Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36312e33382e302f32342d3235203d3e203230333035.roa
File:                     3230302e36312e33382e302f32342d3235203d3e203230333035.roa (raw, json)
Hash identifier:          6spqJHq2ML6NJM0LX/TbFcNmyzExxvbBBq8pIY+tc/Y=
Subject key identifier:   A9:38:CC:9E:63:9D:CC:FF:71:E2:7C:26:B3:32:B5:3D:77:FA:D5:4F
Certificate issuer:       /CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Certificate serial:       79AF346B226375CC30AA62549D10EEE0D5F3A790
Authority key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36312e33382e302f32342d3235203d3e203230333035.roa
Signing time:             Wed 10 Jul 2024 21:45:00 +0000
ROA not before:           Wed 10 Jul 2024 21:40:00 +0000
ROA not after:            Wed 09 Jul 2025 21:45:00 +0000
asID:                     20305
IP address blocks:        200.61.38.0/24 maxlen: 25

Validation:               Failed, certificate revoked on Thu 11 Jul 2024 19:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:af:34:6b:22:63:75:cc:30:aa:62:54:9d:10:ee:e0:d5:f3:a7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
        Validity
            Not Before: Jul 10 21:40:00 2024 GMT
            Not After : Jul  9 21:45:00 2025 GMT
        Subject: CN=A938CC9E639DCCFF71E27C26B332B53D77FAD54F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:5b:01:f7:56:00:70:21:b8:1a:41:79:25:
                    2c:67:d9:07:47:8c:43:58:4b:17:95:9a:0c:5a:a7:
                    5e:ff:80:d4:68:90:c4:00:cb:d0:dc:71:47:ad:c5:
                    2a:5a:f8:61:c6:32:f4:20:4a:9d:9e:ea:31:58:e0:
                    cb:d7:c8:3b:2d:9f:de:5a:53:72:4b:c4:bb:27:5d:
                    52:4a:e5:aa:70:0d:b8:b3:02:d3:e5:c7:9f:36:fd:
                    18:3e:54:54:61:c5:a0:bd:8a:87:82:e6:44:08:af:
                    f7:69:c2:4b:13:e9:c5:35:dd:6a:cc:05:e7:6a:40:
                    3a:59:09:3b:db:45:40:0f:31:f1:2b:6a:07:4a:59:
                    6a:ef:79:4e:23:81:1c:05:23:ac:2a:04:f9:a4:20:
                    ba:28:58:4b:bf:4b:99:32:c6:80:5d:5d:95:8a:54:
                    dc:91:25:44:ea:12:43:53:2c:23:a7:c3:cf:33:71:
                    2e:04:a0:9d:e7:29:29:36:61:84:0b:a4:a0:9d:a3:
                    3c:0f:b2:28:21:7e:71:da:17:62:05:67:c8:de:41:
                    3e:e6:25:c8:a9:78:4c:2f:bd:86:56:d9:c1:86:24:
                    ef:98:22:34:b2:4e:8d:ca:fd:6d:28:d7:db:76:6d:
                    2f:fe:d2:30:73:a8:a7:65:4e:38:48:fa:7a:c3:56:
                    05:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:38:CC:9E:63:9D:CC:FF:71:E2:7C:26:B3:32:B5:3D:77:FA:D5:4F
            X509v3 Authority Key Identifier:
                keyid:BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36312e33382e302f32342d3235203d3e203230333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:a6:a9:11:58:22:e4:61:a6:4d:f2:76:b6:9f:ab:5a:02:41:
         9b:2c:93:fe:c1:7c:91:c3:85:11:4b:6b:df:78:35:f0:5b:de:
         aa:1f:0b:66:b7:78:2e:a7:38:38:8a:d1:96:6a:9f:a7:3e:5d:
         aa:33:3e:1b:7a:4a:c7:dd:f4:6b:3c:d0:81:6f:a7:08:49:fa:
         95:b7:2b:af:0c:3f:5d:a7:23:dc:8a:cf:59:6f:fc:71:e3:c7:
         7e:bc:4d:41:ab:00:ad:fb:37:d7:4c:3f:b6:b4:0f:c2:72:f5:
         f9:46:c3:0b:ca:b6:20:1a:7f:de:76:17:17:ba:57:74:57:35:
         48:81:57:db:a2:f3:b8:5d:54:41:32:89:11:c3:91:ad:5f:d3:
         5a:d9:e7:16:10:f2:bd:99:97:59:9f:43:13:b3:4b:ae:5d:a9:
         00:b6:e8:cf:47:cb:2d:74:ba:10:f4:0b:fe:26:18:2a:f5:51:
         07:a2:4b:b4:6c:2b:16:e3:c7:6f:ea:96:7d:2d:e3:61:2d:ca:
         f9:3a:e4:fc:8a:b6:32:e2:04:1b:6e:3f:ca:ae:89:1a:15:06:
         c4:e1:6a:cb:5a:af:3a:ae:16:b9:33:8b:23:db:9d:cc:f3:f9:
         87:77:2e:11:16:6c:59:e7:cb:99:14:03:d3:2a:c4:e4:66:ae:
         52:3e:7d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 19:56:07 2024 by rpki-client on console-fra.rpki-client.org