Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3139302e332e3232342e302f31392d3139203d3e203237363935.roa
File:                     3139302e332e3232342e302f31392d3139203d3e203237363935.roa (raw, json)
Hash identifier:          p8QXGJfJDVqJk9Kxb0f9f4uTCL6A75dQQm3M4Iypiy8=
Subject key identifier:   3B:1E:94:A6:1F:AB:F6:0A:3A:00:E4:A8:86:CD:5E:D2:60:6D:F9:F8
Certificate issuer:       /CN=29144D8070C44852403F550F31DEC53EBF48A61F
Certificate serial:       51C3F68C5023A0E8FA05BA134EA982C4126F6352
Authority key identifier: 29:14:4D:80:70:C4:48:52:40:3F:55:0F:31:DE:C5:3E:BF:48:A6:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3139302e332e3232342e302f31392d3139203d3e203237363935.roa
Signing time:             Tue 05 Mar 2024 18:02:53 +0000
ROA not before:           Tue 05 Mar 2024 17:57:53 +0000
ROA not after:            Tue 04 Mar 2025 18:02:53 +0000
asID:                     27695
IP address blocks:        190.3.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 13:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c3:f6:8c:50:23:a0:e8:fa:05:ba:13:4e:a9:82:c4:12:6f:63:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29144D8070C44852403F550F31DEC53EBF48A61F
        Validity
            Not Before: Mar  5 17:57:53 2024 GMT
            Not After : Mar  4 18:02:53 2025 GMT
        Subject: CN=3B1E94A61FABF60A3A00E4A886CD5ED2606DF9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:90:f4:a8:30:93:dd:d8:a2:15:f6:bc:1f:
                    b6:b9:58:30:80:4a:4d:a8:1f:9b:5f:83:c2:51:f1:
                    a2:74:3a:72:f8:8d:27:aa:32:05:94:a8:88:27:8a:
                    a5:72:6d:13:5c:25:79:3c:78:74:b0:81:9d:3c:d6:
                    17:e7:74:c4:df:2b:43:22:df:93:01:c5:16:b1:19:
                    21:45:bf:bd:7f:3f:70:1f:6c:cf:86:9d:b0:85:b6:
                    23:2f:2a:ee:f1:6a:26:df:74:aa:71:76:40:3f:04:
                    30:76:8d:e7:7c:16:98:ec:68:3c:ae:c3:cc:54:c8:
                    c6:34:bb:5d:cd:27:bf:a0:9f:f0:db:fb:34:ac:67:
                    8e:ef:51:75:6a:43:9c:e1:dd:1d:f2:eb:6b:fe:e6:
                    f0:38:8a:67:51:9a:e4:6a:29:e5:7e:d8:b9:73:e5:
                    bc:fd:e0:99:84:a6:32:5c:39:8a:ba:69:ca:4a:01:
                    e7:18:cb:ee:c5:ea:9c:69:1d:73:f5:30:ef:aa:eb:
                    7a:79:d2:69:0b:9e:b1:6e:f7:7d:15:2e:ab:ff:ef:
                    fd:e8:af:d9:01:17:39:d2:0d:9c:3d:2a:ed:01:18:
                    23:05:b7:b7:24:70:cb:52:8b:55:8a:f3:7c:24:60:
                    8b:bd:a4:44:13:c2:e7:0b:c4:bd:28:35:b2:c7:6d:
                    51:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1E:94:A6:1F:AB:F6:0A:3A:00:E4:A8:86:CD:5E:D2:60:6D:F9:F8
            X509v3 Authority Key Identifier:
                keyid:29:14:4D:80:70:C4:48:52:40:3F:55:0F:31:DE:C5:3E:BF:48:A6:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3139302e332e3232342e302f31392d3139203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:e0:a1:2e:f0:f7:9e:d0:b1:7f:4b:2b:b6:6d:92:14:fe:6d:
         1e:d5:33:1d:dc:03:ba:a2:7d:b9:c6:f6:61:60:6c:79:4e:9b:
         8a:82:3c:d5:58:e1:7f:d7:b0:2f:e6:c3:e0:33:4f:b0:47:41:
         4a:52:bd:45:2c:8e:7b:3f:1f:5f:d8:b5:12:8c:bc:79:44:63:
         e2:56:97:83:a1:66:f8:9c:56:77:84:9b:27:5f:2f:f0:01:6f:
         cd:36:d5:ed:0d:48:18:ec:9e:5c:e9:9f:03:7b:5f:74:6e:a2:
         69:0c:51:32:4a:ea:a8:d8:37:7e:20:7e:e2:4b:e8:c1:af:77:
         b9:04:f4:4b:a9:b5:77:81:e5:4e:6a:00:e6:f3:4f:5b:f0:52:
         9c:fc:8f:6e:92:2a:28:2b:93:05:3f:97:d9:1b:4e:6e:9a:4d:
         f4:2b:7c:38:71:b6:a5:b0:3f:5b:ea:4f:41:4d:e3:68:12:02:
         aa:b4:b9:1f:ad:80:ad:78:dc:6c:ad:b0:0c:14:d5:79:d8:15:
         7a:84:cc:de:ba:fe:d4:2e:69:21:0e:3f:2c:d0:e3:a6:46:78:
         c6:ba:67:61:9b:2f:1c:8a:ff:ca:3c:5a:4b:5e:30:59:8a:78:
         c1:1d:a5:4e:f6:90:45:e5:7d:cf:97:54:ac:56:cb:91:f1:18:
         4f:fc:4c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 17:44:36 2024 by rpki-client on console-fra.rpki-client.org