Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3139302e38332e332e302f32342d3234203d3e20323639393334.roa
File:                     3139302e38332e332e302f32342d3234203d3e20323639393334.roa (raw, json)
Hash identifier:          oQqFdH4/OYqoWVow3gLDAsKmcUki2ghZ5gBC9ef/pOs=
Subject key identifier:   C8:85:7C:5D:86:05:D4:B8:BC:F4:BF:8A:B8:E2:56:82:09:AC:87:64
Certificate issuer:       /CN=3D5D41606E30358D02DDFE121E52934DFD96EEFE
Certificate serial:       7562C34D07934CD37496874F87F1F52F175F4239
Authority key identifier: 3D:5D:41:60:6E:30:35:8D:02:DD:FE:12:1E:52:93:4D:FD:96:EE:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3139302e38332e332e302f32342d3234203d3e20323639393334.roa
Signing time:             Tue 05 Mar 2024 18:23:06 +0000
ROA not before:           Tue 05 Mar 2024 18:18:06 +0000
ROA not after:            Tue 04 Mar 2025 18:23:06 +0000
asID:                     269934
IP address blocks:        190.83.3.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 15:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:62:c3:4d:07:93:4c:d3:74:96:87:4f:87:f1:f5:2f:17:5f:42:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5D41606E30358D02DDFE121E52934DFD96EEFE
        Validity
            Not Before: Mar  5 18:18:06 2024 GMT
            Not After : Mar  4 18:23:06 2025 GMT
        Subject: CN=C8857C5D8605D4B8BCF4BF8AB8E2568209AC8764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:03:c7:0f:c5:5e:b9:3f:20:f5:ee:e4:9e:
                    56:22:6a:f7:7f:97:37:82:ec:44:38:ae:11:d2:24:
                    de:b4:2f:0a:5e:f3:8f:12:df:7a:98:7f:3d:b1:31:
                    7d:4e:20:5a:9d:84:e8:ad:cf:24:10:1d:c7:f2:19:
                    77:b6:f0:4a:d4:78:11:c2:ce:2b:fd:3e:09:1c:9a:
                    ac:e0:0f:d2:13:ab:3b:49:f9:2c:1f:48:3d:f1:9a:
                    24:65:27:ce:5b:e8:a1:96:db:09:54:69:26:59:72:
                    a2:53:9b:c2:54:66:f8:a4:81:12:26:07:f8:29:d6:
                    28:33:ee:d2:f6:be:a4:1e:66:1a:ef:f7:9e:22:69:
                    03:41:95:b3:c6:bf:5e:4c:5b:47:72:e5:87:67:56:
                    14:f2:45:c9:12:cc:1a:03:2f:19:dc:19:46:39:ba:
                    ba:01:54:56:55:1f:0b:fa:a2:6f:e2:5e:42:e3:2c:
                    69:1b:fd:88:0c:95:05:bc:a2:bd:51:ff:53:33:1f:
                    d1:08:7b:ba:ad:6c:a0:df:be:b7:59:a5:90:58:20:
                    fc:48:61:02:a9:8d:83:8f:f7:df:c7:4c:06:6d:27:
                    5c:75:df:5c:3c:9f:a9:ab:8a:5e:e6:e9:76:11:04:
                    eb:99:de:92:7e:6c:1c:ba:54:79:d2:2f:57:d2:3e:
                    f2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:85:7C:5D:86:05:D4:B8:BC:F4:BF:8A:B8:E2:56:82:09:AC:87:64
            X509v3 Authority Key Identifier:
                keyid:3D:5D:41:60:6E:30:35:8D:02:DD:FE:12:1E:52:93:4D:FD:96:EE:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3139302e38332e332e302f32342d3234203d3e20323639393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:12:06:20:35:27:ce:bd:8e:2b:88:94:37:c5:d0:11:52:73:
