Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39342e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e39342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          jkHqVIZ+uWkO0lDOBAfzdgh8ujXTvCB4gb5/4+IUPxY=
Subject key identifier:   7D:CC:E9:4B:00:D2:DE:B2:55:86:88:9D:53:19:03:50:90:C5:FF:ED
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       46B243C6D2025BED32A23ED62BC872B8B080F5D2
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39342e302f32342d3234203d3e20383334.roa
Signing time:             Mon 12 Aug 2024 12:50:04 +0000
ROA not before:           Mon 12 Aug 2024 12:45:04 +0000
ROA not after:            Mon 11 Aug 2025 12:50:04 +0000
asID:                     834
IP address blocks:        190.93.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 13:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b2:43:c6:d2:02:5b:ed:32:a2:3e:d6:2b:c8:72:b8:b0:80:f5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Aug 12 12:45:04 2024 GMT
            Not After : Aug 11 12:50:04 2025 GMT
        Subject: CN=7DCCE94B00D2DEB25586889D5319035090C5FFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:d6:b8:76:ed:a5:9a:2d:c8:f8:c0:7d:9e:
                    9c:f4:43:32:58:7e:eb:4d:e3:0b:5b:75:71:69:64:
                    b1:de:ac:22:3e:f0:e7:b6:0a:1e:d5:38:ba:df:b8:
                    99:8b:fa:2c:32:41:a7:b9:5b:22:90:cd:e2:ff:d3:
                    c5:c1:bd:21:ea:f1:36:00:7f:0e:0d:42:3b:c5:3d:
                    54:8b:6c:7c:91:43:a6:52:c3:e5:8c:f2:3d:63:0e:
                    a2:19:bc:92:77:de:1b:02:39:ab:fa:b2:4e:80:85:
                    25:54:bc:25:8c:cf:33:99:5c:67:87:76:22:bc:6a:
                    b3:22:af:05:42:7a:44:2a:a2:81:9d:7f:58:c4:cf:
                    f5:7f:a6:cf:ed:c1:a2:90:b6:b1:13:ca:f6:d3:2e:
                    3d:68:8c:c1:4b:25:d0:ef:88:d8:c6:76:46:05:c1:
                    f4:29:40:a2:ca:0c:23:f1:ba:3d:29:f7:65:47:26:
                    2e:a8:a6:6a:c4:a6:72:d0:b0:0b:a5:fc:4a:65:7b:
                    df:c7:98:56:05:9c:2e:6f:b7:d3:64:99:75:d1:df:
                    27:30:25:04:d1:dc:14:82:6d:fb:26:d8:66:b2:27:
                    8c:74:1d:e7:cc:3e:98:fc:e1:bb:c5:ed:53:e7:d6:
                    32:37:f1:63:ef:68:40:01:24:06:46:b8:7e:7b:1d:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CC:E9:4B:00:D2:DE:B2:55:86:88:9D:53:19:03:50:90:C5:FF:ED
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:4e:b4:3f:57:8c:dc:57:65:c7:f0:c8:04:be:2d:77:ed:8b:
         a8:d3:63:58:b0:06:ac:11:93:41:d6:76:9f:41:0d:4a:6e:a6:
         db:79:d3:b4:75:12:9c:a3:b6:24:67:e4:41:1b:f9:55:f4:ab:
         b0:63:c5:72:4f:ed:df:ba:5d:4a:47:e7:b9:bb:08:6b:64:89:
         25:be:00:cd:d5:20:32:e2:46:df:cf:cf:23:83:30:8c:88:ff:
         e0:60:e7:a8:c0:1f:22:61:0c:62:b1:10:02:09:9e:41:76:b2:
         ba:5e:ec:9c:ec:f3:2b:f4:a3:24:d9:eb:08:30:eb:2c:0a:36:
         21:f3:6c:e6:7d:fa:5f:af:25:2c:39:a0:d4:7f:ac:45:8a:f8:
         b1:00:32:43:3e:b7:06:ce:03:18:e3:e9:00:d3:d5:c2:13:4a:
         c4:c5:e3:0d:f2:a8:b0:66:0d:82:74:b0:32:e9:7a:67:80:5f:
         ac:dc:d5:88:a4:99:b0:af:ea:2d:2f:ba:9d:47:ce:3c:f2:5b:
         70:e7:4e:a9:e6:c1:28:be:a3:bc:16:9d:0e:c7:13:6e:82:eb:
         01:c4:0b:7e:6a:98:6d:1e:53:27:07:99:f2:07:66:6d:55:e8:
         dd:4c:84:50:af:50:90:ac:77:b8:0a:e0:d1:83:74:58:71:e8:
         08:27:22:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:31 2024 by rpki-client on console-fra.rpki-client.org