Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130352e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e3130352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          lzyYfCOpflUOS0STQ354sISDtm4Xw+dP5xSwoN0Bkyg=
Subject key identifier:   62:B6:D3:9B:22:81:8A:63:9A:AE:0A:90:BE:19:69:95:E0:70:14:3A
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       211F4144CA0C60C3806F84492612908608C188AB
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130352e302f32342d3234203d3e20383334.roa
Signing time:             Mon 30 Sep 2024 15:10:00 +0000
ROA not before:           Mon 30 Sep 2024 15:05:00 +0000
ROA not after:            Mon 29 Sep 2025 15:10:00 +0000
asID:                     834
IP address blocks:        190.93.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 10 Oct 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1f:41:44:ca:0c:60:c3:80:6f:84:49:26:12:90:86:08:c1:88:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 30 15:05:00 2024 GMT
            Not After : Sep 29 15:10:00 2025 GMT
        Subject: CN=62B6D39B22818A639AAE0A90BE196995E070143A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b8:f8:4c:59:62:eb:d2:5d:69:40:69:a1:7e:
                    f3:4c:3a:8c:74:6d:a8:da:4d:b6:7a:1c:33:5d:03:
                    d3:88:44:63:bf:cd:f9:bc:16:b8:c1:42:44:ca:c3:
                    02:99:01:0d:e0:3c:f6:d5:7e:50:a9:a0:23:d2:c7:
                    3a:6c:2b:0f:c9:9b:32:d9:db:ee:ca:a5:2f:d1:17:
                    7f:55:05:77:d0:ef:aa:f1:8e:b7:b1:21:4c:38:0a:
                    ea:29:8f:95:4b:b1:7f:41:4a:89:b6:84:0e:77:4c:
                    a5:5a:6f:8b:27:cf:68:e2:f6:29:77:07:8e:d4:59:
                    ef:c8:f2:54:2a:0b:e1:3c:b8:68:9f:ef:ca:9f:2d:
                    ed:05:9b:4b:bb:db:84:e7:7d:52:dd:db:34:cd:02:
                    a6:3e:90:40:55:d1:1e:dc:f7:27:0a:59:89:99:64:
                    ea:f2:4f:0c:cc:f7:ae:0c:f4:df:a1:63:dc:6e:dd:
                    26:a9:33:73:64:13:2e:62:2c:f2:8a:68:e8:32:b9:
                    48:69:f2:4f:c3:c7:0d:bb:16:f4:c9:56:ec:23:4f:
                    90:6b:96:09:1d:7b:81:4c:6d:9a:f0:6e:e9:b0:00:
                    e9:ea:36:87:27:b4:24:d6:8a:8a:88:de:d0:d4:8f:
                    3e:58:ab:4c:62:1e:8e:ae:dd:9d:46:f7:ff:51:f6:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B6:D3:9B:22:81:8A:63:9A:AE:0A:90:BE:19:69:95:E0:70:14:3A
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:5c:6e:46:e6:38:ce:86:a2:1e:24:93:5c:56:cb:47:c5:3e:
         05:bb:01:9b:3d:23:a1:fb:87:ad:85:ba:a9:44:f8:85:5e:05:
         46:6a:e5:b5:8e:72:16:8e:5f:bc:07:a7:3b:4d:fa:c4:24:f9:
         38:39:8a:b9:d4:3e:1c:32:10:19:84:d8:e3:7a:8d:2f:54:9a:
         57:85:35:da:81:0d:43:4c:c4:b5:e2:5e:b9:d9:86:87:1b:d9:
         cb:50:e5:97:63:5b:eb:74:0d:ad:4b:15:d2:86:04:85:0c:cc:
         43:af:36:28:38:0e:d7:71:fa:d2:4c:c8:96:dc:d2:7e:15:80:
         e9:cd:3a:1c:34:2c:16:73:5a:61:4c:54:f1:38:ed:06:55:78:
         cd:05:15:19:c6:54:56:45:61:84:e4:40:18:c3:14:7b:fa:92:
         dd:37:ad:ce:70:65:0f:d7:1e:9f:54:20:2a:8e:1b:0a:4e:38:
         85:58:54:3c:d4:c7:20:77:f8:45:4b:f6:bb:0c:d8:95:1f:2e:
         1f:1c:34:3b:b2:af:e6:6a:d9:21:72:51:09:41:bb:fa:71:fe:
         9a:f7:37:ba:7e:94:ff:e6:43:0d:e8:78:e2:4a:c2:a9:7c:55:
         58:e0:9b:ce:83:53:93:c2:13:21:de:17:c1:fb:23:5b:8b:1e:
         cd:71:8b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 16:08:14 2024 by rpki-client on console-fra.rpki-client.org