQww7t2WT/M=
Subject key identifier:   57:AF:B8:29:58:2F:B1:C8:30:51:0D:DF:D8:1F:4B:2A:0B:43:4C:4D
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       0114361D94458AE2574088C9E71B06B99189FA4D
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e34382e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:14:22 +0000
ROA not before:           Tue 05 Mar 2024 18:09:22 +0000
ROA not after:            Tue 04 Mar 2025 18:14:22 +0000
asID:                     23520
IP address blocks:        190.242.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:14:36:1d:94:45:8a:e2:57:40:88:c9:e7:1b:06:b9:91:89:fa:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:22 2024 GMT
            Not After : Mar  4 18:14:22 2025 GMT
        Subject: CN=57AFB829582FB1C830510DDFD81F4B2A0B434C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:64:03:7f:2c:93:17:83:31:e5:be:45:bd:
                    85:31:81:a0:52:f5:0b:18:90:a5:e4:e4:c9:55:d8:
                    62:bb:80:a8:b0:f5:29:9f:aa:b1:5b:b6:29:32:c1:
                    87:db:0b:f5:ca:05:3a:51:69:d5:34:c6:9d:11:d1:
                    92:62:f9:61:9a:e4:b7:21:0e:65:9d:3b:cf:55:7c:
                    d6:24:c3:a3:5d:41:68:fc:d2:bf:6c:50:fc:47:a9:
                    89:32:ab:9b:22:d0:63:fe:42:55:4a:70:b6:62:c6:
                    5d:f4:a2:70:2e:17:ad:70:29:07:12:22:f0:76:b8:
                    5b:f6:f9:67:ff:b5:c6:cb:68:de:aa:f3:1d:9f:39:
                    20:e0:11:99:85:99:a6:4b:60:d5:1d:46:03:e4:a0:
                    2e:58:c4:24:e9:8b:5d:67:2b:31:8a:8c:74:53:9d:
                    5f:bf:14:9b:a0:bf:12:96:4a:44:e8:f4:5c:1c:b7:
                    a0:cc:7c:3d:18:32:b2:ff:e4:ab:67:88:72:c6:21:
                    9a:ae:ec:ba:b7:ca:14:07:ba:5e:3c:90:41:c3:46:
                    bd:b2:fd:a3:29:83:0c:78:38:e0:74:76:05:a4:46:
                    4c:c4:ea:13:4c:a8:a3:56:76:cc:73:ba:99:48:f3:
                    21:3f:18:16:16:82:fa:8a:b9:80:de:e0:b4:a2:a5:
                    8e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AF:B8:29:58:2F:B1:C8:30:51:0D:DF:D8:1F:4B:2A:0B:43:4C:4D
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e34382e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:a6:61:91:c0:85:c5:33:d2:ec:15:54:a2:d6:f3:94:5f:3b:
         75:73:93:6b:0d:2a:1e:59:2a:e1:d3:98:1b:f2:7b:84:69:64:
         2c:64:fd:43:34:ea:c4:b5:44:e6:f8:2b:e4:6f:84:b5:0c:e1:
         34:d7:3a:c2:e5:6b:ee:a9:40:1c:29:88:6f:dd:3c:44:70:46:
         5b:fd:0b:1c:b0:1b:20:01:3d:50:6f:22:d0:eb:ce:aa:74:06:
         8c:10:fe:62:91:a6:c7:e1:46:d7:c0:bb:cf:c2:a8:70:96:f4:
         f2:28:b6:1f:85:3f:33:cd:15:f2:8a:c4:8a:bd:1c:d0:09:ff:
         04:09:f3:ca:24:8c:4b:3d:8f:41:d7:71:b1:2f:15:9c:64:2b:
         b1:c8:ff:e7:0f:a4:b8:9a:cc:7a:07:ef:2d:37:9b:f8:0f:1c:
         17:44:18:a4:a0:dd:71:69:7d:5a:28:3f:30:7b:3b:f8:1f:d4:
         6e:b6:b8:39:72:b8:78:ed:b3:bf:f4:eb:04:4f:f2:36:6c:56:
         43:47:37:f7:01:4f:52:28:1d:e3:18:0d:c4:d6:8d:68:d4:d9:
         b0:a4:ac:15:e9:1c:97:a5:44:d8:e5:64:7b:ae:83:ef:bd:08:
         54:6c:2b:0f:91:18:a1:f4:a4:61:cb:9a:2e:37:68:e1:7b:ab:
         e1:06:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 19:59:36 2024 by rpki-client on console-ams.rpki-client.org