Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e302e302f32302d3233203d3e203232333638.roa
File:                     3139302e31332e302e302f32302d3233203d3e203232333638.roa (raw, json)
Hash identifier:          CvAYdwI+HyF1qDJZ0KnnPmtCybjT9uPsKNPmrnuzra0=
Subject key identifier:   B2:57:57:23:46:64:42:B7:19:B3:62:C7:8B:AB:DD:85:19:45:C6:D1
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       4FF379F08ABC53E6B229CE297F0C4D9033B6FDA4
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e302e302f32302d3233203d3e203232333638.roa
Signing time:             Tue 05 Mar 2024 18:05:52 +0000
ROA not before:           Tue 05 Mar 2024 18:00:52 +0000
ROA not after:            Tue 04 Mar 2025 18:05:52 +0000
asID:                     22368
IP address blocks:        190.13.0.0/20 maxlen: 23

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f3:79:f0:8a:bc:53:e6:b2:29:ce:29:7f:0c:4d:90:33:b6:fd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Mar  5 18:00:52 2024 GMT
            Not After : Mar  4 18:05:52 2025 GMT
        Subject: CN=B2575723466442B719B362C78BABDD851945C6D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1e:96:57:b1:c1:4c:3f:bc:38:42:f3:b4:11:
                    89:49:36:83:0c:5b:38:64:cc:a4:93:ca:51:a4:e9:
                    db:f1:ab:d3:69:27:3e:29:6f:13:77:9b:9f:de:1e:
                    0e:05:57:e4:7e:cd:18:5f:eb:69:c1:7c:45:91:84:
                    5d:fc:6d:6f:ae:64:f3:2e:05:11:74:af:b4:0f:c0:
                    52:60:e5:9c:57:a7:c8:7b:d4:32:ca:e9:41:33:64:
                    d5:be:0f:5b:29:03:7a:f1:0f:f0:07:43:17:fa:1c:
                    8f:a5:90:fd:53:98:8e:e2:1c:90:fd:b8:ef:64:a5:
                    6d:96:b0:d4:55:8a:3c:b4:a5:14:49:c2:74:38:b3:
                    4e:f0:82:96:f5:b4:98:4b:ef:c0:a3:fc:95:83:09:
                    2e:e6:05:dd:39:69:25:d8:89:ee:af:e9:72:d2:23:
                    8a:3b:56:b3:c3:6e:50:12:b3:db:0e:95:7f:52:1d:
                    bf:ec:7b:39:69:f8:39:3e:50:73:bf:49:a8:1c:d3:
                    f1:c2:14:f3:fd:22:63:82:c1:f1:64:e8:93:7c:3f:
                    b4:9f:40:ac:b9:6c:72:51:47:88:35:f4:97:be:6b:
                    82:e2:53:1f:33:75:aa:c1:c9:77:4c:c9:47:85:be:
                    42:71:c4:c5:5c:12:d3:f9:5c:9a:d7:a1:44:9b:ff:
                    22:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:57:57:23:46:64:42:B7:19:B3:62:C7:8B:AB:DD:85:19:45:C6:D1
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e302e302f32302d3233203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:22:f0:f0:2b:8e:3f:de:ab:c1:b8:99:f2:f6:5e:45:ba:f8:
         53:58:58:50:52:91:15:35:53:47:ae:19:4a:e2:f4:db:45:5d:
         56:39:2d:34:56:49:33:7f:37:36:f4:1e:50:1d:66:54:d9:dc:
         bb:8a:0f:3a:71:18:b5:1e:cc:5d:c8:a0:21:37:4c:08:20:0b:
         9d:f4:0d:94:c4:f6:43:0b:38:c5:55:8b:8b:bc:56:86:69:b7:
         44:79:40:a0:15:68:cc:a9:e4:0b:6f:39:83:3c:e3:96:d2:e7:
         42:31:81:9a:2e:9a:37:c7:87:60:fb:95:e3:f1:f8:2f:b4:6e:
         09:f2:b0:02:4c:de:36:01:8c:bc:d7:ba:ab:f8:73:7b:da:66:
         0d:fd:1e:61:c7:b9:96:9d:fc:ee:3d:bb:3f:83:99:b3:ff:be:
         5c:72:20:de:be:56:88:c4:c6:de:5a:a8:2c:98:8a:fb:f8:18:
         9a:45:75:af:93:c9:28:18:1e:bd:67:3e:1a:33:f9:17:af:0f:
         c4:f7:2c:aa:fa:a3:c8:09:73:93:0b:9f:71:bc:63:3e:42:84:
         5b:86:3a:26:3f:e4:5c:a1:42:2a:1c:ff:c9:51:f4:7b:ae:bd:
         bc:99:a3:25:81:f9:d2:ce:2a:02:07:ac:fb:6c:11:7e:f8:87:
         57:2f:f9:ac
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUT/N58Iq8U+ayKc4pfwxNkDO2/aQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNDAzMDUxODAwNTJaFw0yNTAzMDQxODA1NTJaMDMxMTAvBgNV
BAMTKEIyNTc1NzIzNDY2NDQyQjcxOUIzNjJDNzhCQUJERDg1MTk0NUM2RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjHpZXscFMP7w4QvO0EYlJNoMM
WzhkzKSTylGk6dvxq9NpJz4pbxN3m5/eHg4FV+R+zRhf62nBfEWRhF38bW+uZPMu
BRF0r7QPwFJg5ZxXp8h71DLK6UEzZNW+D1spA3rxD/AHQxf6HI+lkP1TmI7iHJD9
uO9kpW2WsNRVijy0pRRJwnQ4s07wgpb1tJhL78Cj/JWDCS7mBd05aSXYie6v6XLS
I4o7VrPDblASs9sOlX9SHb/sezlp+Dk+UHO/Sagc0/HCFPP9ImOCwfFk6JN8P7Sf
QKy5bHJRR4g19Je+a4LiUx8zdarByXdMyUeFvkJxxMVcEtP5XJrXoUSb/yIzAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUsldXI0ZkQrcZs2LHi6vdhRlFxtEwHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMxMzkzMDJlMzEzMzJlMzAyZTMwMmYz
MjMwMmQzMjMzMjAzZDNlMjAzMjMyMzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvg0AMA0GCSqG
SIb3DQEBCwUAA4IBAQAdIvDwK44/3qvBuJny9l5FuvhTWFhQUpEVNVNHrhlK4vTb
RV1WOS00Vkkzfzc29B5QHWZU2dy7ig86cRi1HsxdyKAhN0wIIAud9A2UxPZDCzjF
VYuLvFaGabdEeUCgFWjMqeQLbzmDPOOW0udCMYGaLpo3x4dg+5Xj8fgvtG4J8rAC
TN42AYy817qr+HN72mYN/R5hx7mWnfzuPbs/g5mz/75cciDevlaIxMbeWqgsmIr7
+BiaRXWvk8koGB69Zz4aM/kXrw/E9yyq+qPICXOTC59xvGM+QoRbhjomP+RcoUIq
HP/JUfR7rr28maMlgfnSzioCB6z7bBF++IdXL/ms
-----END CERTIFICATE-----
Generated at Wed Jul 10 22:01:57 2024 by rpki-client on console-ams.rpki-client.org