Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e3131362e302e302f31362d3136203d3e203133343839.roa
File:                     3230302e3131362e302e302f31362d3136203d3e203133343839.roa (raw, json)
Hash identifier:          FnBNrMiQGE0Q3OiyWM7pSBgawl2IS1Kajf5TQxrMK/s=
Subject key identifier:   F0:56:65:29:0E:06:D0:06:27:BC:4A:4B:18:B3:37:08:39:89:F5:F4
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       1B644567BADF69B1F8F6F6A0679B00E4E82B21F2
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e3131362e302e302f31362d3136203d3e203133343839.roa
Signing time:             Mon 30 Sep 2024 22:20:01 +0000
ROA not before:           Mon 30 Sep 2024 22:15:01 +0000
ROA not after:            Mon 29 Sep 2025 22:20:01 +0000
asID:                     13489
IP address blocks:        200.116.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 18:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:64:45:67:ba:df:69:b1:f8:f6:f6:a0:67:9b:00:e4:e8:2b:21:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Sep 30 22:15:01 2024 GMT
            Not After : Sep 29 22:20:01 2025 GMT
        Subject: CN=F05665290E06D00627BC4A4B18B337083989F5F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:af:e0:81:c8:30:94:ca:4a:80:4c:d3:aa:69:
                    fa:40:69:fb:63:0d:c1:e6:0f:ff:11:f1:f3:0a:81:
                    0e:47:d6:ac:24:d6:ed:07:ed:08:94:db:c5:4f:21:
                    fc:9b:71:c7:f6:e8:76:d4:fd:05:b1:e1:37:4d:27:
                    ff:f1:cd:76:fb:d6:d4:ae:6e:45:0c:23:c1:58:e8:
                    af:3f:76:43:ef:a3:f7:77:cc:cc:1e:7a:4e:b5:23:
                    32:35:b5:67:48:64:bd:8f:89:fc:70:a2:b7:d6:de:
                    61:57:23:77:b9:74:34:9b:5b:7e:0c:8d:e6:cf:e9:
                    51:8e:ce:9d:9d:5a:af:28:bb:85:9d:19:49:5f:1a:
                    cd:b2:1a:04:85:f7:ad:46:10:8b:d8:b4:3d:18:9c:
                    e4:b7:0b:cc:52:e0:31:61:95:4e:f6:76:20:be:4e:
                    ad:ef:15:2c:09:8d:98:96:8b:94:fc:ca:67:2a:5c:
                    c9:c5:5b:07:28:47:1e:6b:b7:4b:b6:a6:7e:cf:a7:
                    d0:56:91:31:99:73:c9:93:9a:5d:a9:93:84:49:9e:
                    9d:70:f0:d4:dc:d9:af:a0:ff:bf:4a:4b:16:3d:85:
                    14:7a:9f:38:8b:13:e0:3e:2c:5e:9c:28:44:68:f9:
                    20:3b:3c:83:ac:02:19:1b:68:f7:55:6c:e7:fb:55:
                    3c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:56:65:29:0E:06:D0:06:27:BC:4A:4B:18:B3:37:08:39:89:F5:F4
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e3131362e302e302f31362d3136203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.116.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:84:0d:f7:0d:48:63:a4:7e:b6:2e:39:82:8e:e4:44:f8:77:
         fd:04:80:e4:63:2c:d5:d3:f8:66:85:b4:5c:4c:58:63:fb:6c:
         f2:5c:74:31:53:7b:03:1f:1e:c3:80:cf:d6:d9:b8:49:6f:91:
         2f:21:dc:55:0b:47:15:45:5b:c5:a5:b9:08:d8:d0:65:8a:d7:
         d3:2c:83:5b:5f:1a:fa:59:15:6a:7f:52:44:24:d0:a6:b3:bd:
         3d:4f:4b:43:26:4b:3b:f1:f5:27:3b:9e:44:3c:37:cd:34:6b:
         10:b0:d2:73:46:e5:1c:9d:e9:27:9a:4c:ee:aa:6d:d9:56:fa:
         61:db:be:9d:58:9e:4b:f8:10:8d:27:8a:0a:8b:fa:1c:f7:d9:
         74:00:95:3b:20:67:d5:0e:6f:79:69:8b:be:fa:a1:12:a2:f1:
         9a:46:8d:2e:88:a4:7f:8f:1e:53:5a:34:e1:9e:c6:8f:aa:da:
         82:e2:dc:f7:4d:d5:cd:e9:66:42:b6:15:62:67:25:e2:1d:50:
         df:41:13:2e:00:db:89:2a:30:88:19:aa:32:eb:41:6a:47:0d:
         db:34:91:d5:48:e9:ad:15:42:a7:ac:a3:4e:f5:4b:0b:ab:7e:
         b0:96:b5:69:cb:a9:ab:09:66:4a:e6:de:a9:26:34:1d:2b:7b:
         19:b1:6e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:29:09 2024 by rpki-client on console-ams.rpki-client.org