Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3135322e302f32342d3234203d3e20323632393136.roa
File:                     3230302e39322e3135322e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          32d73aIa7kJhPBHMjf3NPamp6CACd9Aas5KGQ1uMFP0=
Subject key identifier:   7F:F4:BC:9A:74:46:54:33:70:AC:7F:95:C2:45:63:0D:A0:2C:77:48
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       3C3974043DBF65C02285BF52DCE925993BAF55B5
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3135322e302f32342d3234203d3e20323632393136.roa
Signing time:             Thu 23 May 2024 04:30:13 +0000
ROA not before:           Thu 23 May 2024 04:25:13 +0000
ROA not after:            Thu 22 May 2025 04:30:13 +0000
asID:                     262916
IP address blocks:        200.92.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:39:74:04:3d:bf:65:c0:22:85:bf:52:dc:e9:25:99:3b:af:55:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:13 2024 GMT
            Not After : May 22 04:30:13 2025 GMT
        Subject: CN=7FF4BC9A7446543370AC7F95C245630DA02C7748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:40:e4:e2:09:d3:d5:16:31:83:2c:23:1f:a8:
                    0e:78:d5:7b:d3:f9:71:3e:6e:29:ba:54:39:12:1e:
                    7f:77:d9:e7:9e:58:e6:0d:44:10:3a:73:0d:da:b2:
                    12:d5:82:f2:38:ca:2a:90:0f:3e:9b:82:10:46:30:
                    13:a1:6e:b0:6e:c0:69:86:b4:a2:84:47:b2:0b:af:
                    7b:a1:a0:83:41:73:47:84:e5:e8:2b:97:74:3b:78:
                    cf:a3:02:8d:d2:59:5f:7e:d4:f4:5a:b3:96:d2:57:
                    58:13:43:bd:1b:7c:79:9b:24:ad:6b:02:a3:56:41:
                    6a:88:d0:5b:65:5e:fe:e0:9b:3c:9d:07:04:05:2f:
                    1c:2d:6f:f8:1d:0e:86:7a:0d:9a:10:dc:9f:a6:08:
                    cf:d4:f1:00:28:90:49:90:f9:68:1c:34:4b:95:92:
                    64:19:6d:a7:0c:09:d1:c9:44:49:92:dd:88:e0:de:
                    5c:c3:ed:88:98:9a:be:d0:c9:5a:dd:28:0d:eb:d0:
                    dd:38:b1:fc:d6:4f:f7:e2:0a:41:77:ef:2b:1c:31:
                    88:d3:c5:02:ed:bb:eb:1e:70:3f:c2:8c:03:fc:ab:
                    1d:44:7c:53:24:76:9f:c6:ed:e9:e4:e1:83:1b:34:
                    f6:2a:27:64:6d:e6:1c:db:3e:eb:fe:51:c4:d9:ec:
                    7f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F4:BC:9A:74:46:54:33:70:AC:7F:95:C2:45:63:0D:A0:2C:77:48
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3135322e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:8f:2c:48:f1:51:4c:20:ea:82:77:c4:55:f9:62:62:d8:23:
         f2:6a:19:60:c4:e3:97:a0:8e:db:0a:68:04:ea:3c:0b:81:86:
         8b:36:4a:0b:a5:d1:d4:bb:df:ae:17:10:c2:45:f9:0d:a8:54:
         ee:c7:51:82:e1:8e:14:9a:a2:e2:f0:1b:15:b3:56:dd:af:d7:
         d8:a1:e2:07:ff:b9:ec:ec:e3:34:4c:22:37:5b:c5:70:84:ee:
         33:96:83:43:e6:42:0a:23:26:d1:fc:ff:a9:b4:de:f3:e5:22:
         b5:1c:5d:b4:b5:bf:07:ec:f0:c2:3a:18:6c:88:de:6b:8d:e4:
         6a:d5:97:90:8c:82:f6:3e:71:1f:e2:c6:3d:b5:e5:ac:2d:a1:
         92:c8:c2:35:47:93:e3:72:fa:ab:1d:a8:0b:45:84:ae:c3:f1:
         d5:e7:ce:e1:c9:aa:03:49:a6:d5:90:fc:74:74:a0:9c:bc:0d:
         0d:47:37:66:fb:f7:30:92:77:0f:3f:b8:b7:cf:88:a4:4e:b3:
         dc:91:af:10:3b:6b:f9:0f:37:01:bf:34:65:d9:52:2c:70:7e:
         09:67:77:0e:fe:e5:b8:4b:97:5b:e9:90:9b:cc:11:1e:0d:76:
         5a:63:91:b3:74:e3:d0:8b:3d:ac:40:ff:41:b2:2e:dc:35:52:
         e8:e9:29:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org