Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e3132362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          4bAApRjj05dObdH0ngNSF/UqRA63yzTDVfIDU6n9nVQ=
Subject key identifier:   83:31:F3:89:70:FE:88:3A:1C:1D:69:BC:B9:1D:DD:73:74:CA:C0:BE
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       56C4F9CD6965514A8C2A77EDC120451E10AFA96C
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32342d3234203d3e20383334.roa
Signing time:             Tue 08 Oct 2024 16:15:00 +0000
ROA not before:           Tue 08 Oct 2024 16:10:00 +0000
ROA not after:            Tue 07 Oct 2025 16:15:00 +0000
asID:                     834
IP address blocks:        190.93.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 16 Oct 2024 11:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c4:f9:cd:69:65:51:4a:8c:2a:77:ed:c1:20:45:1e:10:af:a9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Oct  8 16:10:00 2024 GMT
            Not After : Oct  7 16:15:00 2025 GMT
        Subject: CN=8331F38970FE883A1C1D69BCB91DDD7374CAC0BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:38:cd:07:ec:28:19:f1:db:c9:cd:4e:29:
                    3d:20:2b:ba:99:da:de:23:72:75:69:3a:9b:af:6c:
                    08:06:12:51:b2:de:03:1e:64:63:dd:ae:f1:0e:a9:
                    e5:52:dc:32:9e:d7:14:e8:6a:d8:b5:d4:8f:f3:14:
                    40:28:09:39:64:e1:21:8f:74:c5:59:e8:eb:91:6b:
                    93:43:4c:f8:f9:bb:25:0a:fc:e6:46:aa:f0:b7:ee:
                    0e:ee:4f:43:4d:34:0a:f9:63:0d:3c:74:40:e2:8b:
                    f1:48:58:cc:99:ac:d9:e3:37:fe:49:68:5e:2d:09:
                    98:69:48:f5:56:5c:9e:52:e6:a1:f7:13:d4:2b:0c:
                    0a:49:d7:47:09:08:30:61:70:8a:bf:62:67:20:13:
                    68:a1:d4:61:c5:f9:0b:79:75:ae:3c:24:d9:52:02:
                    54:31:79:07:2c:05:fb:0d:e9:64:c1:25:95:57:7a:
                    7f:81:10:2a:dc:d1:f9:8d:8b:9c:77:0c:e0:a4:50:
                    34:b3:68:e4:3d:1f:a5:c4:f1:fc:a1:58:be:41:b3:
                    fa:87:ba:52:ee:59:58:0d:35:f6:d8:ee:d7:ae:f1:
                    c9:e6:c6:16:fb:74:90:8b:bc:56:ac:99:3c:d0:ec:
                    c1:51:13:e7:33:31:c2:8f:85:1f:d6:1d:3f:17:f6:
                    ec:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:31:F3:89:70:FE:88:3A:1C:1D:69:BC:B9:1D:DD:73:74:CA:C0:BE
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:73:7d:b4:4a:b5:ec:15:e3:8d:53:b6:b1:ce:63:ae:96:88:
         81:8b:0e:64:66:c1:8f:e5:17:8f:26:83:ad:8b:f0:2c:68:33:
         68:0e:5f:33:ec:59:90:12:50:b2:da:97:7f:30:47:d7:32:a1:
         db:61:10:a9:ea:6f:eb:a3:66:b6:02:0e:cf:ea:61:9e:35:e3:
         1c:9e:31:e6:64:08:bd:85:05:f9:11:cf:29:49:c0:1e:cf:c5:
         e1:a2:b3:0c:17:5b:e6:b9:e2:89:7e:43:fe:0f:05:73:4a:78:
         fe:1a:02:de:9c:61:90:2d:fa:24:62:8f:28:64:a2:58:e9:82:
         e6:06:fb:56:eb:a3:82:11:88:d8:40:c6:4f:0c:b4:ef:a8:46:
         6b:dd:50:55:9f:ec:a3:bf:c5:96:57:36:d1:47:34:66:b3:c3:
         00:43:be:ba:fe:de:ae:e7:50:ed:09:b1:38:00:ea:30:d4:fb:
         38:31:12:c4:ef:63:2b:db:bf:e1:0f:45:19:cb:89:d9:0c:54:
         c1:ef:62:8f:3f:f2:40:13:66:ec:c8:8b:ff:29:0a:9c:29:44:
         f4:2a:ad:13:2c:83:3e:e1:48:b5:87:bf:26:3a:73:86:d2:28:
         69:a6:b8:c0:df:f9:0a:c3:b9:52:e8:4d:46:72:46:78:51:05:
         de:3e:47:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 13:44:38 2024 by rpki-client on console-fra.rpki-client.org