Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232342e302f32302d3234203d3e20323634363838.roa
File:                     3139302e3139362e3232342e302f32302d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          3ci5PPWNE0+NrCey4oBvau8fHD5VmqOVtJSU4p/nJi4=
Subject key identifier:   40:EB:EA:45:4C:77:A3:33:3A:FF:DC:43:9E:BF:6A:0E:E2:BC:8F:E5
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       1BB7A55B228DCC36FE5C1558DE9BB1003888E32D
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232342e302f32302d3234203d3e20323634363838.roa
Signing time:             Tue 05 Mar 2024 18:12:09 +0000
ROA not before:           Tue 05 Mar 2024 18:07:09 +0000
ROA not after:            Tue 04 Mar 2025 18:12:09 +0000
asID:                     264688
IP address blocks:        190.196.224.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 19:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b7:a5:5b:22:8d:cc:36:fe:5c:15:58:de:9b:b1:00:38:88:e3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Mar  5 18:07:09 2024 GMT
            Not After : Mar  4 18:12:09 2025 GMT
        Subject: CN=40EBEA454C77A3333AFFDC439EBF6A0EE2BC8FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:77:df:17:4f:81:d0:ce:0c:0c:a5:a4:72:
                    d4:ad:b6:ae:2f:69:6a:79:82:d5:f2:18:0b:20:70:
                    49:80:b7:e0:95:72:04:41:00:e7:c6:88:cf:c9:b1:
                    e4:61:b7:1d:a5:b4:f8:87:7c:29:e3:f7:a5:0e:d3:
                    4d:48:92:5b:e1:7f:b9:19:bd:8c:ed:2f:8e:50:5f:
                    e4:ec:63:0a:79:0b:50:20:ea:97:41:85:89:34:d0:
                    b8:7f:ca:7f:6a:77:46:13:9c:bc:ae:14:84:eb:6c:
                    e5:40:b8:fe:ba:53:17:9a:d3:87:7b:18:53:a2:53:
                    e6:85:f2:c8:3e:8b:5f:82:5c:be:c7:32:00:87:56:
                    fb:f7:2e:2e:56:fe:0a:03:4f:42:ee:3d:51:24:6b:
                    a1:77:4a:89:24:ca:54:fe:99:55:99:bb:69:47:32:
                    ed:24:07:7b:aa:6f:76:84:04:e1:fa:f8:b6:de:64:
                    31:d0:76:4b:8b:bc:31:1a:5e:2b:e2:ef:63:75:3c:
                    0a:03:ed:d6:57:82:33:c2:94:90:f7:97:15:62:c8:
                    9d:fd:df:31:8d:b6:18:56:99:3e:12:02:11:8d:5f:
                    0c:9f:85:16:85:32:bb:a6:d5:b7:27:2b:c3:17:8a:
                    b9:37:69:65:03:f0:66:72:e8:71:df:63:70:3f:17:
                    a8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EB:EA:45:4C:77:A3:33:3A:FF:DC:43:9E:BF:6A:0E:E2:BC:8F:E5
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232342e302f32302d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:a3:46:ea:0e:2c:94:e8:80:f0:1b:38:fe:6a:30:22:86:a7:
         27:dc:ee:3e:a7:fc:0d:7b:1e:60:b2:39:81:75:84:03:5d:d0:
         eb:78:45:c4:e8:b2:d2:d2:95:b0:19:16:70:e4:07:05:29:56:
         49:9a:da:7d:b0:a5:b7:51:48:5b:a8:3f:11:0d:f0:ef:48:ad:
         f4:dc:90:4b:49:7e:e5:5e:fc:65:b1:50:ce:5b:72:a0:02:25:
         f4:36:55:f0:a5:0b:d4:ac:12:81:6a:ca:20:9b:df:8c:b3:cb:
         de:cb:f9:a3:fb:d3:13:fa:e3:ce:8d:c1:6b:a4:8a:68:f9:8e:
         17:25:d6:29:c8:ea:21:2f:dc:d2:1a:c5:3c:79:73:71:6e:f9:
         3f:23:f9:7b:8c:a6:98:de:f5:17:3d:3b:63:fc:bb:89:ce:25:
         7b:93:04:ef:7d:cd:a3:f8:05:c2:25:0a:d0:77:df:84:eb:27:
         fb:a9:ca:b9:38:c7:45:69:a0:39:e4:83:1d:66:cf:5f:ee:a4:
         b1:bb:7b:df:15:fc:b4:98:f6:0e:ae:65:87:83:df:58:68:b4:
         eb:36:05:4f:42:b2:e1:04:1d:32:78:18:b6:da:ae:ad:d8:f2:
         c1:67:1f:bf:de:9b:3a:06:87:b8:20:22:05:3b:86:5c:cf:95:
         fe:e7:d2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 21:35:33 2024 by rpki-client on console-fra.rpki-client.org