Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38352e302f32342d3234203d3e20323030313133.roa
File:                     3139302e39332e38352e302f32342d3234203d3e20323030313133.roa (raw, json)
Hash identifier:          1feu+EM4hKAjxJJfUa/3oj6DRlmhwbGLyPX9W7vOdCA=
Subject key identifier:   57:BB:2B:1A:51:87:C8:68:96:78:55:C6:DB:86:E7:AB:FF:6A:3C:80
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       0BA5BAE5E0200E72C1586B323EF22C612198BDAE
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38352e302f32342d3234203d3e20323030313133.roa
Signing time:             Tue 05 Mar 2024 18:18:31 +0000
ROA not before:           Tue 05 Mar 2024 18:13:31 +0000
ROA not after:            Tue 04 Mar 2025 18:18:31 +0000
asID:                     200113
IP address blocks:        190.93.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 11:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a5:ba:e5:e0:20:0e:72:c1:58:6b:32:3e:f2:2c:61:21:98:bd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar  5 18:13:31 2024 GMT
            Not After : Mar  4 18:18:31 2025 GMT
        Subject: CN=57BB2B1A5187C868967855C6DB86E7ABFF6A3C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:b0:7e:2e:6c:32:83:df:55:0d:93:58:30:
                    7c:bd:47:42:11:14:8d:75:3f:78:1a:9b:b4:9b:e7:
                    68:62:20:93:59:fa:2a:b9:24:86:59:08:5d:bf:3c:
                    03:75:96:3e:f7:3c:a3:d9:48:8d:d0:45:61:c4:0a:
                    e4:1f:e1:27:fb:e6:20:92:71:2a:23:da:c4:db:3a:
                    d2:c8:d1:ac:be:83:57:43:9b:69:f4:c0:f8:c3:9e:
                    77:f1:06:30:87:3e:90:de:e7:a4:61:72:a1:21:f4:
                    30:c8:46:97:8e:d8:62:90:27:71:a7:4a:50:0c:29:
                    4c:00:59:5d:72:49:6e:a6:9d:03:67:4e:6f:c6:09:
                    c9:05:a9:54:a4:a0:2f:e5:d0:a7:42:ce:f3:fa:79:
                    3e:13:ca:6f:37:31:5d:18:4f:74:28:b3:bf:be:88:
                    02:7a:8c:bc:4e:e5:96:8b:fe:fd:86:35:d8:84:be:
                    c8:55:63:6f:27:49:a4:15:4e:d9:14:be:9d:89:04:
                    e3:d9:09:95:74:f1:1f:80:df:34:a8:9a:5a:3a:8f:
                    60:c4:36:a3:8c:f9:21:75:74:9f:06:72:c6:7b:c6:
                    73:df:c8:dd:8d:08:fd:fb:5b:5f:1e:d9:21:ff:39:
                    71:03:59:3a:ba:b0:3c:cb:fb:62:68:ff:a5:16:f8:
                    f1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BB:2B:1A:51:87:C8:68:96:78:55:C6:DB:86:E7:AB:FF:6A:3C:80
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38352e302f32342d3234203d3e20323030313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:54:13:68:aa:d4:b9:1f:cd:9f:56:73:be:2e:90:d9:43:c6:
         e3:dc:b4:96:a7:ad:55:1c:4d:04:5e:40:3d:fd:d1:73:0b:f2:
         e3:80:2c:9c:1c:bb:73:73:60:e2:c0:ff:ae:11:fa:16:c7:93:
         c0:23:88:1a:c7:0a:58:37:43:15:07:5e:03:43:41:33:3a:50:
         d0:e9:1e:0c:2e:96:f0:b3:5a:53:f2:1a:68:5b:22:c6:c4:31:
         a2:16:c1:64:8f:41:8d:a6:33:de:1f:41:eb:ab:a2:f0:ce:c7:
         f0:59:0f:84:fe:b6:f8:7b:cd:fa:cd:17:e3:67:aa:69:d3:89:
         31:de:71:9d:ae:8a:3b:3f:8e:04:99:ba:f6:a3:9a:db:4b:c6:
         fc:8b:06:99:bb:34:2e:e8:8e:21:59:6e:aa:6e:a7:7f:f2:63:
         6d:a1:47:a1:cd:0e:cf:c3:eb:eb:f7:c4:36:47:48:f0:2c:34:
         36:b5:43:6b:24:dc:d6:13:07:44:ee:36:da:5c:5b:3c:5f:15:
         d1:8e:e7:09:4b:18:f0:5a:75:7c:51:d0:2c:f1:d3:bf:e8:9b:
         bd:76:ec:53:f8:cf:fb:f6:02:b5:b4:84:fb:bc:cf:97:9b:1f:
         a5:79:ae:a0:e3:e4:18:19:c0:7a:15:bf:72:41:1c:79:a5:4a:
         6f:23:3c:67
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUC6W65eAgDnLBWGsyPvIsYSGYva4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNDAzMDUxODEzMzFaFw0yNTAzMDQxODE4MzFaMDMxMTAvBgNV
BAMTKDU3QkIyQjFBNTE4N0M4Njg5Njc4NTVDNkRCODZFN0FCRkY2QTNDODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl6bB+Lmwyg99VDZNYMHy9R0IR
FI11P3gam7Sb52hiIJNZ+iq5JIZZCF2/PAN1lj73PKPZSI3QRWHECuQf4Sf75iCS
cSoj2sTbOtLI0ay+g1dDm2n0wPjDnnfxBjCHPpDe56RhcqEh9DDIRpeO2GKQJ3Gn
SlAMKUwAWV1ySW6mnQNnTm/GCckFqVSkoC/l0KdCzvP6eT4Tym83MV0YT3Qos7++
iAJ6jLxO5ZaL/v2GNdiEvshVY28nSaQVTtkUvp2JBOPZCZV08R+A3zSomlo6j2DE
NqOM+SF1dJ8GcsZ7xnPfyN2NCP37W18e2SH/OXEDWTq6sDzL+2Jo/6UW+PFXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUV7srGlGHyGiWeFXG24bnq/9qPIAwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzgzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMDMxMzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5dVTAN
BgkqhkiG9w0BAQsFAAOCAQEAAFQTaKrUuR/Nn1Zzvi6Q2UPG49y0lqetVRxNBF5A
Pf3Rcwvy44AsnBy7c3Ng4sD/rhH6FseTwCOIGscKWDdDFQdeA0NBMzpQ0OkeDC6W
8LNaU/IaaFsixsQxohbBZI9BjaYz3h9B66ui8M7H8FkPhP62+HvN+s0X42eqadOJ
Md5xna6KOz+OBJm69qOa20vG/IsGmbs0LuiOIVluqm6nf/JjbaFHoc0Oz8Pr6/fE
NkdI8Cw0NrVDayTc1hMHRO422lxbPF8V0Y7nCUsY8Fp1fFHQLPHTv+ibvXbsU/jP
+/YCtbSE+7zPl5sfpXmuoOPkGBnAehW/ckEceaVKbyM8Zw==
-----END CERTIFICATE-----
Generated at Fri Sep 13 14:21:49 2024 by rpki-client on console-ams.rpki-client.org