Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37382e302f32342d3234203d3e20323632333631.roa
File:                     3139302e39332e37382e302f32342d3234203d3e20323632333631.roa (raw, json)
Hash identifier:          tqlTFB7iddnKGjbk5J9ctm9dzPnE5H7L0O5qR79vzB0=
Subject key identifier:   87:0E:86:1A:4B:CD:39:68:0C:20:6B:91:B9:59:EF:18:82:01:A1:7E
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       1636BCC7B927BABDB706FD6929A52B07B2F2A164
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37382e302f32342d3234203d3e20323632333631.roa
Signing time:             Mon 25 Mar 2024 18:30:00 +0000
ROA not before:           Mon 25 Mar 2024 18:25:00 +0000
ROA not after:            Mon 24 Mar 2025 18:30:00 +0000
asID:                     262361
IP address blocks:        190.93.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 25 Sep 2024 11:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:36:bc:c7:b9:27:ba:bd:b7:06:fd:69:29:a5:2b:07:b2:f2:a1:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar 25 18:25:00 2024 GMT
            Not After : Mar 24 18:30:00 2025 GMT
        Subject: CN=870E861A4BCD39680C206B91B959EF188201A17E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:89:9e:95:da:54:99:cf:3a:c7:fb:7a:c3:77:
                    70:52:14:2e:1a:0e:a0:8f:84:1e:cc:4a:f9:86:9a:
                    c0:bf:63:d4:c2:40:1e:95:ae:1d:6d:68:b1:a6:ef:
                    cc:a9:cc:63:16:bf:87:40:6a:79:f9:ba:13:fc:e1:
                    df:6e:23:4b:ef:71:63:ac:25:ec:46:f9:68:e0:b0:
                    df:ff:1a:29:2c:cf:df:78:bd:ca:81:a4:7e:8a:a1:
                    82:25:85:f7:72:05:19:08:27:45:e9:2e:d7:39:a6:
                    7c:81:74:9c:07:05:2a:4a:dd:fe:44:ac:92:70:49:
                    d6:74:2c:cb:3f:7e:4b:30:ba:d4:ca:e6:b5:c2:be:
                    3b:36:4a:24:69:29:f9:cd:aa:68:67:b2:23:56:ad:
                    00:ea:e5:a1:29:bc:58:5f:b3:8c:7b:1b:40:22:63:
                    d3:e1:6e:3d:24:31:5a:18:ac:1b:9f:e2:8a:65:df:
                    97:1d:a8:8e:dd:5d:f2:6d:41:c7:29:46:cb:70:57:
                    9b:91:db:18:eb:67:54:6d:42:0c:fc:8c:e7:43:38:
                    56:2a:21:7a:c6:76:a3:b3:05:84:36:32:2a:d7:6d:
                    96:ac:d1:63:e0:1b:c2:4f:fe:1b:6f:6c:6f:23:b6:
                    be:6e:70:f5:34:06:a6:b8:5e:44:62:a9:90:56:f3:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0E:86:1A:4B:CD:39:68:0C:20:6B:91:B9:59:EF:18:82:01:A1:7E
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37382e302f32342d3234203d3e20323632333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:04:f0:36:2c:aa:4e:3a:4f:7a:b9:e1:98:81:b8:58:a5:57:
         e4:b6:ed:ef:4b:a5:2d:3f:02:d3:18:6f:36:a9:19:dd:d4:d1:
         f3:07:56:dd:81:48:fb:69:f9:0b:56:9d:df:8d:66:e4:e0:b6:
         a9:d9:16:5e:5e:19:d2:9d:c4:dc:8d:4f:ae:b7:62:a1:90:3a:
         b5:c8:d0:3b:35:66:90:3e:76:dc:d9:3d:97:d7:60:82:cf:cd:
         7c:59:ce:82:a1:be:d2:1c:37:c3:c5:82:a0:f7:28:e1:3b:1d:
         26:e0:76:4a:9e:9f:f0:c0:d1:f5:ee:21:82:44:22:c1:23:a6:
         5c:b1:67:f8:09:16:c3:4b:59:00:9e:22:d7:95:d4:ec:17:a2:
         4e:a3:ff:17:c5:e0:a6:1e:67:d0:3c:de:41:6d:8f:d5:d1:23:
         b3:85:a0:46:69:14:03:da:67:c0:e3:cb:dc:42:87:18:c7:91:
         ef:a9:7b:39:69:c3:eb:83:71:45:2f:05:31:01:a4:32:a4:4c:
         99:d4:02:3e:10:c4:fc:5e:f7:50:bf:c0:23:88:e5:11:da:1c:
         e6:63:d6:75:2d:ca:b1:d9:9a:66:02:6b:0e:82:b4:43:a0:c1:
         3f:56:e3:72:f1:eb:44:35:73:ba:e9:49:2e:d4:4b:3a:47:06:
         41:f7:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 16:29:51 2024 by rpki-client on console-ams.rpki-client.org