Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38382e302f32342d3234203d3e20323030313133.roa
File:                     3139302e39332e38382e302f32342d3234203d3e20323030313133.roa (raw, json)
Hash identifier:          hZ+ShZUWT6+nli0lKgVms8muOzoj8i70kzuFDWfgkis=
Subject key identifier:   B6:11:D5:80:D2:1A:D5:28:89:39:BE:66:4B:24:13:EB:86:AD:8F:E1
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       0BF08472ED4B0054C7CD655E3C80551D76C3DA8C
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38382e302f32342d3234203d3e20323030313133.roa
Signing time:             Tue 05 Mar 2024 18:18:28 +0000
ROA not before:           Tue 05 Mar 2024 18:13:28 +0000
ROA not after:            Tue 04 Mar 2025 18:18:28 +0000
asID:                     200113
IP address blocks:        190.93.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 16 Sep 2024 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f0:84:72:ed:4b:00:54:c7:cd:65:5e:3c:80:55:1d:76:c3:da:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar  5 18:13:28 2024 GMT
            Not After : Mar  4 18:18:28 2025 GMT
        Subject: CN=B611D580D21AD5288939BE664B2413EB86AD8FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:07:8c:b3:79:55:b0:af:ca:de:a5:ef:77:
                    6d:0f:cf:94:c4:56:b7:35:f4:b1:7c:7b:33:b0:ab:
                    3a:26:70:e4:88:9d:1e:15:74:1f:27:ce:8b:0d:6e:
                    6f:67:26:c3:83:01:09:33:31:d0:ee:48:41:4e:8f:
                    4e:30:95:73:3e:fa:67:62:df:a3:f4:7c:f4:f8:0b:
                    cb:9a:d3:bb:ca:51:77:18:26:0b:23:77:24:db:98:
                    b8:21:6f:95:f6:6f:0c:17:08:c5:5c:85:63:cf:ba:
                    9c:7c:24:1f:2d:bd:f8:27:15:3f:1e:b6:7e:1e:31:
                    72:21:26:98:80:bd:6a:c8:67:14:a7:b1:ca:77:fa:
                    6a:13:34:9e:49:97:b0:a8:99:08:dc:47:13:fc:2c:
                    1e:39:36:5b:44:54:b5:23:be:a2:32:e5:6d:7e:8f:
                    59:27:04:5a:a1:35:e7:15:52:ed:6a:a4:91:76:5d:
                    74:e7:da:ab:94:88:e5:c6:09:86:d5:8e:23:0c:86:
                    d0:5c:d7:be:23:5c:13:1e:52:f2:5d:0f:71:92:d8:
                    fc:9f:51:fc:8a:f1:89:28:99:04:4a:9f:9a:22:f5:
                    09:96:4f:51:a1:5a:fb:06:97:0e:ee:5b:17:46:80:
                    2f:57:74:5d:d6:cc:5a:63:fd:ec:82:81:ae:34:66:
                    f9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:11:D5:80:D2:1A:D5:28:89:39:BE:66:4B:24:13:EB:86:AD:8F:E1
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38382e302f32342d3234203d3e20323030313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:6c:54:ab:6b:f7:6c:1c:0e:28:ec:49:3f:03:6e:a1:a6:10:
         60:8b:b8:74:b0:e6:26:3c:2c:98:47:14:53:58:fe:b6:39:6e:
         07:96:97:f0:18:ab:b1:84:33:a0:d1:1c:51:68:ae:e3:bb:59:
         e8:ae:a9:60:1f:ed:47:56:e1:aa:12:c6:d1:b7:e8:b5:26:fe:
         53:7d:8e:47:01:b5:3a:f9:64:1e:76:03:c3:3c:6e:b9:61:10:
         5b:40:2a:f0:c9:e0:fc:41:f4:dd:32:c3:ae:06:82:2b:79:2a:
         5e:4a:1f:d1:52:5d:71:17:ee:1f:87:d1:b5:8b:fd:4c:c2:c4:
         35:08:8b:d3:a9:00:48:1d:e4:95:5a:2e:ad:ea:de:cf:f0:09:
         e8:74:25:0c:8f:39:49:27:7e:59:9b:ab:29:6c:48:d3:53:e5:
         77:19:f6:79:9e:56:d6:05:16:dc:2f:5f:dc:f4:e4:53:23:97:
         b9:84:a0:4e:1f:cc:ab:ab:53:35:0e:3b:8b:b9:08:63:39:89:
         c5:b6:85:18:ee:77:51:e1:e7:a4:14:ea:c2:e8:f4:cf:b6:51:
         39:42:0d:19:17:f0:35:b2:54:94:1e:13:cd:03:72:4d:cf:9f:
         c4:57:ca:2c:b4:ee:05:ae:51:d0:e8:b9:55:7c:6a:16:fe:7c:
         20:7e:09:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 13:24:21 2024 by rpki-client on console-fra.rpki-client.org