Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e35342e302f32332d3234203d3e20323632313931.roa
File:                     3139302e3234322e35342e302f32332d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          6O6yc6CGHyNQsAi8asQjj7dvn5pMGT8db5LxyywB4wc=
Subject key identifier:   91:24:36:A7:EC:9C:59:F0:F1:9E:17:DE:78:AA:97:5B:A9:5B:62:09
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       4E1DC5ED1622F2E35F1412AB9FEA6F7DBF3C7C70
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e35342e302f32332d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:28 +0000
ROA not before:           Tue 05 Mar 2024 18:09:28 +0000
ROA not after:            Tue 04 Mar 2025 18:14:28 +0000
asID:                     262191
IP address blocks:        190.242.54.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1d:c5:ed:16:22:f2:e3:5f:14:12:ab:9f:ea:6f:7d:bf:3c:7c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:28 2024 GMT
            Not After : Mar  4 18:14:28 2025 GMT
        Subject: CN=912436A7EC9C59F0F19E17DE78AA975BA95B6209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:73:11:bb:b7:19:fc:c2:68:57:7b:a1:2f:11:
                    a2:47:a8:35:79:a6:1a:b7:28:bc:f7:c6:ef:1d:f3:
                    7e:5b:34:da:28:17:59:70:d6:1d:64:91:f5:39:82:
                    9f:b2:77:a3:71:bb:68:f3:00:7c:c4:7c:1b:b6:d4:
                    48:e3:db:f2:70:b4:c2:22:07:44:1f:c7:8a:89:fd:
                    47:f9:88:83:9a:41:1e:ff:6e:2a:4a:dd:ef:37:13:
                    2c:b1:55:92:99:71:c7:04:7e:1e:41:99:f3:11:7b:
                    c7:17:9f:4a:68:f7:ea:27:06:11:b8:0a:39:e3:05:
                    4a:de:fc:8c:30:64:9c:d0:17:9f:a3:5b:4c:e9:4e:
                    5a:1a:db:d5:c8:36:bb:88:cf:0b:b5:2a:55:46:de:
                    fc:41:2a:88:36:4b:38:47:76:cc:80:a7:9f:ad:79:
                    8d:0c:e2:f3:f1:a7:71:72:8d:7b:66:3d:7d:e7:3e:
                    16:2e:c1:a8:83:f4:e8:79:75:63:77:d6:1a:3a:bf:
                    d5:74:d6:76:2e:c6:db:1b:67:e9:66:45:48:68:c1:
                    0e:75:61:cf:6e:8e:de:bb:08:e1:a5:73:ce:c2:20:
                    c4:63:6c:6b:b6:3a:12:fe:20:13:0d:95:bc:9b:68:
                    3a:8a:a7:07:10:1a:a2:07:4a:a6:bd:8e:c9:4e:5a:
                    ec:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:24:36:A7:EC:9C:59:F0:F1:9E:17:DE:78:AA:97:5B:A9:5B:62:09
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e35342e302f32332d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:9d:ef:80:85:b6:93:77:eb:8f:39:95:e1:66:69:8d:96:7b:
         48:ef:56:ef:8b:b9:c7:3e:34:f3:14:c0:22:a4:48:bb:e7:18:
         7c:f8:1a:fd:44:f6:40:49:f4:16:23:9e:09:01:c9:9f:cd:da:
         e4:71:a1:b7:2b:9b:12:cc:d5:be:78:52:54:4d:45:1f:ce:58:
         4e:33:a5:4e:0e:d2:97:bc:22:79:8a:69:bc:4b:05:c3:b5:f8:
         20:4d:bc:75:72:f5:6f:e8:e7:88:55:f8:5b:33:9d:85:ae:c6:
         20:16:8c:fa:7d:d1:93:ee:d9:60:c1:f3:91:ca:af:b8:b6:29:
         03:b3:eb:ed:9e:37:93:da:2c:4b:7b:f9:3c:b7:c9:66:de:e1:
         45:81:b3:40:2b:83:7d:72:92:d8:18:f8:32:1c:e6:d1:04:c3:
         fb:c2:d9:ec:17:c5:7b:71:a6:b5:4a:c7:d1:27:56:5e:50:05:
         f9:1c:04:f5:46:f8:64:0f:42:52:be:ad:22:af:83:ea:61:1e:
         5b:ad:2a:72:62:03:79:b4:65:bd:45:79:95:8f:07:5a:2a:2b:
         c4:ca:3e:e2:2a:6d:93:0a:d0:3a:f6:c6:b6:40:51:eb:41:d2:
         92:0d:cb:eb:5f:19:ce:d8:f1:52:7d:ad:18:84:83:3e:e3:42:
         1e:6e:74:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 19:59:36 2024 by rpki-client on console-ams.rpki-client.org