Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39382e302f32342d3234203d3e20313734.roa
File:                     3139302e39332e39382e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          xv+hvOGndlH9FozSq3nWSChPQocb6+zYRrltUevVA80=
Subject key identifier:   3D:3E:C1:2E:18:79:F1:36:C7:8E:90:C7:4A:24:9E:AC:AD:8D:E9:C4
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       6CFB7118585D8F014F698529CCB90086099E3431
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39382e302f32342d3234203d3e20313734.roa
Signing time:             Tue 10 Sep 2024 13:10:01 +0000
ROA not before:           Tue 10 Sep 2024 13:05:01 +0000
ROA not after:            Tue 09 Sep 2025 13:10:01 +0000
asID:                     174
IP address blocks:        190.93.98.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 27 Sep 2024 13:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fb:71:18:58:5d:8f:01:4f:69:85:29:cc:b9:00:86:09:9e:34:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 10 13:05:01 2024 GMT
            Not After : Sep  9 13:10:01 2025 GMT
        Subject: CN=3D3EC12E1879F136C78E90C74A249EACAD8DE9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:51:10:aa:9c:2d:a4:b5:c4:ad:05:3c:62:b8:
                    d5:9c:59:81:ad:ef:54:b5:48:e8:60:44:1d:ad:8f:
                    27:ca:43:d3:94:2e:32:30:e6:fd:13:c7:8a:09:49:
                    25:ca:d8:18:ef:38:85:5f:09:7e:d7:f6:a7:ac:6d:
                    62:dd:b8:e6:6b:43:1e:b6:00:28:29:8e:90:4c:f7:
                    b3:01:27:71:ff:33:04:4c:db:3f:af:14:48:97:35:
                    cd:1e:79:d9:4d:c2:0d:43:16:c4:1f:86:1c:b2:da:
                    94:f6:06:e7:a6:a5:54:b2:d7:d0:d7:71:68:60:73:
                    84:07:30:54:99:4c:b2:62:00:72:df:2f:4b:09:b0:
                    a3:88:60:11:db:c6:61:d5:f5:be:ae:b7:a7:b1:e0:
                    07:86:fe:eb:53:12:c4:12:4a:27:90:06:d3:bf:76:
                    8e:44:ad:40:8d:7f:10:2a:22:69:28:13:b9:38:ed:
                    9d:f1:40:f3:49:dc:99:6a:41:eb:bd:0c:b8:82:95:
                    c5:9e:a6:9f:83:4f:13:82:63:24:dc:47:7a:f0:bd:
                    4e:d2:ad:e8:0c:bd:a2:01:95:0b:8d:fd:02:c7:e3:
                    85:65:f7:06:56:b3:d7:a0:74:fc:11:6b:14:61:0c:
                    b4:37:e0:f1:74:11:b2:0d:e6:52:55:dd:c8:37:1b:
                    da:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3E:C1:2E:18:79:F1:36:C7:8E:90:C7:4A:24:9E:AC:AD:8D:E9:C4
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39382e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:9b:3e:19:d8:37:79:60:c9:e0:25:88:c8:0b:75:ab:8a:c0:
         d0:13:90:38:27:df:85:ba:67:8e:85:22:df:1f:23:9f:37:50:
         a9:6e:b3:04:e5:fa:f9:0a:0f:e9:b5:69:09:e8:5a:ad:d6:9f:
         56:b3:9c:ac:45:09:8e:9d:7c:02:62:04:5a:e7:5d:89:12:43:
         4c:11:e3:5b:80:cc:51:ca:fc:7d:44:ad:32:9d:74:90:30:e7:
         0f:d4:b3:99:34:fa:0e:fe:b4:a3:f3:df:1f:cf:1b:89:b8:cf:
         8c:5d:c0:a6:29:f7:2d:fd:cb:74:d7:49:03:eb:72:9d:ac:1b:
         79:d4:c1:50:f1:95:6c:b1:72:ec:da:5d:5b:40:3d:d5:87:9d:
         d0:89:3a:d6:7a:31:dc:b7:2e:9b:dd:33:b9:72:7f:1b:bc:94:
         3c:73:4d:6a:f4:ac:ee:e1:71:04:0e:c5:ea:81:29:55:f5:df:
         1b:c6:99:87:d5:d0:03:98:cf:11:f8:81:42:20:68:00:5b:73:
         e9:82:16:5c:e5:3f:9f:1d:92:b4:ec:4c:43:97:7a:2f:d8:87:
         65:cb:71:f8:d1:ce:13:1a:51:d7:86:58:d5:b9:59:a4:e8:67:
         40:dd:00:e6:40:26:85:70:a8:76:e7:d8:5f:01:02:86:ac:86:
         ed:6d:e2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 17:20:35 2024 by rpki-client on console-ams.rpki-client.org