Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e36382e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e36382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          6ZDwsB1YhmG5IHqtNkW4IcHmRiNrelr9wdY9cxSzsWo=
Subject key identifier:   1F:29:98:4E:44:46:52:87:7C:C0:4E:E4:5D:89:08:47:5C:C9:8C:C6
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       4D59EE80DB2AC9977EE9644AF8F7AA1DDEEEE3B9
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e36382e302f32342d3234203d3e20383334.roa
Signing time:             Mon 10 Feb 2025 11:20:00 +0000
ROA not before:           Mon 10 Feb 2025 11:15:00 +0000
ROA not after:            Mon 09 Feb 2026 11:20:00 +0000
asID:                     834
IP address blocks:        190.93.68.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 11 Feb 2025 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:59:ee:80:db:2a:c9:97:7e:e9:64:4a:f8:f7:aa:1d:de:ee:e3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Feb 10 11:15:00 2025 GMT
            Not After : Feb  9 11:20:00 2026 GMT
        Subject: CN=1F29984E444652877CC04EE45D8908475CC98CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:c5:ed:1f:bf:5a:11:41:d6:7a:a6:f4:51:
                    b5:60:ca:8d:91:86:8e:8b:b3:ec:58:7f:85:f8:71:
                    5d:a0:0e:04:b1:85:1b:9c:85:21:5f:64:ac:38:22:
                    f0:29:6b:d0:35:51:d0:8f:ed:15:76:b4:8e:04:59:
                    9c:28:27:ed:50:29:a1:de:b9:6c:ae:ab:3d:da:f8:
                    1e:d0:a5:18:52:06:b1:62:1e:33:8b:66:86:d1:77:
                    8e:11:f2:59:4b:4a:76:5a:9b:ca:d6:2a:bb:2c:33:
                    eb:11:d4:28:f4:66:2d:c8:a3:62:88:87:37:e3:ec:
                    c1:2e:6f:64:58:78:3b:52:83:ec:32:50:e5:2e:c1:
                    bd:56:d5:ff:2c:c6:cf:ec:6f:3e:a7:79:4a:28:9a:
                    95:a0:f5:43:8a:ac:33:23:3f:c7:f0:57:51:c5:78:
                    97:ae:ea:e6:ec:3a:0f:7a:53:3e:d0:e4:7f:6e:c1:
                    91:25:91:ec:6e:66:88:89:10:bb:20:ac:02:4f:77:
                    29:98:ff:65:5c:75:f3:95:d3:58:d5:99:80:0c:37:
                    a2:f1:dd:73:28:15:66:8d:53:ab:d0:be:25:ca:65:
                    75:ae:6f:9e:8b:f6:7c:a1:6b:28:68:70:31:c2:ec:
                    8e:a4:bf:b2:a8:4c:be:fc:9c:2a:b4:a4:49:e1:9b:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:29:98:4E:44:46:52:87:7C:C0:4E:E4:5D:89:08:47:5C:C9:8C:C6
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e36382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:14:f4:01:b4:dd:ba:ce:2c:a2:64:a9:44:c8:86:f9:5b:20:
         56:99:98:d6:ed:3a:1a:14:87:66:96:56:65:d8:55:8f:6b:9b:
         88:e8:7d:9a:ae:e2:a1:e2:9b:dd:d9:5e:b3:90:ef:5e:f0:8c:
         3f:1a:30:6c:9a:b3:01:57:d1:19:fd:77:44:f4:ff:5e:8b:e1:
         e2:6e:c4:52:81:ad:7e:14:ab:28:0b:6a:00:f4:66:75:a3:aa:
         c2:b9:42:59:71:d7:91:bb:a1:ce:5b:4d:4d:6d:63:9e:da:8c:
         eb:9c:27:45:e8:4b:d9:b2:d8:22:84:2b:ff:f1:f7:a4:59:5f:
         b9:9e:7c:9e:bd:cc:a4:50:28:60:16:3f:1a:ab:32:a5:89:4a:
         c8:48:7f:96:b5:0a:65:9a:83:e8:cb:c4:b0:71:01:84:92:07:
         1a:d3:15:ff:f8:aa:33:a6:55:8e:1d:57:5c:6f:0f:09:00:d4:
         50:b5:e1:76:d6:53:80:e8:5d:01:47:00:26:6e:77:f3:81:a7:
         24:eb:15:55:56:cc:df:7d:2f:24:5a:c2:7f:0e:03:bf:d0:ae:
         9a:9e:47:93:32:1a:c6:43:b2:0c:1e:37:69:87:1c:b7:91:9d:
         b1:83:64:41:27:c6:f2:8c:12:8f:d4:0a:39:60:fb:c7:e8:c3:
         e4:31:83:fb
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUTVnugNsqyZd+6WRK+PeqHd7u47kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNTAyMTAxMTE1MDBaFw0yNjAyMDkxMTIwMDBaMDMxMTAvBgNV
BAMTKDFGMjk5ODRFNDQ0NjUyODc3Q0MwNEVFNDVEODkwODQ3NUNDOThDQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkz8XtH79aEUHWeqb0UbVgyo2R
ho6Ls+xYf4X4cV2gDgSxhRuchSFfZKw4IvApa9A1UdCP7RV2tI4EWZwoJ+1QKaHe
uWyuqz3a+B7QpRhSBrFiHjOLZobRd44R8llLSnZam8rWKrssM+sR1Cj0Zi3Io2KI
hzfj7MEub2RYeDtSg+wyUOUuwb1W1f8sxs/sbz6neUoompWg9UOKrDMjP8fwV1HF
eJeu6ubsOg96Uz7Q5H9uwZElkexuZoiJELsgrAJPdymY/2VcdfOV01jVmYAMN6Lx
3XMoFWaNU6vQviXKZXWub56L9nyhayhocDHC7I6kv7KoTL78nCq0pEnhm6pPAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUHymYTkRGUod8wE7kXYkIR1zJjMYwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzYzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5dRDANBgkqhkiG
9w0BAQsFAAOCAQEAHhT0AbTdus4somSpRMiG+VsgVpmY1u06GhSHZpZWZdhVj2ub
iOh9mq7ioeKb3dles5DvXvCMPxowbJqzAVfRGf13RPT/Xovh4m7EUoGtfhSrKAtq
APRmdaOqwrlCWXHXkbuhzltNTW1jntqM65wnRehL2bLYIoQr//H3pFlfuZ58nr3M
pFAoYBY/GqsypYlKyEh/lrUKZZqD6MvEsHEBhJIHGtMV//iqM6ZVjh1XXG8PCQDU
ULXhdtZTgOhdAUcAJm5384GnJOsVVVbM330vJFrCfw4Dv9Cump5HkzIaxkOyDB43
aYcct5GdsYNkQSfG8owSj9QKOWD7x+jD5DGD+w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:33:29 2025 by rpki-client