Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135312e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3135312e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          jukKvu1o/HrR74SV44+wlH2OA9WTpUBT0urujEXV7q4=
Subject key identifier:   A3:FA:3D:60:05:07:E4:DE:7C:A7:79:90:4F:12:A8:AC:44:6E:7A:41
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       6148EFA2CD8D50AE9494F6F34205E5B42F9AD387
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135312e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:02 +0000
ROA not before:           Mon 08 Jul 2024 00:15:02 +0000
ROA not after:            Mon 07 Jul 2025 00:20:02 +0000
asID:                     51202
IP address blocks:        190.151.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:48:ef:a2:cd:8d:50:ae:94:94:f6:f3:42:05:e5:b4:2f:9a:d3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:02 2024 GMT
            Not After : Jul  7 00:20:02 2025 GMT
        Subject: CN=A3FA3D600507E4DE7CA779904F12A8AC446E7A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:8e:12:3a:94:57:b9:55:f7:97:ab:3e:35:
                    dd:06:9e:cc:7e:8e:f9:a9:5a:dd:7e:ef:f8:67:90:
                    6b:9f:86:03:25:3a:0b:b9:75:60:3d:0c:d7:28:04:
                    6d:25:41:d7:35:0b:ff:33:5a:3f:1e:b6:45:03:a7:
                    ea:9f:42:26:3d:82:5e:08:4b:04:99:69:ff:c1:d3:
                    31:dd:19:9f:ce:6b:e0:74:2d:06:b1:3c:c9:d8:03:
                    f6:4b:68:68:8a:87:e9:6b:da:17:54:9f:0c:1d:d1:
                    8d:28:8b:70:6a:d7:f2:9f:9e:9b:9b:c3:56:90:4f:
                    28:35:0b:16:2a:89:b2:d7:be:95:38:97:31:af:25:
                    db:88:7d:f7:a7:4a:fb:33:5d:fc:b2:06:c3:a9:0f:
                    e9:7f:e7:f6:a4:d9:be:86:20:91:66:cc:a2:f3:e4:
                    8a:d4:a3:1f:07:84:98:27:16:84:c9:ba:b7:08:1b:
                    78:6e:55:f7:e0:25:a5:92:66:c9:e9:f7:24:6a:19:
                    ee:70:c7:53:d3:ab:4a:df:56:b5:82:95:75:bb:47:
                    91:78:e0:00:c5:dd:82:cc:3a:00:65:4a:c1:1e:b4:
                    06:22:61:a0:a2:73:2d:30:ae:4d:30:93:82:d5:9a:
                    c0:b8:ac:2b:dc:12:09:19:07:94:f6:50:cd:a7:c6:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FA:3D:60:05:07:E4:DE:7C:A7:79:90:4F:12:A8:AC:44:6E:7A:41
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135312e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:e4:37:54:07:90:65:c8:8a:12:44:22:e2:d4:77:e3:dd:b0:
         82:2f:36:cf:cb:a2:6f:fd:81:6f:e7:12:bd:c6:8c:c5:3d:f7:
         17:e1:18:1e:23:aa:5d:71:f1:09:12:f0:83:90:21:b9:72:8e:
         3a:df:27:77:d5:66:ab:5b:a0:d0:4c:3e:7f:a3:45:68:cf:90:
         eb:bf:48:20:d8:b2:b8:95:05:d0:41:ca:91:7e:74:37:5c:55:
         62:80:75:c0:ba:70:a0:c1:e4:ed:10:bb:4a:00:34:39:21:7c:
         f6:2b:7b:2e:e7:e7:b0:64:5e:e2:08:3a:42:48:fd:81:5d:28:
         50:d4:63:e3:73:89:b2:c0:bf:ca:6e:2d:4c:76:6b:82:0a:ce:
         86:ce:67:2b:7a:33:83:df:51:d1:68:1a:99:93:7e:f6:2b:53:
         56:2a:b4:1a:38:88:dd:ee:57:23:4f:b2:50:f7:ce:ec:43:6e:
         bb:b7:ca:3e:74:fa:c7:70:6f:b8:e5:5d:1a:bd:e1:96:ac:ce:
         15:84:1d:3f:93:d2:13:96:7c:69:74:76:6e:23:a3:25:9e:b2:
         fb:e9:85:47:00:9d:28:20:fd:5d:c1:16:b4:b9:90:ad:8a:cd:
         02:6a:0f:30:bd:10:db:c7:38:31:7b:80:2a:40:14:1d:46:46:
         22:30:74:d8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYUjvos2NUK6UlPbzQgXltC+a04cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDgwMDE1MDJaFw0yNTA3MDcwMDIwMDJaMDMxMTAvBgNV
BAMTKEEzRkEzRDYwMDUwN0U0REU3Q0E3Nzk5MDRGMTJBOEFDNDQ2RTdBNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yo4SOpRXuVX3l6s+Nd0Gnsx+
jvmpWt1+7/hnkGufhgMlOgu5dWA9DNcoBG0lQdc1C/8zWj8etkUDp+qfQiY9gl4I
SwSZaf/B0zHdGZ/Oa+B0LQaxPMnYA/ZLaGiKh+lr2hdUnwwd0Y0oi3Bq1/Kfnpub
w1aQTyg1CxYqibLXvpU4lzGvJduIffenSvszXfyyBsOpD+l/5/ak2b6GIJFmzKLz
5IrUox8HhJgnFoTJurcIG3huVffgJaWSZsnp9yRqGe5wx1PTq0rfVrWClXW7R5F4
4ADF3YLMOgBlSsEetAYiYaCicy0wrk0wk4LVmsC4rCvcEgkZB5T2UM2nxisxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUo/o9YAUH5N58p3mQTxKorERuekEwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzNTMxMmUzMTM1MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMxMzIzMDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvpeX
MA0GCSqGSIb3DQEBCwUAA4IBAQC35DdUB5BlyIoSRCLi1Hfj3bCCLzbPy6Jv/YFv
5xK9xozFPfcX4RgeI6pdcfEJEvCDkCG5co463yd31WarW6DQTD5/o0Voz5Drv0gg
2LK4lQXQQcqRfnQ3XFVigHXAunCgweTtELtKADQ5IXz2K3su5+ewZF7iCDpCSP2B
XShQ1GPjc4mywL/Kbi1MdmuCCs6GzmcrejOD31HRaBqZk372K1NWKrQaOIjd7lcj
T7JQ987sQ267t8o+dPrHcG+45V0aveGWrM4VhB0/k9ITlnxpdHZuI6MlnrL76YVH
AJ0oIP1dwRa0uZCtis0Cag8wvRDbxzgxe4AqQBQdRkYiMHTY
-----END CERTIFICATE-----
Generated at Mon Jul 8 21:27:26 2024 by rpki-client on console-fra.rpki-client.org