Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e342e302f32342d3234203d3e203230303135.roa
File:                     3231362e3234312e342e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          fhBIh4W2EooUMT1y5WbTYTb8PFInxGUBAilYWfV4U7U=
Subject key identifier:   F1:A4:14:D7:E1:66:1B:E8:60:B2:DB:0D:1F:20:9E:B2:8F:B8:E5:4D
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       42BBE3D97A1E8B2F90EE5E799CFBF5DC190F626D
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e342e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 05 Mar 2024 17:58:57 +0000
ROA not before:           Tue 05 Mar 2024 17:53:57 +0000
ROA not after:            Tue 04 Mar 2025 17:58:57 +0000
asID:                     20015
IP address blocks:        216.241.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 16:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bb:e3:d9:7a:1e:8b:2f:90:ee:5e:79:9c:fb:f5:dc:19:0f:62:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:53:57 2024 GMT
            Not After : Mar  4 17:58:57 2025 GMT
        Subject: CN=F1A414D7E1661BE860B2DB0D1F209EB28FB8E54D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:49:b1:b4:b9:60:22:89:e8:1e:fc:cc:eb:
                    a0:e6:c3:db:71:1d:31:ad:d4:b0:0d:5a:2d:26:52:
                    fa:1c:21:fc:9b:01:47:0c:c1:23:22:62:dd:8c:1d:
                    3d:59:30:f8:dc:66:dd:24:c2:53:66:96:43:da:9b:
                    8e:b8:78:1e:29:55:8e:26:05:aa:ee:24:3b:b0:30:
                    33:d4:61:54:d4:d2:c8:e0:25:33:d9:a1:1b:16:23:
                    c5:34:35:7a:4a:2d:4d:ee:ed:1e:f6:f9:2e:48:29:
                    40:49:58:27:89:b3:b3:97:ff:4e:8f:fb:65:0d:79:
                    8f:c5:4d:f8:cc:42:c4:08:1a:e3:d3:32:81:84:13:
                    be:47:03:a8:12:d0:6a:1d:9a:02:0b:ca:dc:33:16:
                    3f:45:3f:1e:ec:7a:80:00:37:50:80:7b:b4:b3:0c:
                    ef:b7:0f:74:6c:ee:86:27:c2:c9:bc:9a:15:d4:fc:
                    55:5e:5f:d3:82:04:93:38:20:e8:66:69:4c:dd:43:
                    4c:60:47:9a:a9:97:c5:8e:0d:e6:0c:29:39:44:25:
                    d5:f5:58:1e:1f:49:19:1b:73:c0:01:5f:59:a2:e7:
                    6e:01:8e:e3:44:e5:81:af:b1:cc:ba:8c:26:a7:9e:
                    63:0c:bd:8a:70:9b:8f:70:e8:14:e7:da:74:75:33:
                    b1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A4:14:D7:E1:66:1B:E8:60:B2:DB:0D:1F:20:9E:B2:8F:B8:E5:4D
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e342e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.241.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:78:5f:be:7d:ce:d2:05:ff:e0:44:62:3e:1d:2a:62:cf:33:
         c9:37:88:83:06:9d:b6:26:4f:4e:3b:19:43:5a:64:ee:05:8f:
         73:88:b8:21:c8:5d:6d:62:1d:c1:fe:f6:17:2b:af:8e:12:ad:
         98:cb:12:9c:7b:36:6e:82:5d:86:0d:dd:7e:29:d3:69:83:fb:
         e8:e4:e5:cc:66:db:9b:b2:9f:46:e9:37:0f:c9:fa:8b:0d:ab:
         58:27:fe:4d:b3:2f:ed:c7:4e:bb:da:8d:94:ad:69:91:60:2e:
         15:76:f8:2e:53:65:ef:8a:27:50:8b:7d:57:a7:8c:d8:ff:ec:
         4c:0f:d7:40:46:db:7a:09:d1:ea:43:ad:fb:ac:26:67:f6:71:
         69:98:dc:12:27:b2:76:82:28:90:6c:c0:3f:89:ea:5e:fb:ee:
         10:f2:38:54:76:32:bc:3e:6c:7f:67:24:1a:e4:ca:ec:21:2c:
         a1:72:01:b0:5a:07:88:3e:7c:48:b3:e7:fc:b2:ba:e0:32:82:
         f3:22:6c:1d:e4:08:f6:f3:9c:7a:b5:45:1c:00:64:e7:3b:62:
         1f:29:3b:20:f0:88:76:e9:c0:30:90:af:47:1e:52:21:52:17:
         2c:56:e5:3a:d8:17:21:e0:fd:16:ef:b1:df:ee:aa:6a:f2:3d:
         23:fa:82:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org