Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3132382e302f32342d3234203d3e203133393939.roa
File:                     3230302e39322e3132382e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          zK5K3PKPat7Zwr3FnkmHqrADrmxxbfMQ6ypOJOITzQM=
Subject key identifier:   B8:80:DE:26:DF:41:64:41:29:77:88:C8:07:3C:B8:43:33:F8:65:D8
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       3955661D6E774DFF34646D324D630CEB6D67DB5A
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3132382e302f32342d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:13 +0000
ROA not before:           Thu 23 May 2024 04:25:13 +0000
ROA not after:            Thu 22 May 2025 04:30:13 +0000
asID:                     13999
IP address blocks:        200.92.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:55:66:1d:6e:77:4d:ff:34:64:6d:32:4d:63:0c:eb:6d:67:db:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:13 2024 GMT
            Not After : May 22 04:30:13 2025 GMT
        Subject: CN=B880DE26DF416441297788C8073CB84333F865D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:a2:98:06:a7:22:2b:94:3c:90:79:43:77:
                    76:90:eb:d6:f9:34:32:aa:dc:8d:7d:c5:d2:1e:f3:
                    a7:71:e3:23:30:69:4d:d9:6b:c4:36:23:b8:87:76:
                    93:89:bc:97:1b:72:47:bf:9a:3e:06:d4:5b:33:c4:
                    7b:65:a1:bc:05:c4:6b:b4:a8:09:69:7d:bd:3d:85:
                    3b:e7:1b:88:dd:e3:f0:89:7e:e0:8e:e5:c6:d7:b1:
                    b7:58:a3:95:02:a5:d9:fa:7c:55:4b:03:dd:97:a7:
                    74:6c:ef:8d:1f:95:98:bd:4a:cd:5d:88:cd:fa:52:
                    cc:a1:da:9c:84:40:9b:42:bb:46:c5:7e:a6:4b:16:
                    54:5b:99:bf:3a:92:57:7c:2c:02:ec:ea:a8:a9:ed:
                    86:da:73:b7:c4:69:b0:f7:21:3b:58:10:5d:6e:e8:
                    d2:7d:b1:49:55:77:19:fb:b6:3c:81:15:5d:c4:a0:
                    97:9c:c1:e8:b1:d7:b0:02:aa:c9:2b:a3:49:5f:88:
                    d1:5c:28:3a:54:a5:7c:0e:ff:50:77:77:9b:53:68:
                    a1:b7:71:f9:da:03:a2:f8:bb:58:dd:b9:55:14:51:
                    7b:f1:0f:5a:eb:32:7b:c5:32:f0:50:93:4e:70:02:
                    17:7e:94:fa:31:c6:18:19:9e:f0:df:d3:5c:b4:4f:
                    a9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:80:DE:26:DF:41:64:41:29:77:88:C8:07:3C:B8:43:33:F8:65:D8
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3132382e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:23:62:1a:b6:36:5c:df:d7:f4:66:ac:82:9a:77:da:58:1a:
         b9:41:6f:1b:5d:90:0d:c8:be:91:fd:b9:b8:0c:dd:e2:59:88:
         73:d7:3a:0a:ae:ca:01:72:c8:92:f0:c0:18:e4:90:5b:16:5b:
         53:57:c5:53:7c:fc:5b:98:59:07:63:92:2c:53:8b:8a:d1:26:
         82:88:96:e5:73:e2:53:7c:e4:6a:22:2e:4f:29:24:c0:97:9f:
         f4:a3:58:d7:e2:21:69:a3:6f:61:db:fc:f2:f0:3c:9e:b6:a1:
         10:7e:63:44:03:7a:3f:71:22:46:7a:e1:5b:f5:0a:1f:8a:f9:
         1a:24:92:9a:59:5e:46:fa:21:7f:cf:2c:bc:4d:11:ed:b8:01:
         a4:e9:05:f5:37:fa:1c:42:36:18:af:ed:27:be:44:7b:a8:e0:
         77:b1:1b:56:00:b6:db:33:55:b6:61:c4:8c:6a:e3:02:1d:02:
         4d:e2:26:f9:60:77:06:db:65:b9:14:bd:2a:9e:12:b2:28:bf:
         4c:e8:e3:dd:67:16:b0:3b:c3:a4:5b:b0:2e:5f:5b:a0:1f:d6:
         c4:dd:8f:78:0f:49:dc:bf:82:7d:77:42:cb:15:86:19:b7:d6:
         5c:ad:37:30:1a:1f:20:d8:27:6d:e6:c2:03:9e:be:b8:33:c8:
         b9:97:9b:1c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOVVmHW53Tf80ZG0yTWMM621n21owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDA1MjMwNDI1MTNaFw0yNTA1MjIwNDMwMTNaMDMxMTAvBgNV
BAMTKEI4ODBERTI2REY0MTY0NDEyOTc3ODhDODA3M0NCODQzMzNGODY1RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpKKYBqciK5Q8kHlDd3aQ69b5
NDKq3I19xdIe86dx4yMwaU3Za8Q2I7iHdpOJvJcbcke/mj4G1FszxHtlobwFxGu0
qAlpfb09hTvnG4jd4/CJfuCO5cbXsbdYo5UCpdn6fFVLA92Xp3Rs740flZi9Ss1d
iM36Usyh2pyEQJtCu0bFfqZLFlRbmb86kld8LALs6qip7Ybac7fEabD3ITtYEF1u
6NJ9sUlVdxn7tjyBFV3EoJecweix17ACqskro0lfiNFcKDpUpXwO/1B3d5tTaKG3
cfnaA6L4u1jduVUUUXvxD1rrMnvFMvBQk05wAhd+lPoxxhgZnvDf01y0T6mlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUuIDeJt9BZEEpd4jIBzy4QzP4ZdgwHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5NzI3N0Q1Mzk2QjYzMTc0REIw
QzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzMyMzAzMDJlMzkzMjJlMzEzMjM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhcgDAN
BgkqhkiG9w0BAQsFAAOCAQEANyNiGrY2XN/X9Gasgpp32lgauUFvG12QDci+kf25
uAzd4lmIc9c6Cq7KAXLIkvDAGOSQWxZbU1fFU3z8W5hZB2OSLFOLitEmgoiW5XPi
U3zkaiIuTykkwJef9KNY1+IhaaNvYdv88vA8nrahEH5jRAN6P3EiRnrhW/UKH4r5
GiSSmlleRvohf88svE0R7bgBpOkF9Tf6HEI2GK/tJ75Ee6jgd7EbVgC22zNVtmHE
jGrjAh0CTeIm+WB3BttluRS9Kp4Ssii/TOjj3WcWsDvDpFuwLl9boB/WxN2PeA9J
3L+CfXdCyxWGGbfWXK03MBofINgnbebCA56+uDPIuZebHA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org