Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230322e302f32332d3233203d3e20323636373731.roa
File:                     3136302e31392e3230322e302f32332d3233203d3e20323636373731.roa (raw, json)
Hash identifier:          cu5aiEkRuR6vvo0x986ERE71rt1sOy134l9Ypphv/2s=
Subject key identifier:   AE:12:2B:97:C8:25:A1:66:93:48:C8:A1:22:1B:19:F1:84:95:D5:10
Certificate issuer:       /CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
Certificate serial:       74C0420540B37724C947BA64198A03AD33A18525
Authority key identifier: DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230322e302f32332d3233203d3e20323636373731.roa
Signing time:             Tue 05 Mar 2024 17:50:49 +0000
ROA not before:           Tue 05 Mar 2024 17:45:49 +0000
ROA not after:            Tue 04 Mar 2025 17:50:49 +0000
asID:                     266771
IP address blocks:        160.19.202.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 01:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c0:42:05:40:b3:77:24:c9:47:ba:64:19:8a:03:ad:33:a1:85:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
        Validity
            Not Before: Mar  5 17:45:49 2024 GMT
            Not After : Mar  4 17:50:49 2025 GMT
        Subject: CN=AE122B97C825A1669348C8A1221B19F18495D510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f5:41:3c:8a:09:92:7d:9d:25:4e:27:1a:77:
                    98:c0:21:5c:e3:1a:2a:92:30:8d:de:9e:2d:e6:dc:
                    13:1c:37:ca:3c:7b:64:e9:b6:79:93:c3:d8:7b:eb:
                    a4:2c:47:f4:e0:68:07:26:96:bf:cf:a5:1c:8e:a4:
                    f5:64:33:91:80:97:fc:f5:60:c5:9d:00:93:14:69:
                    45:15:13:b6:88:ad:dc:a9:09:7d:c1:3d:e5:82:bf:
                    1c:ca:e1:2c:a9:c8:e4:f4:c3:f4:c4:7b:c1:c0:01:
                    1c:5a:82:d9:f1:ed:85:0f:95:76:7a:1c:85:ec:4f:
                    8d:d8:6c:c3:34:14:08:ee:8c:3a:0d:d3:6e:a4:d9:
                    28:e9:40:c0:3d:8a:2a:fc:54:21:bb:5e:89:51:fe:
                    82:6c:79:c1:4d:5e:11:d7:21:a2:a1:b0:4f:29:c1:
                    0d:ac:1c:36:57:21:f1:7f:11:24:74:90:85:91:1e:
                    17:90:52:4d:09:6e:48:c6:d5:c2:b0:3a:f5:f6:00:
                    47:e1:c1:bf:2e:f2:62:60:f0:a6:40:d3:0c:7b:7a:
                    4d:16:d6:d0:b8:5c:2a:13:20:50:d7:d8:e0:dd:45:
                    f7:a7:0c:43:fa:a7:5c:92:5f:52:01:80:99:82:08:
                    28:c1:0e:ab:d4:db:6c:99:0f:e4:1c:7d:94:21:c2:
                    35:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:12:2B:97:C8:25:A1:66:93:48:C8:A1:22:1B:19:F1:84:95:D5:10
            X509v3 Authority Key Identifier:
                keyid:DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230322e302f32332d3233203d3e20323636373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:46:22:b3:8e:51:c8:b8:81:a5:37:ba:11:0b:1d:ca:b0:61:
         8d:96:7e:34:60:3c:54:74:f0:27:28:65:60:e9:dc:5e:53:53:
         2c:20:7d:be:33:91:38:9a:a1:2b:97:44:03:f3:19:0e:c4:4e:
         98:33:84:e1:b2:c1:48:a2:33:b4:0c:d8:85:c6:9f:49:f4:b9:
         d3:02:25:61:cd:57:b2:d8:bf:92:6b:e7:7a:30:4b:3f:e3:1d:
         85:82:7c:cf:15:aa:16:8d:04:15:f4:08:1e:2f:e0:1b:75:3c:
         33:11:82:b5:8a:1a:0e:45:51:21:ab:36:52:92:34:9c:e5:67:
         17:62:fb:be:1a:1b:4b:30:c8:a2:c6:fa:27:5e:69:bb:a0:23:
         d4:7c:96:18:95:8d:e0:81:4e:c5:71:5d:24:6f:18:6b:9b:2e:
         7c:ea:57:b3:05:61:a2:39:c2:61:1c:63:6a:05:05:a7:7f:af:
         d9:30:03:f1:0d:c7:d8:6f:a8:17:a6:09:61:23:83:6b:60:ed:
         aa:51:7f:d4:e3:54:90:d7:9a:d0:00:ef:14:1e:47:29:d8:d8:
         81:81:99:f5:60:da:a9:2a:a9:36:00:32:84:31:a6:f3:5c:a9:
         b7:83:e6:a0:79:3d:fe:31:b9:6a:eb:07:b4:5b:6d:ac:39:44:
         c2:66:54:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org