Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3231302e302f32342d3234203d3e20323632393136.roa
File:                     3230302e39322e3231302e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          JK1fX3mQ5Sziak6OvUJSP23sk/+P7JCjTBHEM8Sl46o=
Subject key identifier:   58:99:2C:B9:E6:73:4C:8C:1C:CC:9F:15:9F:E4:B2:D8:3D:B2:97:C5
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       252AB05C4393DD088DA2351854B84E4FDCFF5079
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3231302e302f32342d3234203d3e20323632393136.roa
Signing time:             Thu 23 May 2024 04:30:00 +0000
ROA not before:           Thu 23 May 2024 04:25:00 +0000
ROA not after:            Thu 22 May 2025 04:30:00 +0000
asID:                     262916
IP address blocks:        200.92.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2a:b0:5c:43:93:dd:08:8d:a2:35:18:54:b8:4e:4f:dc:ff:50:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:00 2024 GMT
            Not After : May 22 04:30:00 2025 GMT
        Subject: CN=58992CB9E6734C8C1CCC9F159FE4B2D83DB297C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:aa:2f:bf:42:a8:48:fc:e3:23:ca:f7:41:
                    57:07:dc:9b:07:05:a7:12:b2:7e:85:cd:af:73:3d:
                    43:f8:75:ad:47:f0:02:c6:d1:b6:22:79:76:f8:77:
                    c6:ac:80:14:86:bb:9c:54:34:c0:50:92:54:8b:69:
                    6a:56:8d:05:e9:1b:fc:eb:52:d2:36:37:ae:d6:b6:
                    b4:3d:3b:21:a3:bf:e0:73:a9:b5:a3:51:6a:a6:16:
                    63:cb:59:47:4e:4e:e2:ca:7c:75:24:2e:1b:cf:9e:
                    f5:c8:f2:15:87:ec:e1:4a:6f:ed:93:bf:8d:6a:4c:
                    03:f0:f5:01:b8:a1:49:e5:0a:c6:ae:e5:9b:40:1b:
                    1f:32:fc:4d:1e:ae:e9:51:d1:06:d4:a1:d5:43:a3:
                    05:ca:12:f6:37:6e:e3:33:3a:de:cb:5a:c2:ec:f5:
                    5f:d1:70:e5:0e:68:f1:d3:27:08:ba:7c:fd:72:6a:
                    53:b1:7d:85:10:72:67:ad:af:79:77:e8:5c:dc:1e:
                    2e:cf:6c:eb:c8:d6:49:11:f5:1a:9a:bc:1c:f2:5e:
                    72:19:2e:c7:2c:e9:55:46:4d:22:98:da:1d:be:a8:
                    9e:06:8b:5b:d1:2e:c5:67:06:c8:ed:88:fa:88:e2:
                    2d:e1:40:67:9c:b0:d2:e2:45:e6:57:55:8e:4f:15:
                    cd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:99:2C:B9:E6:73:4C:8C:1C:CC:9F:15:9F:E4:B2:D8:3D:B2:97:C5
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3231302e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c5:1a:d6:4a:17:ae:da:0d:bb:19:22:19:df:be:15:3d:48:
         5a:d6:d3:ab:a8:01:57:55:6e:80:1c:33:6c:0d:3d:7d:99:2f:
         40:8b:c5:0e:20:32:40:f1:6b:7d:db:83:56:8c:1c:87:09:89:
         88:59:1d:34:c1:79:e8:64:0c:ca:79:1f:d0:24:20:a7:c9:8a:
         50:26:f8:4a:93:0e:c6:e1:ed:e4:06:f8:b7:6c:e7:72:06:1a:
         3d:07:1c:e2:b3:47:5b:10:c5:b3:14:c0:6f:de:06:d1:bc:ce:
         3a:14:f8:52:b0:b1:99:d7:06:24:0c:95:24:a0:2c:5e:2c:25:
         f4:bb:62:f9:20:d2:15:1d:d8:86:e3:4d:42:5d:eb:a9:05:3e:
         a5:8f:6d:0d:e5:02:f5:80:8e:be:60:ad:70:c6:5f:44:8c:ba:
         a4:72:40:57:c7:80:db:bc:61:1a:c9:53:65:af:0f:7a:c1:8b:
         ec:9d:83:ed:41:e5:b3:1c:f1:cc:90:54:ac:10:35:55:8c:49:
         4e:19:5f:5b:23:45:ba:2a:a7:8d:f9:fe:69:eb:34:47:f5:6d:
         71:48:ff:2e:06:cc:2b:96:b5:6f:d2:cb:2a:7e:6c:49:79:1d:
         7e:3b:73:8c:e0:54:f2:90:b8:1e:96:6a:f3:82:49:94:72:c7:
         5d:16:b5:38
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJSqwXEOT3QiNojUYVLhOT9z/UHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDA1MjMwNDI1MDBaFw0yNTA1MjIwNDMwMDBaMDMxMTAvBgNV
BAMTKDU4OTkyQ0I5RTY3MzRDOEMxQ0NDOUYxNTlGRTRCMkQ4M0RCMjk3QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBuqovv0KoSPzjI8r3QVcH3JsH
BacSsn6Fza9zPUP4da1H8ALG0bYieXb4d8asgBSGu5xUNMBQklSLaWpWjQXpG/zr
UtI2N67WtrQ9OyGjv+BzqbWjUWqmFmPLWUdOTuLKfHUkLhvPnvXI8hWH7OFKb+2T
v41qTAPw9QG4oUnlCsau5ZtAGx8y/E0erulR0QbUodVDowXKEvY3buMzOt7LWsLs
9V/RcOUOaPHTJwi6fP1yalOxfYUQcmetr3l36FzcHi7PbOvI1kkR9RqavBzyXnIZ
Lscs6VVGTSKY2h2+qJ4Gi1vRLsVnBsjtiPqI4i3hQGecsNLiReZXVY5PFc3lAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUWJksueZzTIwczJ8Vn+Sy2D2yl8UwHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5NzI3N0Q1Mzk2QjYzMTc0REIw
QzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzMyMzAzMDJlMzkzMjJlMzIzMTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyFzS
MA0GCSqGSIb3DQEBCwUAA4IBAQAIxRrWSheu2g27GSIZ374VPUha1tOrqAFXVW6A
HDNsDT19mS9Ai8UOIDJA8Wt924NWjByHCYmIWR00wXnoZAzKeR/QJCCnyYpQJvhK
kw7G4e3kBvi3bOdyBho9Bxzis0dbEMWzFMBv3gbRvM46FPhSsLGZ1wYkDJUkoCxe
LCX0u2L5INIVHdiG401CXeupBT6lj20N5QL1gI6+YK1wxl9EjLqkckBXx4DbvGEa
yVNlrw96wYvsnYPtQeWzHPHMkFSsEDVVjElOGV9bI0W6KqeN+f5p6zRH9W1xSP8u
BswrlrVv0ssqfmxJeR1+O3OM4FTykLgelmrzgkmUcsddFrU4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org