Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e36362e33322e302f32302d3234203d3e203133393939.roa
File:                     3230302e36362e33322e302f32302d3234203d3e203133393939.roa (raw, json)
Hash identifier:          NQz6awL85Z/ToP2OvwfH04xEJZhFOAoShMNjkaKdZ0A=
Subject key identifier:   4B:06:1C:14:A5:1B:64:58:D2:2F:83:0C:B8:E6:79:03:08:A3:A7:5E
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       28AC0F66E4732AEC627D542537B0FF4E1E5D84BF
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e36362e33322e302f32302d3234203d3e203133393939.roa
Signing time:             Tue 21 May 2024 03:55:03 +0000
ROA not before:           Tue 21 May 2024 03:50:03 +0000
ROA not after:            Tue 20 May 2025 03:55:03 +0000
asID:                     13999
IP address blocks:        200.66.32.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ac:0f:66:e4:73:2a:ec:62:7d:54:25:37:b0:ff:4e:1e:5d:84:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 21 03:50:03 2024 GMT
            Not After : May 20 03:55:03 2025 GMT
        Subject: CN=4B061C14A51B6458D22F830CB8E6790308A3A75E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4d:24:26:9d:7d:b8:ae:bc:7d:ad:7f:85:48:
                    83:56:a1:28:bf:a3:c1:fa:b6:79:a7:5c:f0:1e:b8:
                    14:c5:7e:53:70:9a:19:bc:85:2d:34:85:6a:59:90:
                    58:31:38:e9:dc:d1:82:8f:7a:ee:c0:13:10:2e:df:
                    86:7a:d6:e4:e6:fd:37:07:e6:43:7a:38:41:3d:68:
                    33:a1:d1:cd:87:31:ab:ff:cf:8a:41:3d:8a:16:f7:
                    8c:42:52:bb:49:48:f0:ff:5b:69:54:ac:21:8e:6e:
                    fc:8e:65:1e:1e:ec:87:7a:93:0e:c4:34:ee:04:89:
                    86:82:df:62:0d:e5:57:4c:27:80:d1:d4:05:a6:3c:
                    bf:84:12:73:d9:a9:02:07:6c:4c:a0:61:42:2c:1e:
                    78:79:d5:45:1f:6c:bf:f2:95:c9:e3:b1:ec:39:b4:
                    8c:4b:e2:ad:d1:a3:6a:08:1c:ae:be:1f:38:75:3a:
                    3b:e7:69:06:36:a4:79:a6:8d:81:9e:6e:64:a7:77:
                    88:fd:1b:a3:14:10:27:8e:31:d7:ce:cd:c9:60:5a:
                    56:ff:de:42:6e:93:2f:bd:2b:d4:ce:68:54:23:dc:
                    f3:f4:c3:e8:95:f9:cf:6d:fd:63:0d:30:fa:b1:89:
                    ab:49:c3:49:6e:c5:45:c9:b3:96:df:01:33:be:7a:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:06:1C:14:A5:1B:64:58:D2:2F:83:0C:B8:E6:79:03:08:A3:A7:5E
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e36362e33322e302f32302d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.66.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:09:f1:b0:c9:05:de:07:94:6b:10:7d:24:11:66:24:1f:df:
         93:af:63:36:fe:8b:b8:83:75:2b:f0:16:17:54:51:32:a4:73:
         8e:d0:88:64:dd:8e:8c:9a:8d:3d:02:77:bc:22:37:6b:a9:68:
         17:a0:dc:50:06:4d:95:58:34:27:f6:74:27:8a:e9:6c:d5:ee:
         12:08:a8:d3:bb:cb:1a:fa:f6:68:87:8b:30:f2:52:7f:67:c5:
         91:d2:17:5a:5a:49:61:9f:8b:09:44:12:29:65:bd:5d:61:fe:
         1b:fa:54:d9:0d:42:41:ff:d8:f9:c1:6e:26:37:b6:df:3a:1d:
         0e:b4:60:a5:19:6b:d3:e2:b0:63:23:c8:fb:15:05:bc:c5:ec:
         07:f6:0a:86:43:16:ef:9a:a7:78:d3:c7:82:df:69:0b:4f:41:
         85:ea:b3:4d:d4:9d:1e:c1:a4:c0:9b:65:0e:f2:7f:d9:d3:a3:
         87:88:e3:e6:0d:07:5a:54:85:62:ed:9d:5b:03:39:ca:5b:fd:
         56:63:01:52:23:0a:cb:0a:3e:18:35:db:0a:43:65:b2:73:e1:
         98:b9:08:8c:8b:c3:a9:00:0d:59:73:ac:17:7a:4e:2a:14:96:
         a8:9a:e6:d6:a0:7b:af:7d:50:c3:f6:10:10:ca:e0:9f:44:a9:
         25:8b:ae:25
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUKKwPZuRzKuxifVQlN7D/Th5dhL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDA1MjEwMzUwMDNaFw0yNTA1MjAwMzU1MDNaMDMxMTAvBgNV
BAMTKDRCMDYxQzE0QTUxQjY0NThEMjJGODMwQ0I4RTY3OTAzMDhBM0E3NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaTSQmnX24rrx9rX+FSINWoSi/
o8H6tnmnXPAeuBTFflNwmhm8hS00hWpZkFgxOOnc0YKPeu7AExAu34Z61uTm/TcH
5kN6OEE9aDOh0c2HMav/z4pBPYoW94xCUrtJSPD/W2lUrCGObvyOZR4e7Id6kw7E
NO4EiYaC32IN5VdMJ4DR1AWmPL+EEnPZqQIHbEygYUIsHnh51UUfbL/ylcnjsew5
tIxL4q3Ro2oIHK6+Hzh1OjvnaQY2pHmmjYGebmSnd4j9G6MUECeOMdfOzclgWlb/
3kJuky+9K9TOaFQj3PP0w+iV+c9t/WMNMPqxiatJw0luxUXJs5bfATO+esetAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUSwYcFKUbZFjSL4MMuOZ5Awijp14wHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5NzI3N0Q1Mzk2QjYzMTc0REIw
QzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzMyMzAzMDJlMzYzNjJlMzMzMjJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzMzOTM5Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATIQiAwDQYJ
KoZIhvcNAQELBQADggEBAE8J8bDJBd4HlGsQfSQRZiQf35OvYzb+i7iDdSvwFhdU
UTKkc47QiGTdjoyajT0Cd7wiN2upaBeg3FAGTZVYNCf2dCeK6WzV7hIIqNO7yxr6
9miHizDyUn9nxZHSF1paSWGfiwlEEillvV1h/hv6VNkNQkH/2PnBbiY3tt86HQ60
YKUZa9PisGMjyPsVBbzF7Af2CoZDFu+ap3jTx4LfaQtPQYXqs03UnR7BpMCbZQ7y
f9nTo4eI4+YNB1pUhWLtnVsDOcpb/VZjAVIjCssKPhg12wpDZbJz4Zi5CIyLw6kA
DVlzrBd6TioUlqia5tage699UMP2EBDK4J9EqSWLriU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org