Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231362e302f32312d3231203d3e203531323032.roa
File:                     3139302e3130372e3231362e302f32312d3231203d3e203531323032.roa (raw, json)
Hash identifier:          46Nad6+FudmWqE7OkAsOCgRwl7QRxMFLOMkN/zSkIwc=
Subject key identifier:   5C:EE:06:6C:B8:90:7A:7B:07:59:A0:91:85:53:FD:25:E9:B2:BD:82
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       6AC4A6AD1A0C2EC92E05A215B0FFC943BFF551CA
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231362e302f32312d3231203d3e203531323032.roa
Signing time:             Sun 07 Jul 2024 22:25:01 +0000
ROA not before:           Sun 07 Jul 2024 22:20:01 +0000
ROA not after:            Sun 06 Jul 2025 22:25:01 +0000
asID:                     51202
IP address blocks:        190.107.216.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 00:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c4:a6:ad:1a:0c:2e:c9:2e:05:a2:15:b0:ff:c9:43:bf:f5:51:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  7 22:20:01 2024 GMT
            Not After : Jul  6 22:25:01 2025 GMT
        Subject: CN=5CEE066CB8907A7B0759A0918553FD25E9B2BD82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:5f:eb:07:b4:95:ba:7a:4e:c8:d3:4a:12:
                    ee:62:67:2b:49:70:3a:fd:a9:3a:4a:e8:45:e4:a8:
                    c7:e4:4e:a8:c4:4e:dc:46:de:de:db:5f:07:04:0e:
                    b8:1e:25:8b:e7:ed:5b:61:fd:8d:10:ec:dd:ca:32:
                    2b:ff:01:9f:97:44:ea:02:f0:99:6c:e2:f7:9e:ed:
                    53:de:cf:af:fe:e8:a3:e4:ab:26:76:1e:bc:4d:34:
                    71:c9:bd:29:22:28:36:62:4a:35:62:90:c5:87:c2:
                    d2:c1:92:cd:6c:d4:4b:4a:d0:ef:6c:49:af:3c:74:
                    4b:dd:33:62:50:9a:36:65:63:16:b7:26:7f:27:f3:
                    74:01:62:92:b6:91:ca:f6:26:e1:15:b0:8c:fc:ec:
                    e6:34:45:a0:0d:78:46:de:cc:c2:4a:b6:e6:13:1e:
                    3a:ba:de:c6:cc:ae:c2:38:0a:63:16:e1:69:d1:02:
                    cd:18:3a:28:32:a6:83:66:17:a2:58:cb:64:84:39:
                    0d:c2:81:b4:40:e4:6c:30:77:a7:30:b2:a6:7a:8a:
                    a6:1a:6e:96:d9:02:5c:30:a3:82:08:2a:75:5e:e8:
                    c2:65:0c:d2:65:32:38:a2:09:0a:dd:f6:0f:d1:b6:
                    d8:11:2b:ff:8b:25:0c:32:ff:bf:ce:ca:ed:cc:12:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EE:06:6C:B8:90:7A:7B:07:59:A0:91:85:53:FD:25:E9:B2:BD:82
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231362e302f32312d3231203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:ba:06:12:3c:06:e8:d8:92:aa:39:67:31:af:81:c3:99:4b:
         2f:b1:95:e0:dc:2f:f6:f3:ab:a8:49:90:c8:62:9c:10:6f:13:
         35:9d:15:59:2e:67:f9:6e:85:1e:27:b9:7d:d9:0f:af:c0:57:
         6d:73:88:a1:75:0e:aa:2a:3f:89:40:73:29:8f:b7:a0:59:06:
         d2:3f:6b:f6:9d:53:5b:c4:6b:35:c7:8b:44:84:95:aa:2d:89:
         37:9e:ea:29:ba:49:5e:7b:d2:39:33:e1:51:66:73:4d:2c:54:
         18:b3:79:e9:2b:b0:5d:fd:a3:29:75:3f:7c:cf:79:c5:3a:55:
         ac:77:22:a1:ff:1e:fe:4c:a5:07:bc:0f:94:56:37:57:b2:ae:
         01:d8:1d:67:3a:83:18:75:c2:ac:b6:2d:f5:99:e2:c5:7b:3a:
         f3:ae:db:68:bf:f0:07:df:94:2c:0b:a6:b9:1e:17:90:97:c7:
         54:4c:ba:c0:15:28:b5:d6:9a:ec:43:b9:79:18:68:3c:0c:1c:
         aa:54:10:1c:ac:82:38:3e:38:d0:3b:f4:c6:5c:ad:65:1e:72:
         0b:88:1a:37:6a:d6:c6:ec:55:05:df:0f:d3:f7:c7:78:61:a9:
         82:9f:f6:90:64:ee:06:ca:30:43:c0:c3:c2:e0:6c:1c:db:2d:
         41:40:72:7d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUasSmrRoMLskuBaIVsP/JQ7/1UcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDcyMjIwMDFaFw0yNTA3MDYyMjI1MDFaMDMxMTAvBgNV
BAMTKDVDRUUwNjZDQjg5MDdBN0IwNzU5QTA5MTg1NTNGRDI1RTlCMkJEODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXdl/rB7SVunpOyNNKEu5iZytJ
cDr9qTpK6EXkqMfkTqjETtxG3t7bXwcEDrgeJYvn7Vth/Y0Q7N3KMiv/AZ+XROoC
8Jls4vee7VPez6/+6KPkqyZ2HrxNNHHJvSkiKDZiSjVikMWHwtLBks1s1EtK0O9s
Sa88dEvdM2JQmjZlYxa3Jn8n83QBYpK2kcr2JuEVsIz87OY0RaANeEbezMJKtuYT
Hjq63sbMrsI4CmMW4WnRAs0YOigypoNmF6JYy2SEOQ3CgbRA5Gwwd6cwsqZ6iqYa
bpbZAlwwo4IIKnVe6MJlDNJlMjiiCQrd9g/RttgRK/+LJQwy/7/Oyu3MEmgJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUXO4GbLiQensHWaCRhVP9JemyvYIwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzMDM3MmUzMjMxMzYy
ZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTMxMzIzMDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvmvY
MA0GCSqGSIb3DQEBCwUAA4IBAQBjugYSPAbo2JKqOWcxr4HDmUsvsZXg3C/286uo
SZDIYpwQbxM1nRVZLmf5boUeJ7l92Q+vwFdtc4ihdQ6qKj+JQHMpj7egWQbSP2v2
nVNbxGs1x4tEhJWqLYk3nuopuklee9I5M+FRZnNNLFQYs3npK7Bd/aMpdT98z3nF
OlWsdyKh/x7+TKUHvA+UVjdXsq4B2B1nOoMYdcKsti31meLFezrzrttov/AH35Qs
C6a5HheQl8dUTLrAFSi11prsQ7l5GGg8DByqVBAcrII4PjjQO/TGXK1lHnILiBo3
atbG7FUF3w/T98d4YamCn/aQZO4GyjBDwMPC4Gwc2y1BQHJ9
-----END CERTIFICATE-----
Generated at Mon Jul 8 01:36:52 2024 by rpki-client on console-ams.rpki-client.org