Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131322e302f32322d3232203d3e203531323032.roa
File:                     3139302e31332e3131322e302f32322d3232203d3e203531323032.roa (raw, json)
Hash identifier:          73YSfJtD9Zj835a6QwBlnVzXMBVFknjTxZ3n8mR+6eQ=
Subject key identifier:   4A:0B:3C:1E:2B:55:AD:73:8A:DF:98:42:CD:2D:9D:A2:2A:D6:6E:EB
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       4D586693FE3C0058E1F92E0C0A356D8091E6319B
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131322e302f32322d3232203d3e203531323032.roa
Signing time:             Sun 07 Jul 2024 22:25:00 +0000
ROA not before:           Sun 07 Jul 2024 22:20:00 +0000
ROA not after:            Sun 06 Jul 2025 22:25:00 +0000
asID:                     51202
IP address blocks:        190.13.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 00:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:58:66:93:fe:3c:00:58:e1:f9:2e:0c:0a:35:6d:80:91:e6:31:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  7 22:20:00 2024 GMT
            Not After : Jul  6 22:25:00 2025 GMT
        Subject: CN=4A0B3C1E2B55AD738ADF9842CD2D9DA22AD66EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:0f:13:0c:41:eb:d8:42:44:71:92:13:d9:
                    41:a2:35:7a:02:3e:89:4d:c0:54:dd:b0:30:1a:fc:
                    9b:de:af:28:8f:35:86:79:43:26:94:c2:02:3e:b7:
                    f4:76:df:e4:8d:7e:98:b1:dd:dc:3a:01:ab:4f:25:
                    d0:f5:b7:8b:02:d9:c4:2e:b8:f8:39:2f:8e:aa:c2:
                    12:21:a3:15:a9:b3:a9:f9:3d:e7:58:be:92:e7:17:
                    5d:a5:49:b5:4f:10:ad:6a:ec:ba:70:4c:72:ec:fe:
                    bb:fd:cb:3c:4b:83:9d:bb:a5:60:b4:1b:cf:3c:da:
                    7b:b9:62:ab:d4:bb:3a:42:f1:33:90:2e:9f:f8:2d:
                    8b:7d:a8:e7:6d:cb:9a:8e:d7:23:f0:34:bd:db:a6:
                    f9:61:d9:3c:0b:0e:00:3b:2d:71:78:a7:d0:55:c2:
                    e7:3c:2c:fa:1a:38:89:85:48:2c:87:1d:80:1f:31:
                    f0:ed:09:32:93:cb:b7:f5:39:6e:15:f7:eb:6f:e1:
                    17:32:50:ed:94:3c:f6:3e:88:82:05:6c:c3:b9:8b:
                    3d:33:6b:db:55:7c:5b:c0:83:4c:bf:4a:b0:9f:cf:
                    a9:5d:6c:6b:55:89:22:05:54:e1:6e:4d:92:f7:8e:
                    2b:47:86:98:1d:60:07:87:1b:78:08:11:3d:c1:1e:
                    28:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0B:3C:1E:2B:55:AD:73:8A:DF:98:42:CD:2D:9D:A2:2A:D6:6E:EB
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131322e302f32322d3232203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:63:ff:23:7a:2f:5d:c7:91:7e:89:91:83:ee:74:ff:c4:b1:
         a3:08:b1:ce:26:f3:66:b7:05:a8:53:08:e3:4d:db:16:c4:f5:
         1b:c8:4e:6d:ea:2c:d2:e1:1d:99:28:ae:b3:d2:40:4d:53:c1:
         a5:95:6c:a8:e4:fc:ea:e7:71:6d:e8:d0:40:ea:a2:ed:5d:da:
         76:16:bb:60:06:ec:77:12:4f:f1:07:9f:9e:a6:e1:97:2b:a6:
         3a:23:de:cb:73:a9:30:19:9f:4c:9f:61:34:4a:fe:8a:ba:b4:
         b6:f2:fc:55:69:74:26:21:5c:2c:d4:28:38:64:4a:df:e5:43:
         eb:ff:c1:64:5c:1c:42:e0:ce:92:32:f4:20:e0:ef:8e:46:f6:
         41:03:e4:fa:10:a6:fb:be:80:23:b3:f5:eb:97:4c:a3:f6:20:
         fc:5c:8c:5f:d1:37:d2:2a:a4:51:b5:89:ac:df:e5:69:c5:dc:
         3e:f6:5d:74:46:1e:bb:dd:bd:2b:52:58:8a:2e:e7:b3:e2:02:
         b0:f0:0f:32:f7:05:7b:5e:15:16:ed:5f:59:70:4f:8d:b2:ab:
         97:23:cf:d0:b1:f9:1d:87:33:18:d6:c9:f1:e4:fd:46:34:56:
         fa:ed:f4:97:23:f9:01:e0:cd:5c:50:43:ba:ec:7f:8b:0b:95:
         36:ce:5c:b1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTVhmk/48AFjh+S4MCjVtgJHmMZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDcyMjIwMDBaFw0yNTA3MDYyMjI1MDBaMDMxMTAvBgNV
BAMTKDRBMEIzQzFFMkI1NUFENzM4QURGOTg0MkNEMkQ5REEyMkFENjZFRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMg8TDEHr2EJEcZIT2UGiNXoC
PolNwFTdsDAa/JveryiPNYZ5QyaUwgI+t/R23+SNfpix3dw6AatPJdD1t4sC2cQu
uPg5L46qwhIhoxWps6n5PedYvpLnF12lSbVPEK1q7LpwTHLs/rv9yzxLg527pWC0
G8882nu5YqvUuzpC8TOQLp/4LYt9qOdty5qO1yPwNL3bpvlh2TwLDgA7LXF4p9BV
wuc8LPoaOImFSCyHHYAfMfDtCTKTy7f1OW4V9+tv4RcyUO2UPPY+iIIFbMO5iz0z
a9tVfFvAg0y/SrCfz6ldbGtViSIFVOFuTZL3jitHhpgdYAeHG3gIET3BHijHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUSgs8HitVrXOK35hCzS2doirWbuswHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzMzJlMzEzMTMyMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMTMyMzAzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr4NcDAN
BgkqhkiG9w0BAQsFAAOCAQEAnWP/I3ovXceRfomRg+50/8SxowixzibzZrcFqFMI
403bFsT1G8hObeos0uEdmSius9JATVPBpZVsqOT86udxbejQQOqi7V3adha7YAbs
dxJP8QefnqbhlyumOiPey3OpMBmfTJ9hNEr+irq0tvL8VWl0JiFcLNQoOGRK3+VD
6//BZFwcQuDOkjL0IODvjkb2QQPk+hCm+76AI7P165dMo/Yg/FyMX9E30iqkUbWJ
rN/lacXcPvZddEYeu929K1JYii7ns+ICsPAPMvcFe14VFu1fWXBPjbKrlyPP0LH5
HYczGNbJ8eT9RjRW+u30lyP5AeDNXFBDuux/iwuVNs5csQ==
-----END CERTIFICATE-----
Generated at Mon Jul 8 02:44:19 2024 by rpki-client on console-fra.rpki-client.org