Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3137322e302f32342d3234203d3e20323632393136.roa
File:                     3230302e35322e3137322e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          5puYjJmi2JQsmsrQuM2MYWg3ijZfPkh3lrTwyD12dGw=
Subject key identifier:   D4:0F:AD:F0:40:FB:1D:15:22:AB:1E:56:B7:83:42:3B:B9:FD:47:54
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       079E292B63ECBB8402329149D30E0B44808675D0
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3137322e302f32342d3234203d3e20323632393136.roa
Signing time:             Tue 21 May 2024 03:55:02 +0000
ROA not before:           Tue 21 May 2024 03:50:02 +0000
ROA not after:            Tue 20 May 2025 03:55:02 +0000
asID:                     262916
IP address blocks:        200.52.172.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9e:29:2b:63:ec:bb:84:02:32:91:49:d3:0e:0b:44:80:86:75:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 21 03:50:02 2024 GMT
            Not After : May 20 03:55:02 2025 GMT
        Subject: CN=D40FADF040FB1D1522AB1E56B783423BB9FD4754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ee:a1:ba:42:1b:81:0e:b1:65:57:f5:c5:3c:
                    45:d5:db:79:01:d7:fa:1a:15:f8:84:08:5e:a3:8a:
                    d3:21:0e:be:f2:f7:b4:a6:99:de:c7:6c:0a:95:c8:
                    57:7d:07:2b:d2:af:8f:4d:f4:32:ec:b1:e1:43:5d:
                    4f:da:c9:8e:0a:e9:f8:a4:4c:ff:7c:93:4a:a7:36:
                    1d:f2:1b:1e:75:c3:04:6d:46:f8:45:79:40:a0:f2:
                    45:36:8b:92:85:36:5f:bd:56:b8:5f:44:66:96:94:
                    58:35:76:66:59:74:a9:ef:57:0d:00:eb:7d:9b:84:
                    42:71:03:eb:69:f1:a9:2d:23:ed:e2:33:a9:3f:fd:
                    24:88:2a:4d:b4:aa:92:94:ff:d2:f7:f7:e1:59:85:
                    73:51:74:ef:02:f1:20:9e:8f:e0:1e:00:c4:cb:14:
                    75:65:ba:8a:8f:42:d3:11:4a:60:24:19:15:20:29:
                    31:bf:86:3b:bf:8e:c5:a5:58:8e:99:ff:ec:f3:2a:
                    03:28:03:b7:fe:38:95:aa:1c:3a:46:4e:27:14:1b:
                    4a:4b:93:89:95:d3:ef:b5:a0:f8:c5:03:20:3b:87:
                    13:81:9b:2e:19:89:82:b4:51:27:eb:01:72:90:46:
                    be:4a:1b:9e:c3:be:ad:63:bf:62:cd:e2:ee:d8:33:
                    24:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0F:AD:F0:40:FB:1D:15:22:AB:1E:56:B7:83:42:3B:B9:FD:47:54
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3137322e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:89:88:4b:d2:a2:8a:53:d5:67:d6:dd:8a:c0:3c:f5:2e:3b:
         9a:f3:b2:98:59:25:28:62:2b:9c:e7:60:98:d4:b3:a7:0d:e6:
         f8:72:99:db:db:d2:e2:71:0e:53:cd:a0:75:ed:88:d2:36:8f:
         25:5d:ce:ee:f1:b0:91:ab:c4:4b:3f:97:41:fb:32:fe:92:d0:
         77:0f:c0:36:02:7d:da:44:26:d4:4a:d0:73:6a:e1:ef:07:e0:
         d0:4f:8d:49:09:6c:b7:0e:81:27:b6:91:da:9c:ed:04:96:fc:
         ec:7a:e8:8d:7e:d6:b8:03:d0:79:8c:90:47:ca:d2:dd:08:c4:
         7b:e9:eb:d4:83:3e:2d:e8:73:46:dc:51:8f:d9:a2:11:da:37:
         4d:8f:67:25:f3:84:e3:78:8b:e1:d9:a0:3a:b1:fb:cd:50:60:
         c8:28:6b:0c:1c:4e:23:a8:b6:13:fd:56:fb:43:29:9a:4d:02:
         8f:5d:aa:ca:4b:b1:33:9a:97:b2:93:f2:f3:60:e1:6f:40:1a:
         88:48:ef:03:b3:4b:c0:05:94:f5:d4:96:12:76:db:f2:10:f7:
         89:15:c0:be:cc:a7:03:bd:9e:6d:c8:9e:ce:c8:26:c7:d6:09:
         b2:2b:cf:f8:4a:66:f9:74:39:80:24:d5:b8:77:b4:3e:cd:32:
         b2:02:98:04
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUB54pK2Psu4QCMpFJ0w4LRICGddAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDA1MjEwMzUwMDJaFw0yNTA1MjAwMzU1MDJaMDMxMTAvBgNV
BAMTKEQ0MEZBREYwNDBGQjFEMTUyMkFCMUU1NkI3ODM0MjNCQjlGRDQ3NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7qG6QhuBDrFlV/XFPEXV23kB
1/oaFfiECF6jitMhDr7y97Smmd7HbAqVyFd9ByvSr49N9DLsseFDXU/ayY4K6fik
TP98k0qnNh3yGx51wwRtRvhFeUCg8kU2i5KFNl+9VrhfRGaWlFg1dmZZdKnvVw0A
632bhEJxA+tp8aktI+3iM6k//SSIKk20qpKU/9L39+FZhXNRdO8C8SCej+AeAMTL
FHVluoqPQtMRSmAkGRUgKTG/hju/jsWlWI6Z/+zzKgMoA7f+OJWqHDpGTicUG0pL
k4mV0++1oPjFAyA7hxOBmy4ZiYK0USfrAXKQRr5KG57Dvq1jv2LN4u7YMyTDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1A+t8ED7HRUiqx5Wt4NCO7n9R1QwHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5NzI3N0Q1Mzk2QjYzMTc0REIw
QzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzMyMzAzMDJlMzUzMjJlMzEzNzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyDSs
MA0GCSqGSIb3DQEBCwUAA4IBAQChiYhL0qKKU9Vn1t2KwDz1Ljua87KYWSUoYiuc
52CY1LOnDeb4cpnb29LicQ5TzaB17YjSNo8lXc7u8bCRq8RLP5dB+zL+ktB3D8A2
An3aRCbUStBzauHvB+DQT41JCWy3DoEntpHanO0ElvzseuiNfta4A9B5jJBHytLd
CMR76evUgz4t6HNG3FGP2aIR2jdNj2cl84TjeIvh2aA6sfvNUGDIKGsMHE4jqLYT
/Vb7QymaTQKPXarKS7Ezmpeyk/LzYOFvQBqISO8Ds0vABZT11JYSdtvyEPeJFcC+
zKcDvZ5tyJ7OyCbH1gmyK8/4Smb5dDmAJNW4d7Q+zTKyApgE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org