Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e36342e302f31382d3234203d3e203235363230.roa
File:                     3139322e3232332e36342e302f31382d3234203d3e203235363230.roa (raw, json)
Hash identifier:          orRDCfLMha98HUrZSfoMXe80a2SUBHDC1vLxECTpumo=
Subject key identifier:   60:BC:71:F3:27:29:B5:CF:49:84:DF:E7:FF:D9:24:F7:FD:B5:55:45
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       5DEE664A8F57D8274E7FE1D6C665FA39622041AE
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e36342e302f31382d3234203d3e203235363230.roa
Signing time:             Tue 05 Mar 2024 18:16:24 +0000
ROA not before:           Tue 05 Mar 2024 18:11:24 +0000
ROA not after:            Tue 04 Mar 2025 18:16:24 +0000
asID:                     25620
IP address blocks:        192.223.64.0/18 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 18:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ee:66:4a:8f:57:d8:27:4e:7f:e1:d6:c6:65:fa:39:62:20:41:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Mar  5 18:11:24 2024 GMT
            Not After : Mar  4 18:16:24 2025 GMT
        Subject: CN=60BC71F32729B5CF4984DFE7FFD924F7FDB55545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6a:6b:63:88:20:d5:d3:ac:62:97:7a:f9:e6:
                    27:0f:8f:72:95:d0:e3:de:a3:74:3c:b6:7b:54:93:
                    7d:57:a7:4f:27:8f:8b:05:60:f3:5b:10:b9:b7:28:
                    a0:bd:61:3a:72:01:66:38:04:8a:fe:39:ba:d8:49:
                    3e:65:8c:b7:cf:bf:be:6f:01:ed:6c:ce:dc:2e:7e:
                    52:15:09:3b:d1:ee:9f:e2:19:73:ca:d9:f5:14:f6:
                    ce:bc:a6:15:dc:75:21:1a:0f:62:43:b2:6c:b2:a0:
                    34:bf:71:b7:c9:b7:cd:58:9a:7c:a5:4d:08:f3:00:
                    ad:dc:46:b2:21:ad:6f:05:c2:66:fb:ed:a7:75:2c:
                    08:ad:41:8f:32:17:da:6d:0f:d6:e7:e4:c5:35:f1:
                    32:33:16:26:a0:8d:62:41:dd:31:6d:9c:c5:9c:17:
                    82:95:d5:a3:4c:e6:7d:c1:b4:3d:fe:fc:8c:b4:9b:
                    12:0e:5a:b4:e2:ee:bb:16:9a:1d:a6:9c:e6:e9:55:
                    cf:19:2b:03:14:35:a9:76:9d:0c:61:96:13:06:9b:
                    1f:24:59:df:91:60:e9:18:63:ef:0a:f8:fa:05:85:
                    35:4e:12:4d:2d:33:1b:3b:fa:06:1b:07:29:f2:67:
                    cf:83:5b:2c:cc:e7:91:66:cf:99:44:ad:77:e1:ac:
                    d2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BC:71:F3:27:29:B5:CF:49:84:DF:E7:FF:D9:24:F7:FD:B5:55:45
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e36342e302f31382d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9c:a8:b0:f8:09:56:f7:4a:1a:45:f4:14:f0:d6:3f:a8:e2:97:
         4b:a7:a0:fd:de:ec:33:12:39:55:7c:d0:3b:43:c2:4f:8e:64:
         ea:73:2f:fe:5d:71:b0:f4:16:ff:aa:09:3e:e4:1c:8d:d0:89:
         93:8b:a0:b7:56:31:50:89:ed:9a:11:a6:c6:4b:71:71:1c:a0:
         cc:bb:5d:73:87:b2:e7:e2:b5:14:ea:62:ef:48:cd:10:00:f4:
         de:d2:76:50:88:16:c4:80:6e:7b:28:0f:8a:70:ba:b3:48:64:
         0e:a7:22:c1:3c:c2:1a:be:2c:6e:d2:e5:0a:04:39:a2:b9:f7:
         90:fb:48:10:9d:f8:a6:f1:67:51:db:22:4f:f7:0b:f4:5c:88:
         4d:ea:aa:81:41:79:55:8c:ce:bb:79:1d:69:97:8a:c5:a2:c1:
         35:5a:73:ba:41:80:a5:dd:43:c2:07:97:20:11:c6:18:02:e5:
         77:bc:fe:f6:ab:a7:d0:82:38:ed:09:e3:db:9d:02:89:82:7e:
         c1:d1:28:66:2e:96:3c:fe:7e:be:62:71:2c:ef:b5:01:07:86:
         2b:4c:0c:ba:7c:33:ce:19:cf:ce:52:4a:cb:27:5e:78:39:88:
         74:d8:bf:5d:d6:18:45:08:42:50:a7:83:49:9c:d4:49:74:df:
         02:6f:9c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:53 2024 by rpki-client on console-ams.rpki-client.org