Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e32342e302f32312d3231203d3e203232333638.roa
File:                     3139302e31332e32342e302f32312d3231203d3e203232333638.roa (raw, json)
Hash identifier:          3qKO8mkvhM4c+/mGP2eftLMXKa9NHP27zhEucA45hZQ=
Subject key identifier:   CB:DE:FE:1D:3A:F6:2B:0B:F1:EA:58:72:44:9B:C1:24:82:63:7C:48
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       5AE9779141684DF8F785981EEE7F4CEC12101DB6
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e32342e302f32312d3231203d3e203232333638.roa
Signing time:             Tue 05 Mar 2024 18:06:01 +0000
ROA not before:           Tue 05 Mar 2024 18:01:01 +0000
ROA not after:            Tue 04 Mar 2025 18:06:01 +0000
asID:                     22368
IP address blocks:        190.13.24.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 15:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e9:77:91:41:68:4d:f8:f7:85:98:1e:ee:7f:4c:ec:12:10:1d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Mar  5 18:01:01 2024 GMT
            Not After : Mar  4 18:06:01 2025 GMT
        Subject: CN=CBDEFE1D3AF62B0BF1EA5872449BC12482637C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:91:9c:d9:92:03:2a:3b:ad:d3:13:fe:f8:a3:
                    23:2e:e5:69:42:a7:c9:02:00:27:ba:d8:d7:15:1e:
                    f5:a2:1c:69:ab:43:e0:fd:a4:93:f7:b3:fb:69:b0:
                    7e:da:da:11:1f:d2:18:15:9f:bc:9b:7a:7e:f7:d9:
                    f7:23:44:75:2f:8c:77:f7:74:76:8b:f7:f9:2c:43:
                    a6:97:ba:74:f2:31:bd:9c:45:b7:b3:1a:15:49:9d:
                    e5:5c:c8:63:c4:3c:3b:e3:eb:67:a8:f3:be:e1:53:
                    01:53:4f:7e:e7:83:02:e2:0f:fc:60:cc:01:75:d7:
                    1f:1b:e1:c9:23:71:aa:a8:4b:a9:22:ee:cd:39:4f:
                    0e:9d:b2:b4:08:1b:57:e2:ca:93:14:ae:b2:19:ff:
                    67:83:0a:d0:a2:ba:2c:91:60:43:b9:0f:fb:25:52:
                    63:79:40:5c:f5:0f:14:24:6e:72:7c:bf:c9:be:c6:
                    c9:dc:8c:87:cb:ab:dc:4e:df:74:18:d0:d4:3d:12:
                    b1:ce:3a:10:bf:ec:83:55:d9:cd:8a:18:f0:82:a9:
                    f7:6b:03:3d:a5:e2:3f:a9:b0:81:33:9b:a4:2e:16:
                    4e:d6:7c:c7:eb:07:42:6a:7f:c4:50:ca:67:09:83:
                    93:10:89:45:b2:3f:7f:b1:6a:3f:e5:fa:78:ce:f6:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DE:FE:1D:3A:F6:2B:0B:F1:EA:58:72:44:9B:C1:24:82:63:7C:48
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e32342e302f32312d3231203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:47:8d:08:6d:d1:8e:e8:5d:46:54:87:7e:59:09:ad:df:e1:
         88:36:6b:4e:00:33:a6:aa:6d:97:02:7d:65:7c:fb:b3:0c:05:
         2c:33:79:e0:0d:20:ae:4f:25:5e:c7:98:85:ec:1f:bd:e3:60:
         5c:6d:7d:1b:34:f3:cb:eb:eb:bd:2d:49:84:1f:aa:6b:fc:c7:
         ae:43:45:e2:80:b1:87:65:d5:94:96:fb:68:29:ef:33:e5:0c:
         f8:c9:43:f3:ea:16:59:4d:b1:6d:9c:85:fc:9b:98:ee:ee:52:
         e4:13:82:35:35:81:36:95:8b:17:3a:44:5b:8b:4c:04:db:d9:
         ba:b3:ed:de:52:55:ac:0d:96:b8:52:fe:bb:b0:8d:4a:c2:71:
         e5:05:f7:8b:3d:b3:1c:18:45:aa:8c:6f:b7:d8:d3:1f:47:09:
         11:5e:c6:f8:b8:58:00:a6:51:4f:77:ed:df:3c:67:80:c7:cc:
         95:f6:e1:0f:d8:17:e5:66:06:08:7d:7d:5f:c9:24:0d:59:ec:
         ec:53:f9:70:60:f8:df:eb:be:4a:c2:0d:2e:f4:60:ec:73:8c:
         29:4e:d4:f4:f5:54:08:62:4d:7a:a0:2a:c9:14:da:3c:78:f3:
         d6:b4:a9:ba:d3:d8:dc:4f:8c:57:49:fe:bb:a3:e6:5e:59:c9:
         af:5c:84:41
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUWul3kUFoTfj3hZge7n9M7BIQHbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNDAzMDUxODAxMDFaFw0yNTAzMDQxODA2MDFaMDMxMTAvBgNV
BAMTKENCREVGRTFEM0FGNjJCMEJGMUVBNTg3MjQ0OUJDMTI0ODI2MzdDNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdkZzZkgMqO63TE/74oyMu5WlC
p8kCACe62NcVHvWiHGmrQ+D9pJP3s/tpsH7a2hEf0hgVn7yben732fcjRHUvjHf3
dHaL9/ksQ6aXunTyMb2cRbezGhVJneVcyGPEPDvj62eo877hUwFTT37ngwLiD/xg
zAF11x8b4ckjcaqoS6ki7s05Tw6dsrQIG1fiypMUrrIZ/2eDCtCiuiyRYEO5D/sl
UmN5QFz1DxQkbnJ8v8m+xsncjIfLq9xO33QY0NQ9ErHOOhC/7INV2c2KGPCCqfdr
Az2l4j+psIEzm6QuFk7WfMfrB0Jqf8RQymcJg5MQiUWyP3+xaj/l+njO9i9fAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUy97+HTr2Kwvx6lhyRJvBJIJjfEgwHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMxMzkzMDJlMzEzMzJlMzIzNDJlMzAy
ZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzIzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO+DRgwDQYJ
KoZIhvcNAQELBQADggEBAH1HjQht0Y7oXUZUh35ZCa3f4Yg2a04AM6aqbZcCfWV8
+7MMBSwzeeANIK5PJV7HmIXsH73jYFxtfRs088vr670tSYQfqmv8x65DReKAsYdl
1ZSW+2gp7zPlDPjJQ/PqFllNsW2chfybmO7uUuQTgjU1gTaVixc6RFuLTATb2bqz
7d5SVawNlrhS/ruwjUrCceUF94s9sxwYRaqMb7fY0x9HCRFexvi4WACmUU937d88
Z4DHzJX24Q/YF+VmBgh9fV/JJA1Z7OxT+XBg+N/rvkrCDS70YOxzjClO1PT1VAhi
TXqgKskU2jx489a0qbrT2NxPjFdJ/ruj5l5Zya9chEE=
-----END CERTIFICATE-----
Generated at Wed Jul 10 18:12:55 2024 by rpki-client on console-fra.rpki-client.org