Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131362e302f32322d3232203d3e20323734373230.roa
File:                     3139302e39332e3131362e302f32322d3232203d3e20323734373230.roa (raw, json)
Hash identifier:          2UJvASnHUYGuWcsrsjrQI0KfH4aRajlWlrZEShpjdBM=
Subject key identifier:   F3:6D:44:83:31:A9:72:DA:7F:49:FC:D6:15:AC:91:2B:07:EB:68:E4
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       22B58CB0AE8B4FF1A4150A5BCE74CF41DE3F7DA9
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131362e302f32322d3232203d3e20323734373230.roa
Signing time:             Thu 12 Dec 2024 18:20:02 +0000
ROA not before:           Thu 12 Dec 2024 18:15:02 +0000
ROA not after:            Thu 11 Dec 2025 18:20:02 +0000
asID:                     274720
IP address blocks:        190.93.116.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Tue 01 Apr 2025 14:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b5:8c:b0:ae:8b:4f:f1:a4:15:0a:5b:ce:74:cf:41:de:3f:7d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Dec 12 18:15:02 2024 GMT
            Not After : Dec 11 18:20:02 2025 GMT
        Subject: CN=F36D448331A972DA7F49FCD615AC912B07EB68E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:c8:df:31:d8:67:65:4d:d2:66:ca:84:27:
                    53:76:91:9a:53:b3:25:53:33:6a:f6:29:87:d3:29:
                    a9:d8:d3:77:69:46:a6:f3:38:22:bf:60:91:57:c0:
                    ef:f4:f4:81:92:c6:ef:47:6a:e3:15:a4:e1:20:ea:
                    91:03:e1:b6:aa:55:16:fc:eb:2f:8c:05:76:44:e3:
                    8e:8f:64:db:a0:86:a5:4a:7f:11:39:e5:5e:3b:fc:
                    8e:e9:c3:c4:66:64:0c:1e:b7:34:cf:33:c2:38:a1:
                    70:44:e8:76:93:8a:9c:e6:f1:68:7a:02:a5:2f:a8:
                    2d:75:4e:9e:a3:ba:e4:5f:7a:3b:58:c2:26:c3:40:
                    a2:5b:ee:52:69:4d:92:14:16:d0:59:57:6b:4b:ff:
                    10:c0:4e:10:7e:61:ae:bb:a3:f4:b2:35:34:3c:26:
                    18:20:64:dd:96:c2:33:32:0d:2e:18:a7:bb:1b:76:
                    94:7d:f7:b6:c6:bc:7f:eb:ff:97:7e:6d:21:4c:2b:
                    5c:48:12:22:12:31:8a:2f:e5:62:22:41:46:2d:9d:
                    0f:1d:4f:bb:40:d6:7f:6e:4b:31:f4:5d:0d:a3:62:
                    15:1a:38:c1:a9:b8:e5:73:ac:9b:3e:24:81:ed:fa:
                    42:1f:71:8b:ca:12:21:e8:9c:b6:c2:fe:d1:cb:c9:
                    38:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6D:44:83:31:A9:72:DA:7F:49:FC:D6:15:AC:91:2B:07:EB:68:E4
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131362e302f32322d3232203d3e20323734373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:76:19:fd:5d:37:a9:1e:de:c7:35:09:04:ba:be:a8:ad:
         70:f6:3a:bb:7c:88:e6:24:37:0b:e9:7f:56:6f:2e:bf:9d:3b:
         c2:f0:25:78:9b:e8:a6:ee:58:75:f1:69:9a:2c:42:71:09:06:
         de:2d:7e:6a:db:e6:bd:61:5d:ad:4e:df:56:90:65:f9:be:df:
         4a:c4:41:96:8b:12:2e:f6:10:e4:f1:b7:1b:50:04:9b:13:35:
         57:c4:63:45:e6:62:ea:4c:ab:01:56:d2:56:cf:23:a4:f2:d4:
         e6:f6:2e:73:02:42:e4:36:68:de:c1:3e:6d:b1:71:aa:c3:d0:
         9f:01:d8:c0:84:c2:c4:b2:fe:c1:d2:72:e7:fe:40:c7:51:0b:
         1d:6d:f4:a6:0e:62:d9:0d:1b:3e:79:a0:86:ba:53:82:6c:63:
         71:00:ad:50:23:5f:59:34:8b:a2:34:5d:88:86:fb:13:1b:27:
         62:d0:eb:a8:c4:4c:25:62:b9:29:a3:0e:ca:b2:4f:48:b6:37:
         e1:e9:6c:84:98:4e:e7:25:55:27:b9:f2:b4:8f:27:e9:94:1b:
         cc:db:ce:10:e2:08:73:05:e6:22:32:3c:bb:21:64:f9:dc:6c:
         b0:4c:c7:93:00:ba:ab:10:90:fd:34:5d:9a:6e:53:c6:30:c2:
         7c:ed:ee:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:13:55 2025 by rpki-client