Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/3230302e3132332e3233302e302f32332d3234203d3e20323639393133.roa
File:                     3230302e3132332e3233302e302f32332d3234203d3e20323639393133.roa (raw, json)
Hash identifier:          OlKhXxM5cBgoGA9NSpkWflYYcBAetjPiFwFIhi2Eig0=
Subject key identifier:   F6:08:AE:FE:E4:D5:9A:9F:91:47:8B:BD:74:BB:AD:56:CD:6A:B4:E6
Certificate issuer:       /CN=8F9D596B5F4DD5B3F4DC80916A137A68D104D408
Certificate serial:       49C5DD530690C2C0BE2810514EABE9085A39833A
Authority key identifier: 8F:9D:59:6B:5F:4D:D5:B3:F4:DC:80:91:6A:13:7A:68:D1:04:D4:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/3230302e3132332e3233302e302f32332d3234203d3e20323639393133.roa
Signing time:             Thu 21 Mar 2024 06:45:00 +0000
ROA not before:           Thu 21 Mar 2024 06:40:00 +0000
ROA not after:            Thu 20 Mar 2025 06:45:00 +0000
asID:                     269913
IP address blocks:        200.123.230.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 10 Jun 2024 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c5:dd:53:06:90:c2:c0:be:28:10:51:4e:ab:e9:08:5a:39:83:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9D596B5F4DD5B3F4DC80916A137A68D104D408
        Validity
            Not Before: Mar 21 06:40:00 2024 GMT
            Not After : Mar 20 06:45:00 2025 GMT
        Subject: CN=F608AEFEE4D59A9F91478BBD74BBAD56CD6AB4E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f8:89:e6:7c:96:ca:d4:e2:91:07:05:26:bc:
                    99:02:89:32:9c:98:91:3e:f7:cd:0d:96:a4:35:4b:
                    38:66:70:1d:d4:28:3a:b0:5c:52:4d:37:4b:dd:87:
                    00:8b:54:0f:b9:25:b0:a2:00:4b:ba:55:64:9f:4e:
                    48:21:72:51:aa:a8:02:7a:47:e6:fe:06:4f:2b:f1:
                    4b:30:d0:42:47:4f:d8:e3:c5:60:3e:a7:c7:f2:f6:
                    23:7e:cf:7d:57:f6:d7:eb:51:5e:ca:f0:a6:7d:01:
                    71:70:fd:12:78:ca:0f:34:7b:ca:67:8d:de:a4:8d:
                    99:9c:6a:a1:0e:56:2c:a0:2a:ef:51:7d:50:dc:76:
                    7f:39:84:df:9f:4d:b3:10:47:a2:99:49:fe:6e:23:
                    1c:45:99:c7:1f:d2:af:d6:c4:1e:91:ab:3b:cc:dd:
                    af:3e:38:b9:05:1e:5d:e0:0b:c8:2f:ef:e9:4c:a5:
                    14:3d:49:99:81:08:22:56:8a:0e:b7:c7:cb:00:53:
                    cc:23:59:54:c5:73:5c:ef:2f:bd:d6:6d:2f:e1:c0:
                    6e:68:5d:87:da:4c:14:7a:fb:02:cb:c7:24:96:d1:
                    67:0f:6e:af:a8:d4:d6:fb:88:e7:55:ab:54:dc:24:
                    47:ac:5c:12:5a:48:04:3a:fc:9a:20:09:d4:8a:88:
                    0d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:08:AE:FE:E4:D5:9A:9F:91:47:8B:BD:74:BB:AD:56:CD:6A:B4:E6
            X509v3 Authority Key Identifier:
                keyid:8F:9D:59:6B:5F:4D:D5:B3:F4:DC:80:91:6A:13:7A:68:D1:04:D4:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/3230302e3132332e3233302e302f32332d3234203d3e20323639393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:cc:93:a1:1c:6e:be:38:e2:40:31:c1:6c:57:71:0c:93:4b:
         a1:23:c0:18:b0:e9:38:4d:36:7e:95:1b:c0:35:97:fa:b3:0a:
         e9:1c:26:06:a1:b7:e5:2a:00:30:dc:b8:c6:08:e3:23:5f:ec:
         99:7d:33:5e:b2:94:19:0e:44:5f:cc:f6:e7:c1:76:79:5a:28:
         d4:e9:ec:af:d6:63:57:98:f7:af:84:77:ae:07:27:c0:cf:3c:
         a5:38:a3:d2:c7:5f:39:07:ae:8b:28:dc:aa:b6:8b:70:0c:c2:
         83:f7:87:af:4c:90:c0:bf:5a:6c:04:3a:ea:98:6b:80:69:b9:
         c4:26:01:79:e8:06:3f:9f:73:57:be:16:d2:6f:93:18:f4:69:
         23:06:8c:b3:c8:b6:1e:5c:c7:d4:47:34:27:52:cb:fa:20:42:
         e1:f7:31:a7:84:5b:c9:ee:fe:44:81:34:64:40:3e:82:41:e6:
         30:a0:fb:1d:7d:1b:75:2b:60:dd:a3:34:cb:a1:4e:48:ba:ec:
         4b:46:97:b7:76:7e:34:bf:bb:c1:1b:e1:ad:22:db:3e:73:87:
         41:c8:35:11:79:39:83:b8:01:60:19:ee:65:6c:fb:81:6e:a6:
         fc:9a:44:0d:05:74:6c:7d:4b:ff:37:93:b2:c8:1b:73:18:85:
         01:eb:b5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 21:35:01 2024 by rpki-client on console-fra.rpki-client.org