Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e35382e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3234322e35382e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          Gmv/gLZzV93Ecdt4ny98af8xf6JQs+7ZQHx+FMq2V0k=
Subject key identifier:   56:06:10:12:19:DE:50:AE:4C:8D:59:A8:22:7C:01:5A:DA:EF:22:08
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       585206449353AC3A26F5A06C7DA68CEEFBBC9D08
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e35382e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:29 +0000
ROA not before:           Tue 05 Mar 2024 18:09:29 +0000
ROA not after:            Tue 04 Mar 2025 18:14:29 +0000
asID:                     262191
IP address blocks:        190.242.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:52:06:44:93:53:ac:3a:26:f5:a0:6c:7d:a6:8c:ee:fb:bc:9d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:29 2024 GMT
            Not After : Mar  4 18:14:29 2025 GMT
        Subject: CN=5606101219DE50AE4C8D59A8227C015ADAEF2208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0a:34:14:4b:d1:3c:b3:df:44:77:38:41:bd:
                    8e:c8:c7:dc:ea:97:c1:8c:e9:54:85:0d:e6:e1:4b:
                    e7:68:72:3a:fa:86:93:fe:44:34:d5:fd:3b:cb:5e:
                    e5:70:e3:2a:c9:98:98:3a:8f:b6:af:23:0b:55:50:
                    f4:82:86:4b:8d:c6:63:4c:58:cb:8c:3d:54:4c:dc:
                    f4:28:4a:7a:5d:84:80:82:3d:59:33:f7:96:2d:ac:
                    d8:12:a3:47:15:f5:89:55:67:b5:00:84:f3:17:70:
                    52:16:0e:91:15:f5:ac:25:7b:8e:eb:d9:35:88:16:
                    08:a2:aa:5b:44:53:1c:ba:1c:ac:36:73:13:e5:a5:
                    cb:c6:85:ec:22:37:e5:e4:80:3e:f0:15:7d:68:90:
                    53:1f:92:bb:d6:e2:fc:5d:81:81:13:9a:48:cd:ea:
                    eb:da:c8:03:33:2b:5b:13:2c:9b:a6:68:3b:93:63:
                    e8:3d:a4:8a:a3:de:41:1c:34:f4:c9:8d:4d:c4:f3:
                    21:ce:6f:a7:38:23:6e:a7:7f:26:d3:a4:2b:37:45:
                    97:3b:bd:9c:90:90:e1:33:11:fa:08:55:9d:37:82:
                    2a:1f:da:0e:4f:5d:2c:22:b4:4d:a4:b3:0e:ba:a0:
                    4d:da:d5:be:64:1a:a9:4c:37:57:20:18:0a:d9:3f:
                    b0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:06:10:12:19:DE:50:AE:4C:8D:59:A8:22:7C:01:5A:DA:EF:22:08
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e35382e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:ab:ac:6e:6f:b7:1b:3a:28:0c:34:2a:71:f7:2e:5d:2e:5f:
         c1:06:f2:b6:55:d4:c2:8a:40:df:93:8f:e6:1a:31:bc:8c:8d:
         fd:73:17:05:c3:06:60:27:d3:de:17:2b:67:b2:32:03:14:43:
         01:99:90:e1:b9:7a:23:3a:30:5a:63:1a:42:44:6e:55:83:13:
         07:4c:6d:04:a3:41:5f:e0:23:29:67:e5:6e:50:f8:b9:10:5b:
         4a:8f:b5:a1:23:38:00:ec:b0:80:6c:e8:e0:2b:02:69:0b:76:
         20:df:7f:fc:4e:91:b5:c9:a0:b9:1e:1b:b8:d1:0d:87:5b:7a:
         ef:58:59:91:cb:58:e3:f0:7b:91:b8:a9:2f:b1:ca:c8:51:50:
         18:55:5d:20:8f:45:6e:28:57:f7:72:fa:6d:84:3e:8e:4b:83:
         c3:2b:5d:a4:f8:6d:eb:8e:c4:31:21:f9:08:53:ac:83:c2:af:
         fe:ee:e1:96:02:4a:77:81:63:e0:76:07:f4:4e:aa:c7:94:e6:
         e1:bb:57:0f:89:0a:50:49:69:1f:1c:a0:ae:3c:a7:a7:59:b2:
         4c:05:a5:41:fd:df:3a:01:b3:b5:24:e1:8d:0e:ea:7b:55:5a:
         a8:dc:72:d3:42:1b:fd:83:fd:7c:b8:80:38:cf:8c:92:47:65:
         1a:64:5a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 19:59:36 2024 by rpki-client on console-ams.rpki-client.org