Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32342d3234203d3e203532333339.roa
File:                     3139302e3130372e3231322e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          pnpiIlMd2K/LXV0mvNS0hFlPyLqnXPU5ZGiM6/B38Qs=
Subject key identifier:   73:75:76:C0:2E:E9:4F:2C:6C:C6:CB:38:D7:EA:2E:DE:68:99:32:DC
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       4560F14F2334AEAF6CBDD1B23F678C21A54F9931
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32342d3234203d3e203532333339.roa
Signing time:             Sun 07 Jul 2024 02:55:01 +0000
ROA not before:           Sun 07 Jul 2024 02:50:01 +0000
ROA not after:            Sun 06 Jul 2025 02:55:01 +0000
asID:                     52339
IP address blocks:        190.107.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 22:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:60:f1:4f:23:34:ae:af:6c:bd:d1:b2:3f:67:8c:21:a5:4f:99:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  7 02:50:01 2024 GMT
            Not After : Jul  6 02:55:01 2025 GMT
        Subject: CN=737576C02EE94F2C6CC6CB38D7EA2EDE689932DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:55:2d:75:3e:3b:7c:74:60:a5:07:1c:33:43:
                    a0:57:6d:56:36:ed:83:6f:43:2b:5c:6e:de:1a:49:
                    6f:7d:d6:04:2a:a6:bd:69:48:1c:a1:d6:e9:24:81:
                    b5:ad:26:a3:7b:17:81:85:0c:d3:3a:97:e2:2a:f8:
                    c5:12:2d:cf:cd:5e:c6:74:21:75:a8:36:63:2d:f8:
                    ab:e9:c1:60:20:bc:23:7c:e3:a8:08:b8:a7:92:29:
                    ef:74:83:e9:57:55:2b:94:68:bd:07:6d:92:63:5e:
                    54:f2:2e:0f:74:87:ce:ab:de:43:f9:21:b4:f8:8e:
                    03:4e:e9:86:8a:91:b8:f5:03:b4:13:96:d7:65:61:
                    a9:20:16:3a:3c:db:3e:15:f5:c0:12:7b:87:e8:e4:
                    ac:a3:75:ef:93:e9:27:35:67:c6:ce:f3:cb:33:09:
                    e0:3b:bf:99:59:64:27:95:b2:4e:c4:ce:bf:66:df:
                    27:f6:03:4f:f0:8e:67:2f:e3:b5:77:bd:30:d0:14:
                    ef:44:01:19:76:b7:cc:19:3f:38:d7:69:88:1e:8b:
                    59:f1:0c:c3:21:31:03:7d:f6:06:1c:ce:a2:7c:1f:
                    99:18:08:16:0d:5e:46:2c:dc:80:34:17:b9:72:aa:
                    bd:0b:89:bd:be:c7:e3:67:74:21:63:91:19:86:30:
                    da:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:75:76:C0:2E:E9:4F:2C:6C:C6:CB:38:D7:EA:2E:DE:68:99:32:DC
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:42:88:81:7b:15:27:53:a1:d7:0d:5d:fa:59:64:42:24:8a:
         e1:b2:32:be:4a:27:55:11:6b:4b:d7:ef:48:11:46:9a:3a:b7:
         90:14:9f:9d:ee:ac:52:df:41:06:e6:5d:52:52:ca:58:c4:0b:
         0e:8e:43:6a:be:7a:bb:de:bd:cf:82:b4:0b:f7:f2:34:cf:90:
         47:97:1a:c7:c9:a3:47:59:f6:63:af:88:f1:0f:43:c3:00:15:
         bb:42:8a:00:7e:86:48:71:c5:4a:b3:25:a4:a8:83:e6:e1:0e:
         3d:15:06:4d:f8:a1:c2:8f:c5:6d:04:a8:5d:aa:75:16:52:ac:
         31:38:df:a5:4b:6e:f4:f3:aa:a5:61:1a:fb:04:24:bc:b4:41:
         bc:5b:77:25:c5:c8:2a:1f:bb:68:6f:32:52:d0:65:b1:3e:58:
         4e:66:63:ab:e9:3c:82:11:89:7b:c8:55:f9:15:d3:a2:ec:d5:
         f7:be:50:c6:9c:72:2a:37:08:aa:f6:35:f4:95:f1:0c:5c:f3:
         af:67:af:1e:a6:02:66:83:39:51:90:6f:18:98:83:1c:05:7f:
         89:2d:df:3b:02:2f:7f:84:eb:51:f9:39:d1:9c:75:92:a1:4c:
         74:30:05:c8:8e:f5:ec:42:48:a3:6f:42:0e:ca:10:3b:fa:3d:
         cc:7f:f0:99
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURWDxTyM0rq9svdGyP2eMIaVPmTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDcwMjUwMDFaFw0yNTA3MDYwMjU1MDFaMDMxMTAvBgNV
BAMTKDczNzU3NkMwMkVFOTRGMkM2Q0M2Q0IzOEQ3RUEyRURFNjg5OTMyREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqVS11Pjt8dGClBxwzQ6BXbVY2
7YNvQytcbt4aSW991gQqpr1pSByh1ukkgbWtJqN7F4GFDNM6l+Iq+MUSLc/NXsZ0
IXWoNmMt+KvpwWAgvCN846gIuKeSKe90g+lXVSuUaL0HbZJjXlTyLg90h86r3kP5
IbT4jgNO6YaKkbj1A7QTltdlYakgFjo82z4V9cASe4fo5Kyjde+T6Sc1Z8bO88sz
CeA7v5lZZCeVsk7Ezr9m3yf2A0/wjmcv47V3vTDQFO9EARl2t8wZPzjXaYgei1nx
DMMhMQN99gYczqJ8H5kYCBYNXkYs3IA0F7lyqr0Lib2+x+NndCFjkRmGMNqPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUc3V2wC7pTyxsxss41+ou3miZMtwwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzMDM3MmUzMjMxMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmvU
MA0GCSqGSIb3DQEBCwUAA4IBAQDIQoiBexUnU6HXDV36WWRCJIrhsjK+SidVEWtL
1+9IEUaaOreQFJ+d7qxS30EG5l1SUspYxAsOjkNqvnq73r3PgrQL9/I0z5BHlxrH
yaNHWfZjr4jxD0PDABW7QooAfoZIccVKsyWkqIPm4Q49FQZN+KHCj8VtBKhdqnUW
UqwxON+lS27086qlYRr7BCS8tEG8W3clxcgqH7tobzJS0GWxPlhOZmOr6TyCEYl7
yFX5FdOi7NX3vlDGnHIqNwiq9jX0lfEMXPOvZ68epgJmgzlRkG8YmIMcBX+JLd87
Ai9/hOtR+TnRnHWSoUx0MAXIjvXsQkijb0IOyhA7+j3Mf/CZ
-----END CERTIFICATE-----
Generated at Sun Jul 7 23:21:32 2024 by rpki-client on console-ams.rpki-client.org