Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232322e302f32342d3234203d3e203531323032.roa
File:                     3139302e3130372e3232322e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          mAIzJdm1vKAtDFGTpJju0GxDGahD3/uMvH5pQlbAxLg=
Subject key identifier:   E3:C8:C1:09:96:C4:45:85:42:5B:2D:78:53:C3:87:81:E9:7D:97:5F
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       43C5805E2300450843EC3A6636A9325D77E245CE
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232322e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:05 +0000
ROA not before:           Mon 08 Jul 2024 00:15:05 +0000
ROA not after:            Mon 07 Jul 2025 00:20:05 +0000
asID:                     51202
IP address blocks:        190.107.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c5:80:5e:23:00:45:08:43:ec:3a:66:36:a9:32:5d:77:e2:45:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:05 2024 GMT
            Not After : Jul  7 00:20:05 2025 GMT
        Subject: CN=E3C8C10996C44585425B2D7853C38781E97D975F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:46:ea:0a:07:6b:6e:93:8b:ad:c2:a1:d6:
                    93:72:f3:d2:6c:e5:0e:c8:4c:1f:d0:2d:07:bf:0f:
                    31:30:20:b2:31:38:bb:62:8e:66:bc:04:ea:bd:10:
                    b2:5c:53:1e:fc:c4:67:a7:e3:e5:0c:ca:e5:e8:88:
                    dd:3b:38:49:9b:1a:a4:62:30:2b:31:3d:47:f9:1d:
                    a0:d9:ac:2b:3e:61:9b:a9:d9:85:2a:9f:20:c6:27:
                    00:74:49:2f:0b:88:a1:67:d8:32:00:fa:4d:a0:b0:
                    85:1e:88:17:8e:e1:ec:83:50:a8:0b:b9:29:f2:27:
                    a2:56:17:cb:23:c3:a3:43:59:5c:f2:07:4a:2c:87:
                    4a:24:49:d7:9f:f3:a2:6d:29:22:ca:bf:c7:a9:a0:
                    51:69:fc:97:4d:f1:31:26:56:6f:57:8f:3c:1c:b4:
                    50:50:84:23:27:82:03:15:2b:28:f4:58:ea:79:ff:
                    8c:0b:4e:83:b4:84:15:50:d4:eb:48:25:be:13:61:
                    95:c6:60:d7:0e:0f:b1:f7:57:c9:c4:cc:3d:0a:3c:
                    c9:72:28:51:81:a4:11:00:2a:e5:12:29:e4:58:19:
                    50:41:88:5d:de:ba:cc:8c:b8:18:29:96:f9:8f:da:
                    38:c8:eb:9f:27:22:72:15:ee:f2:7c:38:c3:3b:c8:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C8:C1:09:96:C4:45:85:42:5B:2D:78:53:C3:87:81:E9:7D:97:5F
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232322e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:92:ff:fa:4d:d7:92:10:ae:52:e8:64:8b:5e:c0:f7:65:f3:
         12:38:4a:07:7e:95:27:b8:2d:7c:07:cf:ef:d4:11:f2:4b:31:
         fd:5c:de:0c:c5:be:3c:a6:62:dc:c4:63:f5:54:2d:0a:24:65:
         b5:de:54:14:2e:fc:70:09:bd:c1:a2:7a:c1:69:21:3e:8a:cf:
         9b:b2:e6:8d:8d:4d:bf:66:fb:f2:b8:e4:b2:07:ad:8b:b2:8b:
         70:5d:b2:64:0d:6c:8e:be:1a:76:41:98:1d:9d:b7:d8:13:bd:
         14:02:b7:11:5b:ce:ec:0f:68:aa:4c:a2:c5:49:d6:3f:57:da:
         db:9b:14:36:14:cd:c8:e0:47:fa:fa:21:02:fd:99:be:2f:1e:
         b3:8a:ed:15:49:6b:c6:16:c2:05:ab:10:b0:6f:80:bd:27:5f:
         54:77:19:5a:3e:1a:c9:81:bf:11:10:24:60:6c:23:49:76:07:
         6c:1b:85:9d:dc:18:a8:ed:fe:bc:54:d9:1d:eb:ad:07:e1:a7:
         b8:e3:c2:f2:2f:c2:3a:ee:70:e6:8b:84:76:54:a7:5a:7b:b7:
         94:d6:c2:6f:be:e3:a9:43:65:98:77:30:6e:fa:1b:22:89:5f:
         1a:7a:33:56:50:29:1e:0a:67:22:29:85:da:82:49:1d:db:08:
         c5:9b:1f:14
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQ8WAXiMARQhD7DpmNqkyXXfiRc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDgwMDE1MDVaFw0yNTA3MDcwMDIwMDVaMDMxMTAvBgNV
BAMTKEUzQzhDMTA5OTZDNDQ1ODU0MjVCMkQ3ODUzQzM4NzgxRTk3RDk3NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2cUbqCgdrbpOLrcKh1pNy89Js
5Q7ITB/QLQe/DzEwILIxOLtijma8BOq9ELJcUx78xGen4+UMyuXoiN07OEmbGqRi
MCsxPUf5HaDZrCs+YZup2YUqnyDGJwB0SS8LiKFn2DIA+k2gsIUeiBeO4eyDUKgL
uSnyJ6JWF8sjw6NDWVzyB0osh0okSdef86JtKSLKv8epoFFp/JdN8TEmVm9Xjzwc
tFBQhCMnggMVKyj0WOp5/4wLToO0hBVQ1OtIJb4TYZXGYNcOD7H3V8nEzD0KPMly
KFGBpBEAKuUSKeRYGVBBiF3eusyMuBgplvmP2jjI658nInIV7vJ8OMM7yEibAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU48jBCZbERYVCWy14U8OHgel9l18wHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzMDM3MmUzMjMyMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMxMzIzMDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmve
MA0GCSqGSIb3DQEBCwUAA4IBAQBokv/6TdeSEK5S6GSLXsD3ZfMSOEoHfpUnuC18
B8/v1BHySzH9XN4Mxb48pmLcxGP1VC0KJGW13lQULvxwCb3BonrBaSE+is+bsuaN
jU2/ZvvyuOSyB62LsotwXbJkDWyOvhp2QZgdnbfYE70UArcRW87sD2iqTKLFSdY/
V9rbmxQ2FM3I4Ef6+iEC/Zm+Lx6ziu0VSWvGFsIFqxCwb4C9J19UdxlaPhrJgb8R
ECRgbCNJdgdsG4Wd3Bio7f68VNkd660H4ae448LyL8I67nDmi4R2VKdae7eU1sJv
vuOpQ2WYdzBu+hsiiV8aejNWUCkeCmciKYXagkkd2wjFmx8U
-----END CERTIFICATE-----
Generated at Mon Jul 8 21:27:26 2024 by rpki-client on console-fra.rpki-client.org