Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/3230302e3132332e3232382e302f32322d3233203d3e20323639393133.roa
File:                     3230302e3132332e3232382e302f32322d3233203d3e20323639393133.roa (raw, json)
Hash identifier:          xbscdP5PnxAeVlBjaG0IAKxJUuubGZfE3fU1fAx2cQw=
Subject key identifier:   03:9B:6F:BC:94:3D:DE:15:BC:E9:46:4D:8B:FC:B6:2C:F5:C4:9A:5F
Certificate issuer:       /CN=8F9D596B5F4DD5B3F4DC80916A137A68D104D408
Certificate serial:       1BBFEC08439E7265EB355F4D6A25117F046929E9
Authority key identifier: 8F:9D:59:6B:5F:4D:D5:B3:F4:DC:80:91:6A:13:7A:68:D1:04:D4:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/3230302e3132332e3232382e302f32322d3233203d3e20323639393133.roa
Signing time:             Wed 20 Mar 2024 01:15:00 +0000
ROA not before:           Wed 20 Mar 2024 01:10:00 +0000
ROA not after:            Wed 19 Mar 2025 01:15:00 +0000
asID:                     269913
IP address blocks:        200.123.228.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Mon 10 Jun 2024 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bf:ec:08:43:9e:72:65:eb:35:5f:4d:6a:25:11:7f:04:69:29:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9D596B5F4DD5B3F4DC80916A137A68D104D408
        Validity
            Not Before: Mar 20 01:10:00 2024 GMT
            Not After : Mar 19 01:15:00 2025 GMT
        Subject: CN=039B6FBC943DDE15BCE9464D8BFCB62CF5C49A5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c0:8c:97:9e:82:15:80:e5:da:c9:0d:f6:b4:
                    db:50:eb:c9:5f:70:bd:b8:86:cd:d1:77:7e:45:60:
                    d9:ed:92:49:3a:d1:29:ab:34:f9:ee:8c:d3:90:1b:
                    3c:a9:2c:23:37:3d:6f:6c:1b:56:d9:9a:66:b3:bd:
                    c4:6d:f4:54:4e:47:48:61:d6:ef:8e:57:f5:2d:4a:
                    c4:e9:14:16:bf:ee:cb:b3:93:33:21:46:d3:b7:0f:
                    ee:80:7d:df:99:46:64:9a:88:99:c3:4d:e1:ed:f0:
                    02:68:98:4a:0a:10:cd:b7:7c:72:ea:df:22:2b:b8:
                    28:91:36:5f:8e:d9:ab:67:05:7d:42:e1:36:01:3a:
                    b6:1d:07:5f:0f:9c:f1:40:c2:92:19:44:e6:51:f1:
                    73:ee:0a:4d:4a:b6:45:d7:91:1a:b5:4a:a5:b7:dd:
                    28:a4:4d:a2:2e:d2:73:a4:35:1b:4c:3a:b6:75:bd:
                    dd:0a:a4:98:c6:0d:54:b6:62:2b:2b:4c:08:b5:a5:
                    c2:27:99:16:97:38:5b:ed:22:fd:00:be:c6:16:4f:
                    92:d6:03:75:5d:08:81:25:c8:f8:6a:95:92:81:9c:
                    b9:b4:4d:3a:af:5c:a0:02:24:df:bc:29:3a:13:91:
                    ad:cd:d9:37:f3:ed:62:59:2b:33:c3:1c:44:ea:6b:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9B:6F:BC:94:3D:DE:15:BC:E9:46:4D:8B:FC:B6:2C:F5:C4:9A:5F
            X509v3 Authority Key Identifier:
                keyid:8F:9D:59:6B:5F:4D:D5:B3:F4:DC:80:91:6A:13:7A:68:D1:04:D4:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/3230302e3132332e3232382e302f32322d3233203d3e20323639393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:3a:3c:eb:0b:81:3b:7c:bc:52:2d:80:b9:6f:7d:46:15:45:
