Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/91f0a9d4e8e30e3c505eb3876a4083373dc00fe0.roa
File:                     91f0a9d4e8e30e3c505eb3876a4083373dc00fe0.roa (raw, json)
Hash identifier:          jOyyv7Roln2oUBAHgaK8NftmvL+XzNc3uMqbXWLRW2E=
Subject key identifier:   BD:16:82:C7:AF:2E:7E:E0:BD:6F:EB:A5:E3:D3:A7:F5:08:7A:24:9F
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A659C
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/91f0a9d4e8e30e3c505eb3876a4083373dc00fe0.roa
Signing time:             Wed 14 Feb 2024 13:39:48 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     211061
IP address blocks:        190.93.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 28 Mar 2024 14:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2778524 (0x2a659c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=91f0a9d4e8e30e3c505eb3876a4083373dc00fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:5d:f1:c2:a9:91:66:ff:da:e9:d5:1e:5a:
                    06:69:9c:7d:fe:71:df:fe:f8:95:f2:01:f5:7c:c4:
                    a0:83:ad:40:96:59:a2:29:17:95:31:02:cb:c9:67:
                    dd:d8:e4:4c:85:70:40:68:60:fa:7d:b2:a5:90:c2:
                    0b:52:56:1c:10:06:a3:7a:23:b3:f9:47:ba:06:0d:
                    ac:87:16:f9:3e:6e:ac:48:7d:b2:b6:02:f3:7a:5e:
                    b7:2a:09:f8:93:fd:a7:cf:2d:86:cd:94:80:11:11:
                    e2:a6:6c:8c:51:fb:6f:0c:51:ba:98:ed:f0:d2:bf:
                    6b:0b:0c:d4:d7:0e:4e:7c:9f:34:8b:e7:76:6f:1e:
                    69:b9:b1:8d:98:68:53:68:67:38:f9:71:b5:8a:b3:
                    b5:15:a3:ef:d8:26:7a:27:b7:35:f7:a3:fc:fc:91:
                    03:69:99:c8:83:6f:0a:1a:97:09:e3:7a:c8:ec:b1:
                    8f:e7:6c:a8:2a:61:37:ac:d3:f4:a9:cf:d7:68:c2:
                    0f:a0:c5:e1:78:b8:1e:08:06:a9:7f:bb:97:47:06:
                    9d:e2:12:8c:83:b7:99:e4:a3:cc:3a:b8:f0:80:07:
                    c5:fc:eb:34:62:09:fc:4c:0a:3a:e1:a3:c5:cb:7a:
                    9f:58:d4:3f:bb:df:0d:67:4f:78:d9:cb:22:2c:90:
                    2a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:16:82:C7:AF:2E:7E:E0:BD:6F:EB:A5:E3:D3:A7:F5:08:7A:24:9F
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/91f0a9d4e8e30e3c505eb3876a4083373dc00fe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:40:b2:5f:a8:ba:2a:dc:17:21:00:7f:ef:75:35:f7:23:b3:
         8c:ff:92:6f:3b:40:1c:41:42:de:06:06:a2:25:5f:c2:9f:49:
         1b:6f:d2:01:b4:78:bf:f2:32:6b:8c:35:c7:cc:c8:60:4e:2b:
         45:ac:c2:89:6f:32:8c:98:42:d2:97:2e:be:d2:a5:b2:8c:f5:
         63:25:5a:d1:96:c1:be:24:b1:a9:93:ff:6c:4e:ae:cb:ed:01:
         ea:c2:23:d1:af:69:99:34:a6:75:f6:a6:11:fc:bf:a8:20:5d:
         12:dd:1c:0b:9a:c3:84:c5:60:10:81:da:0e:31:bd:6f:b0:41:
         fb:de:cd:2d:a7:95:4f:ca:c4:01:76:d9:1c:03:6b:e5:33:f9:
         00:48:39:35:36:00:ec:0c:fa:99:1d:0b:85:3d:f6:92:55:e1:
         d1:52:65:42:a0:49:03:ff:0d:58:50:ce:15:9d:f4:c8:7b:a0:
         52:c8:be:ae:0c:62:e0:0a:fd:13:57:25:b9:55:cb:b6:b4:c7:
         fb:d6:7c:e3:6e:ca:ed:aa:2e:72:7f:a2:5d:6a:f3:33:a3:a5:
         47:f5:a8:8d:ae:2a:50:b6:c0:7e:ff:19:86:68:7c:97:32:ab:
         c3:a9:34:55:4d:92:d9:b7:9a:a6:aa:da:d3:c9:f1:56:03:bf:
         67:c9:84:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:00:50 2024 by rpki-client on console-fra.rpki-client.org