Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0bc0435-bf33-4b3f-9b93-c81fa0946334/39e1a39558ecec7cba85fb30b3298e6635a754e6.roa
File:                     39e1a39558ecec7cba85fb30b3298e6635a754e6.roa (raw, json)
Hash identifier:          YEHM4lN6z/MfyZCM5QzNoRxHxxmoHBF9h1jApK9Rrvk=
Subject key identifier:   DB:B9:05:0A:DB:C5:84:08:54:A1:A0:70:56:8D:5C:B7:AD:BB:16:97
Certificate issuer:       /CN=62dd925100bd51d8e62e06673d17e05527fce49d
Certificate serial:       0A94
Authority key identifier: 89:86:39:A9:4C:CF:51:93:F2:FD:26:3A:22:A2:7E:3D:6C:CA:F3:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62dd925100bd51d8e62e06673d17e05527fce49d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0bc0435-bf33-4b3f-9b93-c81fa0946334/39e1a39558ecec7cba85fb30b3298e6635a754e6.roa
Signing time:             Tue 11 Apr 2023 00:24:07 +0000
ROA not before:           Mon 10 Apr 2023 00:24:06 +0000
ROA not after:            Fri 11 Apr 2025 00:24:06 +0000
asID:                     11947
IP address blocks:        196.29.64.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Thu 15 Feb 2024 16:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2708 (0xa94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62dd925100bd51d8e62e06673d17e05527fce49d
        Validity
            Not Before: Apr 10 00:24:06 2023 GMT
            Not After : Apr 11 00:24:06 2025 GMT
        Subject: CN=39e1a39558ecec7cba85fb30b3298e6635a754e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:13:5a:46:3d:09:4b:23:09:91:a4:ea:9d:e7:
                    ec:56:fc:86:59:8d:f0:d7:ab:e6:9c:a6:69:a4:d7:
                    9f:f6:6f:47:3f:b3:cb:5e:d2:22:b4:fa:0d:87:e8:
                    77:30:da:6f:7e:39:7b:1a:09:57:34:ff:23:86:75:
                    db:29:b9:b8:e1:ce:bb:e4:b6:84:66:27:4d:1f:46:
                    52:42:a0:c5:28:d1:1c:9b:1e:c1:73:38:95:8f:25:
                    7d:32:60:86:af:2e:a7:e9:2e:fb:e9:34:77:65:5b:
                    4f:13:5b:e5:72:4a:e8:e4:f7:69:d2:67:25:69:c7:
                    da:ca:ea:12:0f:0e:db:2a:0c:12:8c:44:fd:ef:25:
                    a5:8d:55:7c:7e:47:01:54:87:de:66:6f:91:87:52:
                    dd:44:fd:8d:5a:4c:9f:12:be:f3:de:c9:e0:c3:3d:
                    79:9a:3b:ee:b6:f1:df:e1:6a:7d:5c:a8:ba:33:70:
                    40:aa:47:90:80:63:f3:76:4a:e4:80:fb:e6:6e:b1:
                    fd:0c:4e:6d:5f:78:bb:88:04:11:da:d2:cf:bd:f6:
                    e9:06:4e:d0:85:a5:46:98:b3:16:e3:d9:68:15:03:
                    4a:ff:67:5d:99:b4:4c:cb:09:4b:b3:5f:49:07:0b:
                    8a:da:c7:18:64:fd:f9:5c:fc:10:f7:39:f6:21:73:
                    df:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B9:05:0A:DB:C5:84:08:54:A1:A0:70:56:8D:5C:B7:AD:BB:16:97
            X509v3 Authority Key Identifier:
                keyid:89:86:39:A9:4C:CF:51:93:F2:FD:26:3A:22:A2:7E:3D:6C:CA:F3:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62dd925100bd51d8e62e06673d17e05527fce49d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0bc0435-bf33-4b3f-9b93-c81fa0946334/39e1a39558ecec7cba85fb30b3298e6635a754e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0bc0435-bf33-4b3f-9b93-c81fa0946334/62dd925100bd51d8e62e06673d17e05527fce49d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.29.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1b:aa:b0:ba:fc:d9:c5:c9:0c:3c:6e:65:0e:53:75:65:50:5e:
         e1:f5:e2:3c:7a:b7:d9:6f:22:60:3f:48:84:15:1f:7b:59:c1:
         38:15:a7:fe:49:3f:df:7a:0f:31:f7:39:59:ee:7d:3f:b0:af:
         fd:a3:b0:16:b7:34:2b:20:9b:28:f2:15:47:f6:ab:12:a4:fb:
         76:5b:ff:ee:78:c2:0c:f2:dd:11:d6:a4:2a:14:3a:3d:44:ae:
         41:14:44:71:5a:f5:1b:bc:16:97:33:95:bd:15:8f:ef:7d:59:
         fc:61:11:c6:7a:c8:72:83:95:08:d0:3b:5b:31:a0:21:88:7a:
         c2:27:8e:b5:6b:9d:d5:84:55:7c:fa:f9:c4:14:f2:72:7f:31:
         77:4d:7a:af:03:86:f7:e3:30:df:26:31:b3:00:b0:d8:8e:66:
         4f:7d:12:0f:3d:46:27:b6:aa:5a:82:08:2f:c1:c6:70:73:99:
         43:af:61:cb:35:03:78:2b:0f:e2:fd:c4:fe:20:26:34:fa:16:
         02:9b:9e:23:7f:a7:7b:71:cd:67:c4:eb:64:65:a3:6a:d7:34:
         c2:1a:55:a4:12:61:99:76:e4:45:75:d4:b4:e6:ec:ca:fc:1e:
         09:89:c5:29:0f:2b:1d:0c:fd:41:f5:fe:aa:01:01:66:b2:ec:
         f0:fe:38:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 20:22:34 2024 by rpki-client on console-fra.rpki-client.org