Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37392e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e37392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          jJWzpnPWUEopGv88e5afcOKkFj0LhJ7NMy+A7p6OQnk=
Subject key identifier:   5B:7B:FD:B7:0D:35:97:83:20:34:7F:F3:B0:ED:A1:0C:B7:23:BB:FA
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       2A747C6ADEDE08D119D397A71BDD95E380F8146D
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37392e302f32342d3234203d3e20383334.roa
Signing time:             Tue 10 Sep 2024 11:25:00 +0000
ROA not before:           Tue 10 Sep 2024 11:20:00 +0000
ROA not after:            Tue 09 Sep 2025 11:25:00 +0000
asID:                     834
IP address blocks:        190.93.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 18 Sep 2024 23:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:74:7c:6a:de:de:08:d1:19:d3:97:a7:1b:dd:95:e3:80:f8:14:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 10 11:20:00 2024 GMT
            Not After : Sep  9 11:25:00 2025 GMT
        Subject: CN=5B7BFDB70D35978320347FF3B0EDA10CB723BBFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0b:d1:e5:29:9c:8b:18:bb:3a:b6:c2:24:67:
                    10:4d:2c:a0:9d:0b:ec:c7:fb:9f:3c:1e:07:ba:06:
                    e3:fb:df:03:62:62:6f:0d:10:dc:1e:56:48:4d:1c:
                    00:35:e2:10:e9:06:de:f9:40:3d:aa:07:11:32:1d:
                    82:1b:e6:25:24:e0:11:0d:18:c1:4f:65:0b:a4:48:
                    57:74:19:ec:f8:75:82:d4:e3:43:de:ba:53:b7:ac:
                    d6:65:b8:45:c7:c2:f9:bc:82:24:dc:0b:e5:e1:b2:
                    fa:95:9e:4b:ad:1f:5b:bd:2a:98:46:d0:ec:c0:c2:
                    49:67:4b:2a:3e:b6:f8:31:3f:70:2b:e4:e2:85:cc:
                    ee:be:5f:95:9f:1f:5d:ba:5a:b3:0d:cc:ca:f6:aa:
                    8b:20:c4:b9:c3:1d:97:85:0e:16:79:7e:8c:69:ee:
                    1b:23:36:b9:76:b3:40:cd:ce:c8:bc:5f:35:95:5c:
                    66:e9:e6:61:ff:6b:06:6e:7e:ff:80:ab:ce:40:85:
                    37:d4:a2:d8:07:78:6f:bf:88:35:f8:3c:3c:4f:a1:
                    7c:8f:0b:41:c1:3b:df:8a:f1:ed:b1:a0:da:e9:ce:
                    49:53:e6:88:77:19:4b:85:05:d7:5d:d3:a9:b0:8a:
                    bb:b8:5f:05:ae:69:dc:df:b4:13:b5:8d:8d:44:2c:
                    7b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7B:FD:B7:0D:35:97:83:20:34:7F:F3:B0:ED:A1:0C:B7:23:BB:FA
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:b7:cc:bb:97:2a:20:2c:97:96:a8:7b:79:fe:51:fb:3c:e8:
         50:f3:d1:d0:7d:6c:d8:2f:2f:f0:00:e1:e8:8e:db:20:3f:10:
         31:0d:68:3c:5d:37:35:01:e1:e9:2d:b2:35:fe:84:d0:07:f1:
         3e:4c:4e:33:de:46:71:a4:b3:dd:f6:9c:8a:29:f4:70:d2:56:
         c0:0c:a4:6b:ee:17:00:4d:1b:87:85:f5:db:68:94:ac:2b:ab:
         ee:f9:59:db:dd:a2:8a:ec:76:47:74:c8:61:f5:20:22:5d:e6:
         67:49:05:19:55:ef:87:2f:e3:83:8a:3d:7a:c8:82:5e:31:b1:
         9e:f9:48:fe:61:39:d3:78:3a:aa:b4:f4:43:80:17:f7:75:aa:
         e9:7c:7a:22:d2:8b:00:98:c9:67:68:c0:45:a3:be:af:6a:c0:
         e2:d7:4f:bc:22:68:b7:20:9a:63:c3:60:64:eb:2b:d7:a4:1f:
         f3:f2:94:25:ac:72:f0:11:1b:d6:c8:a1:90:40:31:7f:77:65:
         b9:49:4c:07:77:71:48:a5:8c:60:12:75:72:91:c1:82:7c:01:
         6c:e1:45:ae:9c:45:fb:2c:28:6f:92:e3:6b:d5:4a:57:e5:75:
         5a:29:ad:84:88:77:e3:01:ce:db:69:7b:eb:c4:db:d6:9e:96:
         7f:ca:0d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 02:51:17 2024 by rpki-client on console-fra.rpki-client.org