Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38352e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e38352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          bxaNo2S2VHQykE/SO6+a1+uGu6qusRWMnNbOJk+fmGk=
Subject key identifier:   11:51:F5:7E:03:A9:2D:99:1E:10:EF:2B:AA:E9:5F:19:03:57:FA:B8
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       08D93CCA31A14870F302777F91E05E77AAC7D68C
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38352e302f32342d3234203d3e20383334.roa
Signing time:             Mon 27 Jan 2025 10:55:00 +0000
ROA not before:           Mon 27 Jan 2025 10:50:00 +0000
ROA not after:            Mon 26 Jan 2026 10:55:00 +0000
asID:                     834
IP address blocks:        190.93.85.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 05 Feb 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d9:3c:ca:31:a1:48:70:f3:02:77:7f:91:e0:5e:77:aa:c7:d6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jan 27 10:50:00 2025 GMT
            Not After : Jan 26 10:55:00 2026 GMT
        Subject: CN=1151F57E03A92D991E10EF2BAAE95F190357FAB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:80:dc:68:c7:f5:82:24:36:ea:e9:09:3d:
                    50:71:93:4a:9f:e1:ac:b4:12:03:da:97:1f:7c:9b:
                    dd:ac:38:17:45:4e:d8:78:bd:b0:07:a4:84:01:8d:
                    50:ea:4a:2a:f5:60:bc:51:27:91:d6:af:a5:1c:29:
                    3f:a4:33:cb:98:4b:7e:d4:14:85:e5:59:95:c0:6e:
                    91:54:83:8a:94:9d:33:24:64:95:3b:55:aa:32:60:
                    32:62:cd:7f:1d:07:2f:13:ae:e8:74:7f:81:eb:06:
                    89:8c:4d:b8:73:76:90:5a:2f:b1:14:85:d3:79:b3:
                    df:62:9d:42:00:b6:ef:19:b2:d9:e7:9f:7f:b1:86:
                    3f:b4:79:28:51:d3:a3:b2:94:62:58:44:75:e7:a6:
                    79:64:ec:92:29:2e:c6:39:21:32:b5:7f:f9:c3:0f:
                    07:88:be:d9:4f:51:0b:a1:1e:4c:8d:b2:67:60:87:
                    0a:54:25:79:eb:95:eb:e3:d1:85:10:e9:8c:6e:a2:
                    5c:22:ac:23:43:0c:4f:3c:b1:48:67:8a:ef:03:09:
                    17:77:93:3c:17:a5:12:88:4c:36:63:93:9f:4a:99:
                    95:0c:8f:86:6b:9e:e5:d8:35:f6:6e:fe:84:3d:09:
                    48:18:8e:d8:6c:17:50:86:f4:bc:b5:a9:83:81:a2:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:51:F5:7E:03:A9:2D:99:1E:10:EF:2B:AA:E9:5F:19:03:57:FA:B8
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:fb:a4:72:17:40:88:f5:d1:5b:b5:81:9a:f1:38:2a:dd:1d:
         11:01:1b:b6:f0:b7:19:ab:ba:01:a3:84:c8:4c:d9:4e:80:fd:
         6e:1d:75:a6:47:5c:ea:c2:07:d2:f0:a8:a0:97:87:54:7c:59:
         5a:09:94:ea:ce:ea:84:dc:ef:57:0c:d2:09:36:92:7b:c7:2f:
         90:db:de:25:66:81:b3:8c:01:cc:2d:a5:91:a3:ef:05:33:9d:
         9c:1f:50:b8:fa:46:70:21:08:71:70:72:63:95:79:b8:65:76:
         9e:6c:b7:e9:70:45:80:28:80:38:b3:98:3c:69:9c:69:1b:9e:
         d7:47:9e:eb:f1:a2:ce:11:f5:3a:da:1d:c0:bb:13:5c:25:76:
         5c:0a:eb:5a:08:43:47:77:1d:d0:25:46:cf:c9:9d:a8:ed:71:
         51:93:df:c4:14:95:ad:59:28:6c:06:9e:2d:09:6e:34:49:37:
         7e:93:3d:b5:f5:83:d5:9b:a9:50:df:e0:d6:08:4c:c9:eb:13:
         99:20:64:e6:9c:1f:a9:63:ae:24:41:6f:af:db:44:87:e3:5d:
         fd:ac:00:69:03:17:5f:b6:a5:1f:b8:eb:11:d1:72:44:48:9c:
         f3:0e:b0:32:9a:9b:17:31:f2:08:93:84:22:72:cd:db:5e:72:
         d2:21:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:02:00 2025 by rpki-client