Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e34392e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e34392e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          eIl8jmTkUbVIE5ZLPp18TvgXuIvC4kiVhCXN2dZfxO4=
Subject key identifier:   38:39:AE:CC:90:BC:ED:B1:FA:A9:83:52:36:50:DA:DF:15:8D:E3:7F
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       7E3D59EB81522019D2F5A61CEF7B7479ABE998AC
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e34392e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:14:45 +0000
ROA not before:           Tue 05 Mar 2024 18:09:45 +0000
ROA not after:            Tue 04 Mar 2025 18:14:45 +0000
asID:                     23520
IP address blocks:        190.242.49.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3d:59:eb:81:52:20:19:d2:f5:a6:1c:ef:7b:74:79:ab:e9:98:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:45 2024 GMT
            Not After : Mar  4 18:14:45 2025 GMT
        Subject: CN=3839AECC90BCEDB1FAA983523650DADF158DE37F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:4f:d5:50:41:26:06:6b:cb:12:18:52:ec:
                    82:99:a6:5a:0c:a0:c6:a3:74:2a:cd:5d:eb:12:d8:
                    3f:1e:98:53:61:8e:d5:e0:dc:5b:76:9d:8e:39:99:
                    ac:ca:39:65:2a:24:13:12:25:c3:6a:be:32:64:4a:
                    91:45:ca:7c:c5:db:e5:d3:a7:c9:56:75:ad:5b:56:
                    ec:ed:28:9d:8f:ea:55:3a:80:fe:b0:49:9c:6f:7e:
                    d1:2f:ed:9d:56:6b:45:7b:d2:17:9b:b3:2d:2b:07:
                    c1:1e:a9:29:ff:b4:52:c0:9b:b9:3a:cf:1e:38:61:
                    12:24:3a:ec:99:44:fa:e0:eb:48:fa:a2:84:ec:b5:
                    26:c5:bf:1a:49:4b:54:54:20:eb:62:88:ee:4b:3c:
                    a1:b6:64:70:f5:ec:1c:f5:9b:87:80:ab:e5:e9:67:
                    ec:0c:15:bc:5c:06:4a:4f:55:ad:82:3d:af:84:44:
                    23:0d:7e:40:57:5d:3b:b0:49:10:1b:64:18:2b:5b:
                    1a:7e:73:2c:39:d9:55:dd:bf:3b:7d:b5:76:a5:12:
                    7a:1d:36:13:62:42:13:30:88:ea:2e:c8:a7:02:c9:
                    6f:0d:7b:72:b0:01:03:5b:24:2f:81:7c:7c:a6:4c:
                    85:4d:0a:37:cd:78:24:e7:ab:dc:5a:7a:05:f0:44:
                    0e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:39:AE:CC:90:BC:ED:B1:FA:A9:83:52:36:50:DA:DF:15:8D:E3:7F
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e34392e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:67:cb:60:42:76:bc:d1:cf:2f:c8:a1:b3:df:d2:a3:58:b6:
         3a:8b:ba:75:85:52:7d:d1:c8:c4:d8:ec:bb:7f:98:8c:92:84:
         1e:73:3d:d1:22:ba:e5:69:50:bf:e3:f7:b0:d3:29:41:89:79:
         9e:8d:a7:e2:67:f5:da:d8:ca:74:31:95:82:7f:de:49:8b:e3:
         a3:95:12:64:92:03:c9:f2:a0:a1:f4:26:d9:4f:b6:9f:c3:90:
         27:51:02:aa:4f:1d:03:00:f9:1e:fc:26:27:0f:fa:46:f0:c8:
         39:5b:94:d8:a1:43:a7:6c:29:23:c9:8e:89:8a:50:ff:c9:d9:
         29:09:eb:8c:42:50:b5:a5:4f:0e:4f:6a:4e:26:24:bc:67:1b:
         6b:f5:9c:ca:05:46:9c:16:62:6c:8b:83:20:e9:61:c0:9e:01:
         86:b8:61:1c:02:64:39:8d:65:f9:58:5b:8c:fa:1c:91:1d:5c:
         c6:8c:9d:b2:f1:9b:4e:f7:c6:d8:26:01:8d:ae:c8:c4:d7:78:
         8b:2b:8f:76:84:e5:87:2b:ac:ac:3b:3d:57:bf:6c:88:c9:67:
         1c:8c:ab:a6:5d:d2:80:08:db:94:6b:a5:69:6f:35:cb:b1:ac:
         29:37:e0:72:f9:82:61:10:af:ae:51:56:57:88:64:32:d1:b6:
         f5:3e:e9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 19:59:36 2024 by rpki-client on console-ams.rpki-client.org