Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32342d3234203d3e20313734.roa
File:                     3139302e39332e3132362e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          GStvfJHSeVQDOFL6AXXzE21kE08zxyFbEdQRZgnCTSM=
Subject key identifier:   FF:BB:E0:08:AF:73:57:AD:59:A7:89:46:30:36:79:5B:05:86:04:5B
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       59E25A38FC8B09950DA980007369EC7E7907BC5C
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32342d3234203d3e20313734.roa
Signing time:             Tue 10 Sep 2024 13:10:00 +0000
ROA not before:           Tue 10 Sep 2024 13:05:00 +0000
ROA not after:            Tue 09 Sep 2025 13:10:00 +0000
asID:                     174
IP address blocks:        190.93.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 16:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e2:5a:38:fc:8b:09:95:0d:a9:80:00:73:69:ec:7e:79:07:bc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 10 13:05:00 2024 GMT
            Not After : Sep  9 13:10:00 2025 GMT
        Subject: CN=FFBBE008AF7357AD59A789463036795B0586045B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c2:65:37:5b:2b:c9:d6:ff:7a:be:e4:20:5f:
                    6e:e3:ca:59:de:a9:ca:b4:72:40:ff:b6:05:e5:21:
                    df:b1:4a:6f:69:c7:c1:b5:de:f5:1b:ee:c0:0c:45:
                    09:22:a8:56:22:94:86:02:b3:40:b4:04:25:4d:00:
                    10:f1:57:8e:e2:3c:95:0d:e7:96:4f:70:4e:20:2b:
                    0f:41:1c:27:b3:b1:59:6c:9b:91:d3:ad:5a:74:4a:
                    40:ea:54:59:b9:36:cb:e5:6b:9c:bf:2c:1a:ee:56:
                    58:1d:bf:1e:9b:9f:90:ca:66:3a:3a:43:ff:6c:c0:
                    30:68:e8:81:ba:6b:02:92:9d:84:ec:35:ee:1d:6f:
                    c5:55:ac:03:88:f4:44:26:c0:e1:5c:64:31:57:2b:
                    11:f9:a5:d0:56:fe:03:3d:60:c5:b7:18:a5:05:99:
                    58:5b:1b:4f:f4:c6:b3:b9:c8:d5:29:41:74:6d:78:
                    35:2c:88:50:3f:0c:da:8c:e7:b3:3d:f3:94:bf:9d:
                    66:f5:05:63:5c:d0:64:f8:85:22:e2:de:1c:88:68:
                    7e:69:a7:14:5c:f6:b5:9f:21:1f:fd:f6:df:af:5d:
                    5e:ed:c3:b6:ce:0e:92:ed:b0:3a:53:4b:cc:06:cd:
                    e3:dc:f1:c4:18:ce:53:c7:ca:ef:1e:29:75:d4:cf:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BB:E0:08:AF:73:57:AD:59:A7:89:46:30:36:79:5B:05:86:04:5B
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:df:4f:17:9d:97:66:bd:c7:bc:1b:f9:39:22:1d:36:13:77:
         b4:ac:00:d5:ae:ac:21:63:dc:3f:d0:9c:4f:22:81:f0:84:a0:
         cb:11:57:bb:8f:18:ff:a9:65:22:10:2f:e2:4f:9a:20:ec:d5:
         a6:90:2b:3b:e3:f8:1d:bb:c0:7e:6e:d3:a0:73:a3:05:fc:26:
         b6:97:39:8b:1e:aa:58:b2:85:50:90:4a:91:1f:a5:65:b5:42:
         a1:c6:e2:9e:19:52:7a:35:6f:af:d1:12:ae:51:36:69:11:25:
         9e:6e:8e:b6:12:47:1e:2b:99:9b:8c:91:d4:1e:de:98:b4:67:
         32:a0:70:95:2e:79:77:65:41:25:6f:85:89:d2:f3:6f:9c:bc:
         6a:f3:f2:97:78:3e:58:86:fb:ca:3f:de:aa:4b:56:28:1c:69:
         aa:e5:85:1d:ec:4f:e0:3b:50:90:e6:0a:04:c2:60:3f:ef:d7:
         18:7b:a6:f2:61:4d:55:78:9a:f8:16:b9:d3:95:51:6c:3b:4b:
         7c:bf:d2:8b:42:a8:a5:d9:d5:56:c2:f6:fb:41:a8:6a:cd:4f:
         dc:02:2f:5f:77:3c:23:ed:e8:b5:27:68:69:12:6f:a5:d9:7d:
         04:c4:17:b7:26:04:53:f7:54:2d:da:8f:1f:24:b1:f5:fe:b9:
         e1:7a:3b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:29:09 2024 by rpki-client on console-ams.rpki-client.org