Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/063a50cf945c29d07907aba3ae23821390bb3276.roa
File:                     063a50cf945c29d07907aba3ae23821390bb3276.roa (raw, json)
Hash identifier:          RiEgKgf/IYbEhFftYho57gzd/20CzpUjZC2YLDf5IJQ=
Subject key identifier:   D9:88:54:A7:E5:79:B6:41:1F:97:D5:EF:64:E6:55:A7:0B:01:45:17
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A750A
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/063a50cf945c29d07907aba3ae23821390bb3276.roa
Signing time:             Wed 14 Feb 2024 13:39:58 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     834
IP address blocks:        190.93.80.0/24 maxlen: 24
                          190.93.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 12:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2782474 (0x2a750a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=063a50cf945c29d07907aba3ae23821390bb3276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a9:47:9c:3b:e9:74:01:0d:28:2e:17:e7:a7:
                    0b:8b:a8:af:9d:dd:62:4f:05:cd:09:62:c4:48:b3:
                    3c:9e:15:d1:3f:a3:89:9c:d8:38:1e:24:11:2b:da:
                    ae:f3:a0:f6:fe:b6:95:37:95:d2:91:74:db:2f:e4:
                    2d:e4:79:08:92:41:87:31:e3:96:e1:24:40:eb:0a:
                    cf:a9:7b:6a:08:8a:4d:ca:7f:7a:f3:33:f8:40:8c:
                    7f:a7:ce:22:5f:a7:bf:24:f3:bf:19:63:02:43:03:
                    86:a9:4a:27:76:bf:d9:26:79:71:e0:b6:6c:b2:c6:
                    83:4c:c5:e9:48:62:80:e1:22:48:31:c3:68:af:71:
                    d6:16:f1:6c:08:dd:a8:d0:ad:ca:e3:e5:d9:4c:3c:
                    b7:7a:5b:26:bd:d0:a3:54:04:7c:89:d6:ed:e8:de:
                    2b:96:80:1a:4c:5e:cb:c7:c5:10:bb:18:58:6f:c5:
                    3a:d9:61:63:e5:c4:30:5f:05:10:03:23:93:4d:42:
                    8d:e7:d9:df:94:2c:93:2b:e8:4a:30:69:6d:3f:c4:
                    e5:ff:fe:53:24:07:1b:fd:1e:0d:09:20:3d:ce:7c:
                    21:64:8d:cd:3d:dd:fe:6a:2d:9b:3b:3e:ed:ae:b7:
                    8f:af:ec:64:24:e1:fe:45:c9:ff:6b:f3:1d:11:0d:
                    9f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:88:54:A7:E5:79:B6:41:1F:97:D5:EF:64:E6:55:A7:0B:01:45:17
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/063a50cf945c29d07907aba3ae23821390bb3276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.80.0/24
                  190.93.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:c3:26:77:96:de:b8:5c:3e:cb:92:a5:1e:a2:d5:b1:ea:88:
         77:0c:e7:28:22:85:45:d1:8a:e8:d1:e7:7c:72:62:e6:a2:d3:
         0f:8c:22:7d:50:e2:a5:77:ac:70:e1:a3:75:8f:88:39:6a:1d:
         67:6a:0f:4e:e2:a6:87:01:30:27:98:cf:70:d4:58:ff:1c:72:
         c0:db:ee:33:49:d8:81:e5:99:2f:31:ae:67:8a:4b:dd:24:02:
         29:80:b8:83:be:68:c7:d3:cd:37:0e:37:ab:91:b8:91:00:d3:
         ef:08:e4:8b:c0:46:c7:63:8d:fd:8f:e8:1f:2c:49:b6:28:de:
         fa:4e:3f:9b:46:a7:1b:5e:07:7e:25:8f:20:9c:d3:8f:4f:33:
         4f:af:ba:3c:fe:2d:69:bc:c7:a4:18:1e:6c:56:60:68:e7:02:
         cd:16:72:76:ca:96:46:c5:97:dc:ca:c6:c4:c1:65:ac:f3:22:
         56:0c:97:92:1d:d0:ec:0b:5f:10:63:60:1b:fb:17:04:78:5c:
         cc:21:d8:c8:ea:63:51:4a:ac:bb:71:46:41:0c:2a:5b:d6:19:
         49:a3:27:b6:44:97:4c:d1:38:c3:89:94:a1:6a:c1:77:ba:e8:
         4c:e1:a9:23:59:4e:85:f1:02:3b:91:9f:6f:f8:82:d0:20:11:
         77:d7:40:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 17:41:16 2024 by rpki-client on console-fra.rpki-client.org