Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3136372e3235302e35322e302f32322d3232203d3e203237393031.roa
File:                     3136372e3235302e35322e302f32322d3232203d3e203237393031.roa (raw, json)
Hash identifier:          k+jh1Oh545PMI7cUTeco1BZnsGeOIZqjHgq9rudf9ds=
Subject key identifier:   38:AC:48:20:E3:6E:76:EA:79:23:A6:59:28:C2:3F:6D:5D:AF:86:32
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       54F111D9C33CE280F76672D82C1701E8FB757D12
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3136372e3235302e35322e302f32322d3232203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:47 +0000
ROA not before:           Tue 05 Mar 2024 17:37:47 +0000
ROA not after:            Tue 04 Mar 2025 17:42:47 +0000
asID:                     27901
IP address blocks:        167.250.52.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f1:11:d9:c3:3c:e2:80:f7:66:72:d8:2c:17:01:e8:fb:75:7d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:47 2024 GMT
            Not After : Mar  4 17:42:47 2025 GMT
        Subject: CN=38AC4820E36E76EA7923A65928C23F6D5DAF8632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d9:e3:ee:83:89:cf:31:1b:5c:f4:85:64:f3:
                    c6:2c:72:59:59:a1:78:8e:b4:e4:30:79:50:1c:4a:
                    1d:dd:d7:46:12:32:85:12:93:93:de:06:2c:85:5d:
                    64:78:33:b5:5c:de:4a:07:6e:51:23:6b:4c:f5:55:
                    c2:6c:7e:ac:c6:ce:1e:c3:d5:f5:ab:1b:3e:3a:f8:
                    10:63:57:1d:90:fe:56:9f:32:4d:ac:7e:29:71:79:
                    bc:7c:6c:f0:1a:63:da:3e:f7:94:6c:70:73:83:f8:
                    fb:92:27:d2:27:51:33:59:3c:27:b2:4a:f2:c4:47:
                    c0:82:6b:63:d0:51:b9:59:40:cf:f5:7e:0c:7e:7f:
                    6e:a8:bc:fa:9d:e8:d0:69:60:ea:df:99:c4:f7:5f:
                    84:fd:c4:f4:ba:93:06:2b:e5:5f:76:58:23:d7:d3:
                    7e:16:db:5a:fc:2a:d8:7b:1a:b8:84:79:97:b9:96:
                    0c:00:55:b5:f2:59:38:04:5c:e7:ec:97:25:08:a0:
                    96:4a:e8:29:bd:6b:5a:cd:04:19:15:b9:fa:28:e3:
                    d6:f4:f0:13:2e:99:21:57:aa:d3:3f:21:8f:d7:95:
                    ee:f9:25:6c:df:48:e9:24:69:c8:f9:82:ac:e8:95:
                    47:22:db:d7:36:65:0a:c9:fb:bb:07:d2:4b:d5:80:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AC:48:20:E3:6E:76:EA:79:23:A6:59:28:C2:3F:6D:5D:AF:86:32
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3136372e3235302e35322e302f32322d3232203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:7f:c8:69:c6:0d:ca:2f:a6:3e:07:84:66:2e:73:ec:51:5c:
         45:7f:62:bd:c5:41:bd:90:89:d8:67:a1:6b:4b:6e:03:ea:a5:
         62:fb:a5:26:9e:fa:30:68:e4:db:a6:89:87:b1:2e:ca:f5:c8:
         bc:4f:fc:c4:a8:70:6e:7a:e1:b8:92:7c:cd:74:69:30:00:20:
         67:61:f8:60:b3:3f:da:b1:53:d6:80:b1:1c:df:35:08:71:10:
         c9:a1:3b:98:dd:b2:81:64:06:38:f9:f5:46:36:44:68:e7:38:
         5f:6f:0a:bc:21:61:a0:7f:ae:8a:92:98:f1:42:40:6a:88:55:
         7a:8b:72:84:87:2b:42:43:d9:bd:49:8e:6f:21:71:7f:47:7d:
         6d:d4:00:2d:4c:2f:cc:d8:42:1e:2d:67:80:3c:6b:f8:d9:bf:
         fa:0f:45:73:1d:5f:50:2d:1d:4a:79:c7:99:d6:9f:0b:6e:b4:
         36:f7:0f:62:38:3e:c5:78:bd:37:27:2d:de:8d:e7:80:6c:94:
         d2:6f:c5:1b:60:41:e6:71:26:8c:52:14:a9:70:81:63:96:a0:
         60:eb:52:47:63:f3:ef:cb:b1:10:d3:83:68:00:6c:0d:9c:93:
         fd:ac:f4:9a:02:7b:70:cf:f0:fb:6b:16:2e:15:cd:78:16:df:
         d4:e0:7e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org