Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3233392e302f32342d3234203d3e20323633323233.roa
File:                     3230312e3233342e3233392e302f32342d3234203d3e20323633323233.roa (raw, json)
Hash identifier:          Xa8o+EPt5nZvBlG8VSJEh/qQQ65YPrZ/8m1+PS3ylbw=
Subject key identifier:   4E:54:50:30:9A:5E:6B:E4:3A:E7:32:17:19:65:23:40:18:72:AD:C5
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       0F993E430BEE975B4B0C3426177780A04D3DBE5A
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3233392e302f32342d3234203d3e20323633323233.roa
Signing time:             Tue 05 Mar 2024 18:00:51 +0000
ROA not before:           Tue 05 Mar 2024 17:55:51 +0000
ROA not after:            Tue 04 Mar 2025 18:00:51 +0000
asID:                     263223
IP address blocks:        201.234.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 20:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:99:3e:43:0b:ee:97:5b:4b:0c:34:26:17:77:80:a0:4d:3d:be:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:51 2024 GMT
            Not After : Mar  4 18:00:51 2025 GMT
        Subject: CN=4E5450309A5E6BE43AE73217196523401872ADC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d9:e0:85:4c:5d:0c:92:de:2e:6a:03:8a:00:
                    3b:00:80:86:1a:b2:ce:f7:3b:db:53:5d:b6:be:ee:
                    9c:29:cb:fe:34:70:d0:d0:d8:ae:31:95:e0:62:a4:
                    53:11:17:7c:84:86:ad:30:ee:29:c2:6f:79:43:f8:
                    ea:34:d4:49:3e:6c:85:5c:5b:f7:a9:a5:8b:e9:72:
                    bb:aa:e4:5d:d8:80:e4:f8:b2:2a:fd:48:e8:f3:9c:
                    9b:94:87:8e:16:6a:3e:7d:4d:9c:01:6f:d2:28:bd:
                    dc:af:fd:0e:71:51:6d:e2:90:ab:35:b4:a3:7e:cd:
                    fd:08:d6:fe:09:c1:0a:3f:40:a5:f4:c7:89:1e:00:
                    70:a0:14:ad:61:57:65:01:da:23:ac:68:91:2a:1f:
                    37:e4:2c:26:0b:51:d0:c1:b5:bb:71:10:8a:8f:cd:
                    b6:de:3c:a5:4c:78:55:ad:d1:0e:44:5f:8b:81:2f:
                    f7:18:21:d8:df:86:60:8e:90:b1:8c:10:b5:d7:37:
                    96:eb:4b:3f:78:60:e0:8e:91:58:3b:90:7d:18:c9:
                    bf:c4:d0:ab:a0:82:8f:28:a7:fa:c7:b0:2c:76:9b:
                    88:f8:c8:ee:69:39:46:2b:8a:32:2d:eb:7b:34:49:
                    a6:ce:91:d3:e6:fc:83:1f:ca:48:c7:f9:49:32:8a:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:54:50:30:9A:5E:6B:E4:3A:E7:32:17:19:65:23:40:18:72:AD:C5
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3233392e302f32342d3234203d3e20323633323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:e3:6c:e7:b5:8f:ba:3a:d4:f5:d0:00:e6:a2:b7:c1:68:ec:
         d8:8c:b7:e5:d7:4a:09:52:8e:89:a0:f8:f4:09:d2:43:d4:32:
         41:c1:f4:80:a7:cc:f3:28:c7:73:e8:05:37:b9:35:1e:4b:49:
         3a:a5:63:3e:50:76:03:6a:92:9a:7d:de:6b:f2:17:20:5a:24:
         9f:f5:07:54:b9:bd:64:e3:1f:b5:1b:63:58:74:fb:7c:91:62:
         60:dc:d8:6c:92:be:4e:db:53:83:cf:88:e0:76:24:39:72:27:
         f6:98:73:51:33:81:f2:82:c8:2d:3f:b8:8c:44:a4:f0:24:13:
         dd:27:3b:33:9a:5d:23:ee:eb:a3:c0:47:61:58:d4:ae:ff:2a:
         b4:9c:59:05:4d:21:0a:b1:5b:19:e7:73:8a:31:65:e6:10:f4:
         96:d6:a5:05:57:69:2b:d4:9a:31:eb:6a:cc:cb:81:3b:69:7e:
         6b:db:8c:20:ad:be:81:ce:b8:5f:1c:af:39:80:04:54:9a:58:
         00:ef:1c:ef:a6:61:d0:17:ee:51:e4:05:f7:e8:a5:2e:0f:f3:
         8a:d7:df:d8:ae:71:02:6d:e9:b3:6e:6a:d3:39:1b:10:5e:b9:
         eb:43:a6:3c:b6:dc:f3:89:99:be:ff:db:d4:e8:5e:cb:cb:47:
         94:a9:98:32
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUD5k+Qwvul1tLDDQmF3eAoE09vlowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNDAzMDUxNzU1NTFaFw0yNTAzMDQxODAwNTFaMDMxMTAvBgNV
BAMTKDRFNTQ1MDMwOUE1RTZCRTQzQUU3MzIxNzE5NjUyMzQwMTg3MkFEQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi2eCFTF0Mkt4uagOKADsAgIYa
ss73O9tTXba+7pwpy/40cNDQ2K4xleBipFMRF3yEhq0w7inCb3lD+Oo01Ek+bIVc
W/eppYvpcruq5F3YgOT4sir9SOjznJuUh44Waj59TZwBb9Iovdyv/Q5xUW3ikKs1
tKN+zf0I1v4JwQo/QKX0x4keAHCgFK1hV2UB2iOsaJEqHzfkLCYLUdDBtbtxEIqP
zbbePKVMeFWt0Q5EX4uBL/cYIdjfhmCOkLGMELXXN5brSz94YOCOkVg7kH0Yyb/E
0Kuggo8op/rHsCx2m4j4yO5pOUYrijIt63s0SabOkdPm/IMfykjH+Ukyihk3AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUTlRQMJpea+Q65zIXGWUjQBhyrcUwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMTJlMzIzMzM0MmUzMjMzMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzMjMyMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADJ
6u8wDQYJKoZIhvcNAQELBQADggEBAKzjbOe1j7o61PXQAOait8Fo7NiMt+XXSglS
jomg+PQJ0kPUMkHB9ICnzPMox3PoBTe5NR5LSTqlYz5QdgNqkpp93mvyFyBaJJ/1
B1S5vWTjH7UbY1h0+3yRYmDc2GySvk7bU4PPiOB2JDlyJ/aYc1EzgfKCyC0/uIxE
pPAkE90nOzOaXSPu66PAR2FY1K7/KrScWQVNIQqxWxnnc4oxZeYQ9JbWpQVXaSvU
mjHraszLgTtpfmvbjCCtvoHOuF8crzmABFSaWADvHO+mYdAX7lHkBffopS4P84rX
39iucQJt6bNuatM5GxBeuetDpjy23POJmb7/29ToXsvLR5SpmDI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org