Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e36342e302f31382d3138203d3e203237383933.roa
File:                     3139302e3137302e36342e302f31382d3138203d3e203237383933.roa (raw, json)
Hash identifier:          8pC+U99MXpsMkf38eOMKbwlnmsR/QfDdx9VlUJ+Aa10=
Subject key identifier:   F9:AD:3A:99:8B:26:2A:56:75:44:FE:60:F1:58:E9:3A:8A:C7:29:5E
Certificate issuer:       /CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
Certificate serial:       4272B1376122D681A6DEC281CDA2DE46C7003B08
Authority key identifier: 9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e36342e302f31382d3138203d3e203237383933.roa
Signing time:             Tue 05 Mar 2024 17:49:27 +0000
ROA not before:           Tue 05 Mar 2024 17:44:27 +0000
ROA not after:            Tue 04 Mar 2025 17:49:27 +0000
asID:                     27893
IP address blocks:        190.170.64.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 22:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:72:b1:37:61:22:d6:81:a6:de:c2:81:cd:a2:de:46:c7:00:3b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
        Validity
            Not Before: Mar  5 17:44:27 2024 GMT
            Not After : Mar  4 17:49:27 2025 GMT
        Subject: CN=F9AD3A998B262A567544FE60F158E93A8AC7295E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:10:e9:80:3b:1a:4b:53:3b:45:3a:db:1c:
                    d4:c1:48:1f:98:32:b4:1d:df:38:40:d5:2f:29:c2:
                    8d:b4:c4:9e:77:b4:3b:4a:97:b9:29:8d:0e:23:dd:
                    bd:c7:3f:a5:46:eb:ed:df:03:15:22:18:0d:6c:ce:
                    d9:0c:43:21:eb:d1:f8:13:48:b0:c9:a2:85:87:0d:
                    8e:d4:fa:53:7d:c6:71:39:2e:94:db:fc:f1:cc:a3:
                    29:93:e6:12:b5:02:ae:00:f3:48:9d:7e:3f:ae:86:
                    b5:79:f0:85:f8:19:02:91:35:c2:65:ff:81:39:da:
                    3d:c7:c0:d5:8e:a8:f1:ca:49:b9:be:be:b7:a2:30:
                    da:27:82:ff:22:76:ca:07:f6:a1:87:4c:6e:8c:90:
                    e7:fa:2e:9a:d0:c0:93:62:35:a4:cf:18:74:35:9e:
                    b9:3a:23:93:6b:e9:87:0b:9c:34:59:92:d8:39:40:
                    48:77:20:05:fe:83:ea:cf:33:71:2e:7e:58:a9:f7:
                    c4:98:1a:19:21:f1:6b:6f:23:a7:d3:a3:f0:c6:f4:
                    ba:f1:a8:96:d6:ad:cf:7f:dd:f4:0d:18:45:8c:cb:
                    ba:87:f8:8f:59:a8:5e:7c:02:f6:db:7b:14:3b:35:
                    5c:d1:34:53:f4:c5:41:f7:d2:1f:33:cd:d5:ca:28:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AD:3A:99:8B:26:2A:56:75:44:FE:60:F1:58:E9:3A:8A:C7:29:5E
            X509v3 Authority Key Identifier:
                keyid:9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e36342e302f31382d3138203d3e203237383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2d:61:0f:db:26:7b:b1:c1:d1:2a:3f:d8:67:32:c1:38:45:eb:
         fb:19:c2:6b:f2:ca:51:41:9a:6d:f4:47:bc:72:7a:41:05:db:
         c3:be:64:9a:5f:d3:6b:af:61:a1:9d:3e:f2:40:48:fc:92:e0:
         9d:6c:1b:78:bc:10:76:dd:68:83:46:4f:27:18:a7:78:30:42:
         9c:5b:be:8d:7d:e2:d4:da:cf:e6:ba:e7:79:4d:46:46:b9:5c:
         35:64:46:49:f0:07:75:3e:bb:88:3e:b1:b3:c3:c2:06:d4:8e:
         8d:f3:8e:ca:d9:d5:f7:aa:7c:52:68:ca:51:51:e7:cc:5b:49:
         91:b2:09:cb:be:85:b6:07:10:20:67:9f:11:9b:d4:5d:4d:cd:
         e3:58:cb:65:98:4c:8b:a5:78:b1:4c:30:ea:e8:75:3c:a2:e6:
         66:8c:74:a7:ba:4e:9c:dd:1b:12:f6:91:91:32:60:28:64:50:
         a5:7f:f6:a9:b3:2e:f5:e2:11:e9:f4:07:aa:e4:a8:22:77:c9:
         67:1d:0e:01:45:b1:59:3d:8a:94:07:37:22:9a:65:44:39:1e:
         71:98:10:f5:e5:9c:bb:7b:a8:4e:f4:f7:2d:e9:f8:4a:fb:61:
         37:97:a2:c5:14:32:7c:c5:fa:02:b0:f6:65:9d:54:12:b8:3c:
         da:69:33:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 03:05:10 2024 by rpki-client on console-fra.rpki-client.org