Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231362e302f32312d3234203d3e203531323032.roa
File:                     3139302e3130372e3231362e302f32312d3234203d3e203531323032.roa (raw, json)
Hash identifier:          Yi1GqvfkAsdM9VM3Fs/BW0dpNpJFdm4VMTa0quVcWwQ=
Subject key identifier:   06:64:48:68:16:5E:D8:E3:E7:6F:E3:54:EB:A9:73:86:39:B5:96:DB
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       7AC8BB5334FBACADBBBE3068784D9FD9443D17C4
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231362e302f32312d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:40:01 +0000
ROA not before:           Mon 08 Jul 2024 00:35:01 +0000
ROA not after:            Mon 07 Jul 2025 00:40:01 +0000
asID:                     51202
IP address blocks:        190.107.216.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c8:bb:53:34:fb:ac:ad:bb:be:30:68:78:4d:9f:d9:44:3d:17:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:35:01 2024 GMT
            Not After : Jul  7 00:40:01 2025 GMT
        Subject: CN=06644868165ED8E3E76FE354EBA9738639B596DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:01:24:f9:3a:38:55:c7:ba:5e:e6:3e:09:
                    4d:6e:8c:67:19:f1:a9:5a:9d:38:16:46:e0:7e:b1:
                    05:be:4d:35:02:ee:96:17:1d:67:36:ed:24:7d:9c:
                    72:80:24:f8:93:da:64:c0:52:94:4b:9d:b2:a4:be:
                    5b:41:b4:ef:19:f5:98:09:1c:c4:24:af:a6:9d:08:
                    1c:69:f7:b4:f1:28:e4:85:98:57:98:9c:6d:5f:64:
                    77:1a:01:f7:7f:16:5e:8e:de:48:ee:69:53:c8:58:
                    60:cd:e9:40:41:c6:b9:ee:66:1e:c3:cb:35:52:5e:
                    f1:48:53:47:4b:07:90:0d:b7:03:41:1c:92:cf:56:
                    af:81:c6:f3:7a:df:24:58:b1:6a:ed:85:ef:52:3a:
                    ce:ac:fd:68:34:f5:11:07:f5:91:5c:00:92:fd:b9:
                    fd:0b:e5:6d:62:77:36:f3:40:8a:20:2e:7d:92:87:
                    55:31:85:be:a4:6e:98:d4:88:15:f2:ce:e2:4a:fe:
                    47:17:89:41:14:93:a0:cb:50:86:c6:b7:53:d2:f0:
                    a0:54:aa:ba:8c:e5:1b:5c:8a:75:ad:98:9c:3f:6c:
                    45:6b:ec:95:21:24:35:2b:11:b4:bd:eb:5b:e5:04:
                    25:0b:06:f2:ee:0a:dc:80:55:eb:b4:65:65:88:8e:
                    90:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:64:48:68:16:5E:D8:E3:E7:6F:E3:54:EB:A9:73:86:39:B5:96:DB
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231362e302f32312d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:0e:07:bd:e8:6d:0f:f0:28:4f:cf:57:a0:2c:30:dd:d8:79:
         45:22:cb:00:26:e9:33:d5:b3:fb:42:30:1a:18:c2:72:2d:34:
         a0:11:8a:e4:84:66:ab:1c:3f:7a:3c:73:40:1d:9b:71:1a:be:
         0b:59:18:ef:c7:fa:04:74:0a:94:7a:23:e6:4b:79:31:5d:b5:
         31:69:92:37:52:d1:4c:4e:f4:c7:be:22:36:bf:8e:90:0a:7c:
         36:5b:ec:16:05:5e:8e:9a:85:6f:44:23:ee:72:ee:05:92:5a:
         c1:7e:92:02:24:47:88:61:5e:c8:db:27:8f:57:4e:fa:17:6a:
         6c:cd:30:25:4f:b7:da:09:77:cb:57:8b:92:78:75:60:5d:be:
         92:de:08:27:ff:11:4a:c1:53:8c:72:4b:fc:a8:69:23:71:d5:
         0b:52:9f:d4:68:4e:e8:4e:af:b1:90:78:79:96:8b:27:2d:9f:
         5e:d6:02:dd:21:52:ab:35:b0:63:a5:74:7f:b1:cd:1e:84:23:
         f9:3d:17:ac:89:50:78:d0:99:23:0c:41:95:3d:be:65:de:2a:
         2d:6c:a8:67:57:8a:1b:49:58:c7:2a:4e:79:eb:53:dd:3a:a4:
         ed:b5:cb:e6:ee:ee:9b:df:3b:b7:80:eb:08:b6:76:b2:7a:4e:
         6a:6c:a2:4c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUesi7UzT7rK27vjBoeE2f2UQ9F8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDgwMDM1MDFaFw0yNTA3MDcwMDQwMDFaMDMxMTAvBgNV
BAMTKDA2NjQ0ODY4MTY1RUQ4RTNFNzZGRTM1NEVCQTk3Mzg2MzlCNTk2REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC39gEk+To4Vce6XuY+CU1ujGcZ
8alanTgWRuB+sQW+TTUC7pYXHWc27SR9nHKAJPiT2mTAUpRLnbKkvltBtO8Z9ZgJ
HMQkr6adCBxp97TxKOSFmFeYnG1fZHcaAfd/Fl6O3kjuaVPIWGDN6UBBxrnuZh7D
yzVSXvFIU0dLB5ANtwNBHJLPVq+BxvN63yRYsWrthe9SOs6s/Wg09REH9ZFcAJL9
uf0L5W1idzbzQIogLn2Sh1Uxhb6kbpjUiBXyzuJK/kcXiUEUk6DLUIbGt1PS8KBU
qrqM5RtcinWtmJw/bEVr7JUhJDUrEbS961vlBCULBvLuCtyAVeu0ZWWIjpCjAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUBmRIaBZe2OPnb+NU66lzhjm1ltswHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzMDM3MmUzMjMxMzYy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMxMzIzMDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvmvY
MA0GCSqGSIb3DQEBCwUAA4IBAQAVDge96G0P8ChPz1egLDDd2HlFIssAJukz1bP7
QjAaGMJyLTSgEYrkhGarHD96PHNAHZtxGr4LWRjvx/oEdAqUeiPmS3kxXbUxaZI3
UtFMTvTHviI2v46QCnw2W+wWBV6OmoVvRCPucu4FklrBfpICJEeIYV7I2yePV076
F2pszTAlT7faCXfLV4uSeHVgXb6S3ggn/xFKwVOMckv8qGkjcdULUp/UaE7oTq+x
kHh5losnLZ9e1gLdIVKrNbBjpXR/sc0ehCP5PResiVB40JkjDEGVPb5l3iotbKhn
V4obSVjHKk5561PdOqTttcvm7u6b3zu3gOsItnayek5qbKJM
-----END CERTIFICATE-----
Generated at Mon Jul 8 21:27:26 2024 by rpki-client on console-fra.rpki-client.org