Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135382e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3135382e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          e4MipJqUh4VM2aXXCZ5kbPocwyAAHrlseGc77pa7hzI=
Subject key identifier:   00:74:A7:90:E9:12:E4:68:64:71:3B:7D:D1:71:65:95:7B:C9:B1:DE
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       58CCADF596FF0B9EF459FA542F919A54D32941D1
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135382e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:03 +0000
ROA not before:           Mon 08 Jul 2024 00:15:03 +0000
ROA not after:            Mon 07 Jul 2025 00:20:03 +0000
asID:                     51202
IP address blocks:        190.151.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cc:ad:f5:96:ff:0b:9e:f4:59:fa:54:2f:91:9a:54:d3:29:41:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:03 2024 GMT
            Not After : Jul  7 00:20:03 2025 GMT
        Subject: CN=0074A790E912E46864713B7DD17165957BC9B1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:39:99:42:e3:fa:ed:08:66:46:93:17:98:c0:
                    c4:01:16:4b:fd:2e:81:10:2b:30:3d:1c:8b:ba:90:
                    af:3e:c3:c4:66:61:86:91:70:21:ee:84:d0:90:ab:
                    54:80:7f:b0:6a:b4:1e:9d:9f:ec:35:35:e1:f0:be:
                    60:15:df:ee:05:f3:66:42:a1:2e:93:38:14:80:a3:
                    dc:a7:83:5e:2b:18:76:28:6b:58:da:48:14:49:b5:
                    5e:01:0e:d0:8c:34:8c:19:03:3d:4d:c8:e7:5c:6e:
                    d8:96:26:7e:fe:fd:86:cb:aa:74:46:a5:da:68:66:
                    18:a8:96:b0:4d:3c:ab:c1:91:fb:47:8f:31:68:18:
                    96:eb:35:f5:3e:60:79:6a:62:25:7d:f9:98:47:f6:
                    72:d0:45:77:68:6e:46:45:58:ab:53:d7:26:65:89:
                    3d:1e:25:80:da:ff:da:94:da:d7:53:b0:7b:ab:60:
                    ec:40:a5:d1:e5:aa:4a:42:ad:c9:48:a2:f8:49:03:
                    1b:3e:3b:80:27:ef:31:18:e7:a7:da:57:d2:11:6e:
                    a0:07:4a:f3:5a:b4:d0:97:80:a4:56:8c:d4:75:e8:
                    01:ca:42:18:58:3b:0a:11:56:96:0e:95:19:17:32:
                    9d:b7:6e:cf:92:02:7f:48:c2:c2:e1:1d:fa:71:45:
                    a4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:74:A7:90:E9:12:E4:68:64:71:3B:7D:D1:71:65:95:7B:C9:B1:DE
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135382e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:b6:86:7b:a1:85:32:58:8d:ec:0a:31:83:a9:2d:f6:f8:82:
         7c:62:73:b0:2c:4e:1a:4a:5e:05:3d:77:08:eb:36:ff:1e:dd:
         09:bc:ed:29:cf:85:df:8e:c9:60:e3:94:9f:ef:bd:60:3c:02:
         79:2b:90:53:9b:ff:18:55:db:11:19:5e:6c:1f:66:42:f1:bd:
         c6:33:c3:f1:eb:e2:0f:a1:75:1b:08:65:75:6f:36:82:4e:29:
         d0:e8:c9:37:07:71:a6:67:d4:1c:7b:91:5e:91:48:6c:3c:01:
         e0:51:9c:33:e7:a4:3d:30:09:ec:0f:38:a9:fc:f4:b4:2f:1c:
         91:7a:4a:cf:ec:67:9b:c9:c8:db:e8:0e:fc:0d:70:33:39:52:
         14:d8:66:82:5f:13:16:df:8e:8d:1c:6d:0c:cd:ee:76:ad:2c:
         8e:c0:fa:52:65:22:21:9e:a0:97:c9:cc:44:50:1c:ec:0e:b2:
         d7:d4:8d:ff:5a:c1:c9:19:d7:2b:e8:1d:66:92:e0:d0:48:35:
         e6:d4:11:e2:38:98:8b:a1:35:4e:89:36:0e:81:57:8e:03:f6:
         44:80:39:59:2a:71:88:69:85:5c:c7:59:c2:53:95:0a:75:e3:
         f1:ba:c7:72:31:83:fa:1c:f9:aa:6b:dc:24:76:35:06:5a:36:
         09:5d:aa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 21:54:37 2024 by rpki-client on console-ams.rpki-client.org