Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134362e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3134362e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          NrPqAecuOzO9YY53zhtKM3UrClBiRfyxl7114SIiP/c=
Subject key identifier:   00:D7:A9:2F:51:EF:2B:43:75:BE:2F:4A:F8:2C:0F:FA:91:1F:CC:72
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       7EE5ABBEAA602F4BC83BF8AFC98F48DB4D5267FD
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134362e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:06 +0000
ROA not before:           Mon 08 Jul 2024 00:15:06 +0000
ROA not after:            Mon 07 Jul 2025 00:20:06 +0000
asID:                     51202
IP address blocks:        190.151.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e5:ab:be:aa:60:2f:4b:c8:3b:f8:af:c9:8f:48:db:4d:52:67:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:06 2024 GMT
            Not After : Jul  7 00:20:06 2025 GMT
        Subject: CN=00D7A92F51EF2B4375BE2F4AF82C0FFA911FCC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:0d:ed:cd:d5:c1:d5:63:3f:fb:e4:14:34:
                    09:3b:5c:2b:56:fe:2b:ef:39:13:08:d5:11:d2:57:
                    d3:61:df:67:9a:ad:64:93:2f:5a:08:35:55:09:97:
                    3e:53:50:99:25:92:ea:a6:72:13:81:89:ac:99:fa:
                    9e:b6:c0:03:b9:2e:64:43:13:fb:e8:ff:a3:84:ce:
                    10:78:c0:c3:c9:2d:3f:f9:86:78:2e:a1:63:06:b3:
                    a9:0b:91:3c:d2:de:16:ae:23:4a:da:e5:86:39:d5:
                    bc:02:fd:68:ae:39:64:44:a0:b1:cd:49:06:5e:fc:
                    fb:b7:3d:be:0f:69:41:b9:70:09:b7:f0:b7:c2:75:
                    cd:12:b8:6e:56:f4:42:dd:7a:98:08:d5:04:df:b2:
                    00:ae:a9:41:a9:4e:45:4e:96:83:91:3a:97:44:56:
                    b6:79:aa:59:40:97:f8:d8:3b:a5:83:37:f0:e8:ff:
                    e0:e8:73:45:35:8b:a2:52:40:63:50:ed:e0:9f:8b:
                    cb:3d:e5:d0:94:12:e5:b1:1a:e2:be:ad:6e:36:0b:
                    bc:13:45:f9:9e:b5:96:98:47:c6:fc:1e:39:37:6d:
                    ae:13:34:e1:e9:80:f2:92:71:e0:23:a3:fd:11:58:
                    09:f7:c6:9e:56:6d:0f:1f:06:5d:57:96:f5:f1:fd:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D7:A9:2F:51:EF:2B:43:75:BE:2F:4A:F8:2C:0F:FA:91:1F:CC:72
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134362e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f7:83:ca:43:fd:29:35:4c:0e:82:c6:93:19:c3:04:87:29:
         28:8f:f0:57:44:ef:d5:84:88:73:de:05:e5:ae:37:e0:e2:b8:
         88:8e:9c:2b:91:22:4b:46:73:c6:70:c7:3f:3e:7a:cc:da:ab:
         3d:21:66:96:cd:2b:bf:a2:0e:07:9b:e7:41:41:39:66:36:45:
         c5:1e:22:44:5d:8e:18:07:18:af:45:de:f5:32:95:e1:d7:81:
         22:28:9a:98:80:e6:b0:76:72:37:bf:f1:7d:bf:90:d7:db:09:
         83:d8:1a:51:60:39:58:fe:5d:96:04:29:cd:b6:54:ab:59:15:
         09:d3:c2:61:c0:97:fc:fa:81:dd:86:31:ff:6e:94:0e:3a:6f:
         4c:d1:9a:ee:c7:34:d3:5c:cc:1c:e7:ff:fa:da:b7:2f:33:8c:
         ee:5b:87:d9:a1:c7:22:8e:57:ab:8e:80:73:1d:a3:c8:ba:9f:
         88:bd:c8:86:61:f7:c2:3a:37:4f:44:4a:2c:54:f2:78:1f:9f:
         2b:0a:f2:e1:5f:fd:0c:e4:2f:2a:04:dc:64:1e:24:7d:92:66:
         3b:4c:19:d3:6f:52:31:a8:32:d2:61:6c:10:0c:c4:8d:e5:8c:
         e1:f1:47:ef:70:40:a7:c0:25:28:94:45:a4:7b:5d:ea:1b:cb:
         b6:f5:67:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 21:27:26 2024 by rpki-client on console-fra.rpki-client.org