Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135342e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3135342e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          SjGbhbZPbqOF4+jmZanxyuiaQ8b2ngsYRpEScy7QmWE=
Subject key identifier:   95:A0:48:19:F0:8D:42:10:F5:A2:51:6D:F0:8E:27:F0:9B:58:2F:35
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       32E713ED02063D3AB270B6F33943B3AE5A827267
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135342e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:00 +0000
ROA not before:           Mon 08 Jul 2024 00:15:00 +0000
ROA not after:            Mon 07 Jul 2025 00:20:00 +0000
asID:                     51202
IP address blocks:        190.151.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e7:13:ed:02:06:3d:3a:b2:70:b6:f3:39:43:b3:ae:5a:82:72:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:00 2024 GMT
            Not After : Jul  7 00:20:00 2025 GMT
        Subject: CN=95A04819F08D4210F5A2516DF08E27F09B582F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:48:2c:9f:8f:91:89:93:36:4a:3a:dc:2c:
                    4a:be:8d:ba:13:6f:56:5a:fc:dd:e9:00:50:40:43:
                    31:61:a0:c5:7e:e9:7a:e2:5e:6d:0e:16:26:34:fe:
                    98:b2:18:91:a3:59:ca:15:71:13:10:70:ee:0d:2a:
                    3e:bf:8b:b8:9e:a9:37:e3:2e:0e:08:93:0f:b7:73:
                    3f:5d:fb:7e:ed:f9:5c:69:09:22:92:09:ad:82:67:
                    5b:a4:63:f4:bd:b7:90:f6:36:b7:7c:e6:f3:cc:9b:
                    fb:2e:30:ab:b9:89:8e:66:13:47:de:3e:b6:b0:f6:
                    41:0d:33:47:64:23:30:0a:8e:6b:de:fe:ca:07:3e:
                    c5:6e:fa:28:b2:00:82:8c:e6:94:2c:92:d2:e6:33:
                    d2:98:be:15:c2:34:1c:a2:69:9b:f4:3d:61:48:cf:
                    67:22:16:b2:f0:f2:2e:6f:d1:10:09:04:c2:4f:54:
                    4e:94:9a:3b:60:8b:95:03:c0:d1:0e:d0:dc:d8:65:
                    a5:19:75:ff:a4:f4:b0:13:03:e9:15:79:db:05:86:
                    83:42:d6:33:9b:af:b3:3d:0e:35:8e:52:43:6b:b6:
                    f2:4f:2f:48:31:4a:aa:68:63:c2:da:a6:03:d7:23:
                    27:3a:03:e5:21:79:ac:1a:28:b3:19:38:9a:6b:1d:
                    9d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A0:48:19:F0:8D:42:10:F5:A2:51:6D:F0:8E:27:F0:9B:58:2F:35
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135342e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:d5:85:9e:3e:17:d7:ae:af:b5:df:b3:3d:f7:51:9f:28:2d:
         48:fb:ce:b1:f5:b2:20:38:dd:9d:4a:a4:4e:d8:21:52:02:c4:
         9a:91:b2:09:51:2f:23:50:88:03:2a:28:59:20:39:96:18:65:
         3d:dc:87:21:eb:db:61:8f:54:a3:36:ef:ed:4d:66:ef:ec:09:
         c8:cb:28:1b:f4:85:e9:40:40:d4:bf:54:4f:7f:05:c1:8e:2b:
         8b:c7:15:67:09:3c:d2:b0:71:4c:eb:ec:56:87:4b:e7:d0:85:
         f5:4e:33:1a:ee:c0:37:86:96:e2:91:74:3b:7d:8c:32:d2:da:
         b5:4d:09:84:ff:ac:bb:66:50:15:cd:5f:96:66:58:55:4b:a3:
         85:ea:ba:99:7c:24:4b:e4:00:bd:28:b3:c0:c4:7a:81:1c:0c:
         8a:e9:3f:85:43:f1:65:30:8e:f5:7e:a3:7f:60:e9:7c:06:6e:
         12:37:52:94:72:a9:20:4b:30:ba:66:fa:5f:ae:e5:98:bc:05:
         94:b0:9f:44:d5:8b:da:82:c1:9e:ff:e2:ee:49:84:71:05:19:
         14:53:bf:47:4b:03:0d:7e:8b:3f:0e:2a:26:43:5c:c4:cd:97:
         73:44:fa:50:a6:9c:12:71:c1:2b:2a:b1:c9:f1:cc:53:57:2a:
         5d:31:48:67
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMucT7QIGPTqycLbzOUOzrlqCcmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDgwMDE1MDBaFw0yNTA3MDcwMDIwMDBaMDMxMTAvBgNV
BAMTKDk1QTA0ODE5RjA4RDQyMTBGNUEyNTE2REYwOEUyN0YwOUI1ODJGMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiUUgsn4+RiZM2SjrcLEq+jboT
b1Za/N3pAFBAQzFhoMV+6XriXm0OFiY0/piyGJGjWcoVcRMQcO4NKj6/i7ieqTfj
Lg4Ikw+3cz9d+37t+VxpCSKSCa2CZ1ukY/S9t5D2Nrd85vPMm/suMKu5iY5mE0fe
Praw9kENM0dkIzAKjmve/soHPsVu+iiyAIKM5pQsktLmM9KYvhXCNByiaZv0PWFI
z2ciFrLw8i5v0RAJBMJPVE6Umjtgi5UDwNEO0NzYZaUZdf+k9LATA+kVedsFhoNC
1jObr7M9DjWOUkNrtvJPL0gxSqpoY8LapgPXIyc6A+UheawaKLMZOJprHZ0VAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlaBIGfCNQhD1olFt8I4n8JtYLzUwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzNTMxMmUzMTM1MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMxMzIzMDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvpea
MA0GCSqGSIb3DQEBCwUAA4IBAQBH1YWePhfXrq+137M991GfKC1I+86x9bIgON2d
SqRO2CFSAsSakbIJUS8jUIgDKihZIDmWGGU93Ich69thj1SjNu/tTWbv7AnIyygb
9IXpQEDUv1RPfwXBjiuLxxVnCTzSsHFM6+xWh0vn0IX1TjMa7sA3hpbikXQ7fYwy
0tq1TQmE/6y7ZlAVzV+WZlhVS6OF6rqZfCRL5AC9KLPAxHqBHAyK6T+FQ/FlMI71
fqN/YOl8Bm4SN1KUcqkgSzC6ZvpfruWYvAWUsJ9E1YvagsGe/+LuSYRxBRkUU79H
SwMNfos/DiomQ1zEzZdzRPpQppwSccErKrHJ8cxTVypdMUhn
-----END CERTIFICATE-----
Generated at Mon Jul 8 21:27:26 2024 by rpki-client on console-fra.rpki-client.org