         4b:2e:0b:e7:fb:fe:1f:5d:44:a0:b0:94:20:e9:0d:77:16:92:
         6f:54:b3:15:7e:e5:d5:2e:ce:a0:41:52:0d:a5:03:99:68:be:
         92:70:55:1d:6b:a2:2e:e1:2b:74:b0:79:ec:f6:50:d7:7e:71:
         3c:30:f7:81:d2:ce:88:42:07:c5:2b:89:c1:58:f7:f4:5d:25:
         ee:c2:f4:47:8c:30:94:19:6f:67:d0:04:b0:43:0c:ab:88:86:
         51:44:ff:1c:fc:a3:0c:ab:f6:93:45:c7:b7:6d:7d:11:56:de:
         24:61:d4:f0:6b:29:51:00:00:ac:5d:fe:1c:af:7b:b2:e7:b6:
         8f:09:b8:cd:cf:14:1c:d9:cf:01:b2:04:02:db:c4:ae:a0:28:
         35:25:b7:98:24:d0:c1:ab:b4:34:41:8a:f1:b9:bd:85:38:b3:
         22:88:99:db:25:a8:c4:6c:c4:dd:ff:2c:0d:38:f2:ae:7c:12:
         76:a3:ed:a2:46:a4:16:43:c7:69:76:42:58:c0:a5:bf:83:12:
         a3:fc:6f:d7:32:40:24:c7:33:36:63:40:0b:98:41:9c:16:f5:
         d7:b4:b8:9c:d1:f3:93:10:49:1d:47:82:06:40:7f:39:f1:36:
         62:b2:3e:4f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUdWLDTQeTTNN0lodPh/H1LxdfQjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q1RDQxNjA2RTMwMzU4RDAyRERGRTEyMUU1MjkzNERG
RDk2RUVGRTAeFw0yNDAzMDUxODE4MDZaFw0yNTAzMDQxODIzMDZaMDMxMTAvBgNV
BAMTKEM4ODU3QzVEODYwNUQ0QjhCQ0Y0QkY4QUI4RTI1NjgyMDlBQzg3NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhAPHD8VeuT8g9e7knlYiavd/
lzeC7EQ4rhHSJN60Lwpe848S33qYfz2xMX1OIFqdhOitzyQQHcfyGXe28ErUeBHC
ziv9PgkcmqzgD9ITqztJ+SwfSD3xmiRlJ85b6KGW2wlUaSZZcqJTm8JUZvikgRIm
B/gp1igz7tL2vqQeZhrv954iaQNBlbPGv15MW0dy5YdnVhTyRckSzBoDLxncGUY5
uroBVFZVHwv6om/iXkLjLGkb/YgMlQW8or1R/1MzH9EIe7qtbKDfvrdZpZBYIPxI
YQKpjYOP99/HTAZtJ1x131w8n6mril7m6XYRBOuZ3pJ+bBy6VHnSL1fSPvKTAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUyIV8XYYF1Li89L+KuOJWggmsh2QwHwYDVR0j
BBgwFoAUPV1BYG4wNY0C3f4SHlKTTf2W7v4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMkUxMTZEMTdGQ0UwRTU5MDhGREY5MkY5RkY4MzQyQTFB
OTVCNkUwODYwNjg4OUQ3MkFGQzQ5QjA1RTIyMzg2LzAvM0Q1RDQxNjA2RTMwMzU4
RDAyRERGRTEyMUU1MjkzNERGRDk2RUVGRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDVENDE2MDZFMzAzNThEMDJE
REZFMTIxRTUyOTM0REZEOTZFRUZFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzJFMTE2RDE3RkNFMEU1OTA4RkRGOTJGOUZGODM0MkExQTk1QjZFMDg2
MDY4ODlENzJBRkM0OUIwNUUyMjM4Ni8wLzMxMzkzMDJlMzgzMzJlMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzOTMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+UwMwDQYJ
KoZIhvcNAQELBQADggEBAFISBiA1J869jiuIlDfF0BFSc0suC+f7/h9dRKCwlCDp
DXcWkm9UsxV+5dUuzqBBUg2lA5lovpJwVR1roi7hK3Sweez2UNd+cTww94HSzohC
B8UricFY9/RdJe7C9EeMMJQZb2fQBLBDDKuIhlFE/xz8owyr9pNFx7dtfRFW3iRh
1PBrKVEAAKxd/hyve7Lnto8JuM3PFBzZzwGyBALbxK6gKDUlt5gk0MGrtDRBivG5
vYU4syKImdslqMRsxN3/LA048q58Enaj7aJGpBZDx2l2QljApb+DEqP8b9cyQCTH
MzZjQAuYQZwW9de0uJzR85MQSR1HggZAfznxNmKyPk8=
-----END CERTIFICATE-----
Generated at Mon Oct 7 23:07:54 2024 by rpki-client on console-ams.rpki-client.org