Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36322e302f32342d3234203d3e20313938393830.roa
File:                     3139312e3130322e36322e302f32342d3234203d3e20313938393830.roa (raw, json)
Hash identifier:          qBMJbYB4g7H+ELq2Uh10QGXBRzlKlXMzODpjuQFgT1k=
Subject key identifier:   33:B3:EF:07:DE:F8:1C:16:3E:52:88:77:4E:98:E0:E8:0E:40:3D:F5
Certificate issuer:       /CN=D3B81DF8275FF8695370D4498DDC3A40FEE98F99
Certificate serial:       5398C2D34D6ECC391FB5980A1A6E9B5317028873
Authority key identifier: D3:B8:1D:F8:27:5F:F8:69:53:70:D4:49:8D:DC:3A:40:FE:E9:8F:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36322e302f32342d3234203d3e20313938393830.roa
Signing time:             Sun 07 Jul 2024 10:25:00 +0000
ROA not before:           Sun 07 Jul 2024 10:20:00 +0000
ROA not after:            Sun 06 Jul 2025 10:25:00 +0000
asID:                     198980
IP address blocks:        191.102.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 20:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:98:c2:d3:4d:6e:cc:39:1f:b5:98:0a:1a:6e:9b:53:17:02:88:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3B81DF8275FF8695370D4498DDC3A40FEE98F99
        Validity
            Not Before: Jul  7 10:20:00 2024 GMT
            Not After : Jul  6 10:25:00 2025 GMT
        Subject: CN=33B3EF07DEF81C163E5288774E98E0E80E403DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e9:f8:a3:87:b1:91:04:12:02:70:0f:dd:ad:
                    ef:53:fc:33:41:3e:79:e9:1d:7f:98:2a:88:f5:f8:
                    ba:6e:cc:ed:f8:cb:5b:a5:2b:9e:54:92:13:08:89:
                    39:1c:fa:4b:83:a1:83:7c:09:51:88:53:32:ce:6b:
                    8e:88:dc:5f:c4:4c:d1:77:7e:b2:b8:ff:bc:f2:d1:
                    87:6f:a2:17:73:be:3e:0c:b9:99:b5:c9:a8:33:bc:
                    9b:ee:67:b3:7f:4a:65:0b:17:c3:9d:b5:04:dc:6b:
                    ce:34:cc:03:55:df:66:1e:80:3a:fd:54:b0:b6:b5:
                    45:a4:a5:43:e3:c7:a2:27:9a:8c:c8:20:35:ec:b3:
                    1e:5e:2f:d2:41:9d:19:2b:5e:42:0d:95:fd:eb:0b:
                    da:f9:0b:f9:b8:90:3c:cf:ec:69:91:1b:3b:5d:72:
                    ac:1c:c6:f7:00:89:6d:ea:b7:50:74:e7:dd:9d:53:
                    e4:30:a7:6e:51:ca:4f:c4:fa:35:ac:bc:4b:6c:3c:
                    8d:17:d1:cd:df:52:48:0d:d8:fe:98:aa:fc:51:ab:
                    c6:84:79:ef:04:be:e9:01:55:91:7f:ac:0f:dc:30:
                    5c:2d:c4:09:39:a2:8a:b1:09:76:ce:2f:40:91:24:
                    0d:5b:5a:51:f3:52:c3:35:ec:14:47:f3:57:59:e9:
                    0e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B3:EF:07:DE:F8:1C:16:3E:52:88:77:4E:98:E0:E8:0E:40:3D:F5
            X509v3 Authority Key Identifier:
                keyid:D3:B8:1D:F8:27:5F:F8:69:53:70:D4:49:8D:DC:3A:40:FE:E9:8F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36322e302f32342d3234203d3e20313938393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:1f:12:6d:b2:30:ec:f5:2b:7b:0d:6f:11:53:1d:27:fb:bb:
         a9:35:fd:b7:3d:52:ef:da:d0:93:28:81:4b:d9:75:43:49:d8:
         9c:e3:8e:07:b1:25:d9:01:a2:5c:d5:37:5c:b5:94:80:09:ce:
         89:75:d3:a6:66:00:9c:db:ee:2c:b0:72:db:c0:19:93:8c:8a:
         58:33:0b:d0:09:5f:ac:1b:96:13:c1:3b:f0:54:09:c0:8b:38:
         13:70:3e:9d:12:eb:45:4f:2d:dc:a4:58:71:0c:50:d6:86:c8:
         bd:56:9b:85:4d:c9:75:1d:cf:bb:bf:61:15:41:27:b7:60:7d:
         04:c2:fe:1f:fa:c1:6c:31:95:09:5f:03:d3:2e:1a:5d:30:74:
         3b:ed:9f:41:cf:ad:f9:4b:78:8c:cb:f3:60:bd:69:a4:fc:26:
         dd:f1:8f:31:51:6d:4f:50:e0:c0:d9:e8:b7:4b:51:ac:0a:12:
         08:d8:78:12:da:ed:71:39:eb:6f:e2:bb:b7:d3:b6:76:71:cf:
         e7:c8:d8:b7:98:87:ff:c2:12:b3:38:8f:ab:c5:db:10:fc:f0:
         1a:16:8f:ed:0d:78:39:f4:75:2d:26:9c:4a:76:2c:0f:97:f8:
         ec:1b:18:91:e4:3e:87:7c:b6:a0:83:1f:c6:e0:ae:52:16:e5:
         b4:7f:68:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 21:53:14 2024 by rpki-client on console-fra.rpki-client.org