Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39322e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e39322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          NNqPKTzS8RInLCv9lroWL0Y0+aDcYtSnKnHPrz9C+L4=
Subject key identifier:   C3:71:63:4D:20:66:95:CF:90:D8:F6:1E:BA:2B:07:19:58:AD:93:2A
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       61D8C917F97D4384CC81DE9EE46C8DD31B053C4E
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39322e302f32342d3234203d3e20383334.roa
Signing time:             Sun 02 Mar 2025 11:30:00 +0000
ROA not before:           Sun 02 Mar 2025 11:25:00 +0000
ROA not after:            Sun 01 Mar 2026 11:30:00 +0000
asID:                     834
IP address blocks:        190.93.92.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 07 Mar 2025 16:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d8:c9:17:f9:7d:43:84:cc:81:de:9e:e4:6c:8d:d3:1b:05:3c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar  2 11:25:00 2025 GMT
            Not After : Mar  1 11:30:00 2026 GMT
        Subject: CN=C371634D206695CF90D8F61EBA2B071958AD932A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:45:9e:4e:8c:d7:93:87:f7:10:99:97:2f:d8:
                    e9:e0:86:80:e9:2b:51:c4:64:a1:b8:f8:e3:1c:0b:
                    ee:66:b2:06:b1:78:ad:fa:b6:12:48:32:07:75:08:
                    aa:22:bb:ad:9f:33:7a:6e:4b:60:6c:cd:65:75:70:
                    c2:57:12:78:cc:b6:b9:cf:77:f4:5a:85:a2:8c:24:
                    cf:8e:d4:5f:0c:97:ca:3e:08:e7:e1:0d:08:41:4b:
                    60:e9:4d:69:ae:4b:80:4a:84:b5:f3:11:a8:16:f6:
                    6e:06:04:02:ad:b6:8d:1f:2e:02:37:94:df:92:cb:
                    ab:32:f8:5e:ce:dd:dd:e5:b0:2b:97:bc:86:b2:0a:
                    86:b0:6e:c4:46:bf:ee:7b:36:c1:e6:ea:ee:8f:76:
                    b1:57:65:87:09:dc:5c:e1:61:df:5c:e1:57:a9:42:
                    d3:21:ba:0f:2b:84:46:a2:2c:33:f1:d1:97:e8:51:
                    0f:fd:38:6c:58:14:a5:7d:7a:9e:4f:d9:5b:83:0a:
                    15:62:66:0f:74:e4:aa:bd:09:10:ca:0f:39:98:8e:
                    23:37:0d:e1:3a:5d:f7:d5:3f:e1:e7:4c:3e:1e:5e:
                    a4:0b:e3:de:2f:b2:98:98:be:e1:3e:1f:62:ef:6f:
                    cc:0b:44:5e:45:07:23:67:a3:38:aa:cc:52:39:95:
                    f9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:71:63:4D:20:66:95:CF:90:D8:F6:1E:BA:2B:07:19:58:AD:93:2A
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:36:d7:e1:d8:1f:ea:da:53:8f:99:78:32:0c:c6:e0:29:5b:
         94:f7:a2:e0:f5:6d:a1:a7:7b:78:fb:76:c2:e3:d9:e0:1a:02:
         10:60:82:20:33:4a:09:bf:85:d4:2f:db:72:79:cf:1d:e2:43:
         84:07:07:0c:a9:47:7a:6b:c9:ba:3b:6b:c3:ed:d1:b7:df:29:
         91:37:f1:f5:1d:c9:e3:6a:f2:74:a4:4b:f1:3b:b5:1e:3f:47:
         47:10:2c:b5:d4:e8:c8:a7:dc:3f:8c:80:41:8c:3c:c7:e3:a1:
         85:a6:31:65:15:07:a9:8d:a9:89:37:3c:de:25:7b:66:2f:28:
         ac:60:c7:e0:7b:bb:8d:88:c7:82:df:7e:4d:0d:cb:63:bb:c2:
         88:a5:2f:f5:1d:7d:84:02:6d:dc:03:6e:e7:fc:7d:7a:e3:50:
         14:92:46:82:45:74:c6:57:e0:40:93:53:7a:2b:58:3e:f1:96:
         f0:9b:7b:7f:bb:9a:8e:18:53:8e:04:0e:f2:77:28:72:b8:94:
         12:8e:83:4f:16:f0:78:50:d9:9e:fe:c5:dd:34:43:b0:c6:3a:
         cf:6a:c0:85:76:6e:5a:0e:7d:05:e9:79:80:64:fc:2a:c0:e6:
         aa:35:27:70:4c:0b:29:8a:19:a1:5d:d6:d1:2a:19:5c:cf:8b:
         35:ac:0b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:08:02 2025 by rpki-client