Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3230342e302f32332d3233203d3e20323632393136.roa
File:                     3230302e39322e3230342e302f32332d3233203d3e20323632393136.roa (raw, json)
Hash identifier:          oaezc8WMirPk8e3egV4kn4icyf8mIe90c3dUXHLEAFI=
Subject key identifier:   AC:D2:10:13:1D:E5:89:6A:53:E5:60:57:AE:4E:24:94:36:75:86:21
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       73A328F446868BA4430B4E13DB552A4D68B01934
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3230342e302f32332d3233203d3e20323632393136.roa
Signing time:             Thu 23 May 2024 04:30:04 +0000
ROA not before:           Thu 23 May 2024 04:25:04 +0000
ROA not after:            Thu 22 May 2025 04:30:04 +0000
asID:                     262916
IP address blocks:        200.92.204.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a3:28:f4:46:86:8b:a4:43:0b:4e:13:db:55:2a:4d:68:b0:19:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:04 2024 GMT
            Not After : May 22 04:30:04 2025 GMT
        Subject: CN=ACD210131DE5896A53E56057AE4E249436758621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:a2:87:73:cb:cc:db:42:19:83:d0:8c:29:
                    35:63:ea:f2:cd:37:7d:32:24:6a:96:6f:4e:64:83:
                    50:7a:18:ae:e4:61:61:be:86:8a:56:3c:43:e4:b2:
                    e3:1b:f2:45:01:fc:b5:3b:6d:d3:a6:3a:ee:ab:ac:
                    8a:55:f0:59:7d:b6:84:d3:5e:a3:38:95:45:5b:7a:
                    ec:4a:d2:77:6f:52:34:66:1c:9d:e6:00:60:34:7c:
                    e1:20:69:9f:50:e3:ef:2e:16:da:f7:c2:46:9a:f2:
                    40:bf:51:a0:5b:14:93:97:78:7f:0e:9b:54:45:9f:
                    37:06:9f:d6:bb:ac:55:24:ea:b1:27:5a:ef:b8:e8:
                    67:9b:71:bc:76:fe:58:99:3b:19:06:10:c8:5f:bf:
                    44:2d:be:72:af:ff:ad:aa:28:c4:53:79:1a:b7:ad:
                    7d:af:2b:13:e1:c8:2d:ca:d3:a6:a6:1e:05:5f:f5:
                    46:1a:59:d7:fa:ee:25:75:02:47:85:f7:c6:c2:a4:
                    6f:04:36:e2:b4:f6:7c:52:29:9c:a8:ac:ab:80:cd:
                    5f:86:fb:eb:ad:56:1a:c6:ea:7a:a5:d3:05:b4:a7:
                    e2:16:8e:4b:66:21:73:f3:6c:80:11:d3:45:4d:da:
                    21:f4:a1:f1:fc:3e:84:53:c7:1e:a4:18:36:9d:17:
                    0d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D2:10:13:1D:E5:89:6A:53:E5:60:57:AE:4E:24:94:36:75:86:21
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3230342e302f32332d3233203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:49:9f:67:6d:6b:09:dd:e0:bc:0e:34:8c:90:e4:6c:d9:85:
         6d:bd:bb:45:34:02:9b:8d:25:6b:5a:be:2c:59:c4:ff:d7:89:
         4c:0b:c8:b1:50:43:07:35:22:03:e5:5f:50:4f:8b:45:49:7a:
         d7:fa:81:80:04:5c:24:e5:5d:43:f7:9c:23:23:3a:0a:80:96:
         98:74:f4:08:e3:8d:60:29:7e:60:e3:b6:da:f3:96:5e:3a:59:
         aa:5c:a9:91:6a:e6:5c:4f:4a:1f:ca:d5:ec:ef:ca:01:67:c6:
         40:d4:6c:7b:72:10:dc:f4:cf:9a:f6:a1:77:92:1f:eb:83:d0:
         d0:22:4f:97:a9:8c:91:48:a8:52:27:f5:e4:98:64:ae:d4:23:
         41:96:7f:c8:09:71:1b:93:7b:81:15:2b:df:9d:16:4e:51:da:
         0f:e0:88:33:50:69:dc:19:a6:8c:9b:23:fe:0b:ef:86:37:28:
         8b:00:8f:c1:0e:27:1f:4f:3a:02:bd:60:d9:b1:a0:40:78:41:
         4c:c5:17:fa:bf:17:09:8c:3c:2b:a7:0c:e3:95:eb:e9:b9:a7:
         e7:bc:7a:6b:5b:20:6a:82:c4:91:a3:4d:c8:be:93:fb:d3:83:
         f2:8a:e6:59:58:d1:5c:a5:7b:c7:65:bc:62:f3:bf:ff:35:6e:
         33:80:e2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org