         98:31:34:ca:0e:75:2d:af:64:8b:ce:6f:7e:56:19:3e:18:bb:
         8b:9b:54:c1:72:4d:7d:fd:27:53:ec:6e:0e:9b:52:27:96:76:
         4b:76:e2:83:f0:2d:1b:4e:ff:1b:50:f9:94:45:8f:25:2c:7a:
         d5:94:2f:86:b3:0f:f7:3f:98:71:99:e0:d4:01:1d:72:c3:78:
         a2:08:ff:38:8b:99:24:62:b9:29:78:d4:a8:81:39:77:fa:84:
         f4:0d:45:7a:ca:ed:be:a5:8d:53:cb:b2:41:39:db:a4:10:a0:
         ea:9b:c6:05:4a:8a:32:81:22:32:5f:4e:c8:98:e7:a7:69:01:
         fc:f4:7d:12:46:fd:68:cf:06:79:ea:45:43:6a:a8:f4:84:28:
         64:4f:c8:4f:42:0a:1d:b4:23:fb:7f:f5:eb:91:6b:64:37:69:
         3f:61:4f:26:f9:cb:43:1c:b9:70:86:14:92:9d:3b:ca:ed:5f:
         f5:96:cf:6e:70:92:63:e9:16:5d:e1:04:34:a1:06:3c:98:4f:
         97:3e:b9:a8:f9:df:02:85:90:14:76:65:d3:34:5a:c2:84:c3:
         72:c9:9d:cd:e9:e6:8b:c1:9f:46:ae:af:67:9b:da:4f:5e:97:
         5e:da:d9:5b
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUG7/sCEOecmXrNV9NaiURfwRpKekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY5RDU5NkI1RjRERDVCM0Y0REM4MDkxNkExMzdBNjhE
MTA0RDQwODAeFw0yNDAzMjAwMTEwMDBaFw0yNTAzMTkwMTE1MDBaMDMxMTAvBgNV
BAMTKDAzOUI2RkJDOTQzRERFMTVCQ0U5NDY0RDhCRkNCNjJDRjVDNDlBNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwIyXnoIVgOXayQ32tNtQ68lf
cL24hs3Rd35FYNntkkk60SmrNPnujNOQGzypLCM3PW9sG1bZmmazvcRt9FROR0hh
1u+OV/UtSsTpFBa/7suzkzMhRtO3D+6Afd+ZRmSaiJnDTeHt8AJomEoKEM23fHLq
3yIruCiRNl+O2atnBX1C4TYBOrYdB18PnPFAwpIZROZR8XPuCk1KtkXXkRq1SqW3
3SikTaIu0nOkNRtMOrZ1vd0KpJjGDVS2YisrTAi1pcInmRaXOFvtIv0AvsYWT5LW
A3VdCIElyPhqlZKBnLm0TTqvXKACJN+8KToTka3N2Tfz7WJZKzPDHETqax1bAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUA5tvvJQ93hW86UZNi/y2LPXEml8wHwYDVR0j
BBgwFoAUj51Za19N1bP03ICRahN6aNEE1AgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDRDMThENUNFRjM4RTZDNzFEMzVFNEE4QkJFRkIxQzUx
MjBGRkFCNkI1QUZEMjc4RjVGODlEQjEyRDI0MDU2LzAvOEY5RDU5NkI1RjRERDVC
M0Y0REM4MDkxNkExMzdBNjhEMTA0RDQwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RjlENTk2QjVGNERENUIzRjRE
QzgwOTE2QTEzN0E2OEQxMDRENDA4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQ0QzE4RDVDRUYzOEU2QzcxRDM1RTRBOEJCRUZCMUM1MTIwRkZBQjZC
NUFGRDI3OEY1Rjg5REIxMkQyNDA1Ni8wLzMyMzAzMDJlMzEzMjMzMmUzMjMyMzgy
ZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjM2MzkzOTMxMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALI
e+QwDQYJKoZIhvcNAQELBQADggEBAIg6POsLgTt8vFItgLlvfUYVRZgxNMoOdS2v
ZIvOb35WGT4Yu4ubVMFyTX39J1Psbg6bUieWdkt24oPwLRtO/xtQ+ZRFjyUsetWU
L4azD/c/mHGZ4NQBHXLDeKII/ziLmSRiuSl41KiBOXf6hPQNRXrK7b6ljVPLskE5
26QQoOqbxgVKijKBIjJfTsiY56dpAfz0fRJG/WjPBnnqRUNqqPSEKGRPyE9CCh20
I/t/9euRa2Q3aT9hTyb5y0McuXCGFJKdO8rtX/WWz25wkmPpFl3hBDShBjyYT5c+
uaj53wKFkBR2ZdM0WsKEw3LJnc3p5ovBn0aur2eb2k9el17a2Vs=
-----END CERTIFICATE-----
Generated at Mon Jun 10 21:35:01 2024 by rpki-client on console-fra.rpki-client.org