Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e35382e3139322e302f31392d3139203d3e203133343839.roa
File:                     3230302e35382e3139322e302f31392d3139203d3e203133343839.roa (raw, json)
Hash identifier:          fL1L+3m5ZtrdeX97Z18R3MYX8TZ0r1JAEdmWvfkmuLY=
Subject key identifier:   E2:E7:01:0D:52:35:34:C7:2D:04:A7:3A:F3:EB:61:AF:F1:4D:85:8F
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       360CC7F513BE92CF0CF73B26ABDFE09CA49698CB
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e35382e3139322e302f31392d3139203d3e203133343839.roa
Signing time:             Mon 30 Sep 2024 22:20:00 +0000
ROA not before:           Mon 30 Sep 2024 22:15:00 +0000
ROA not after:            Mon 29 Sep 2025 22:20:00 +0000
asID:                     13489
IP address blocks:        200.58.192.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 18:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0c:c7:f5:13:be:92:cf:0c:f7:3b:26:ab:df:e0:9c:a4:96:98:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Sep 30 22:15:00 2024 GMT
            Not After : Sep 29 22:20:00 2025 GMT
        Subject: CN=E2E7010D523534C72D04A73AF3EB61AFF14D858F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:f0:77:3c:17:24:eb:ea:a8:ea:56:32:e7:
                    5f:54:86:86:4c:b1:8b:34:44:13:91:59:9d:08:4b:
                    66:6d:18:48:fd:5f:66:91:02:e1:43:e3:4a:4e:55:
                    6d:88:cf:26:5c:34:4f:1c:6a:da:59:88:51:66:20:
                    ec:15:74:67:9d:5e:66:71:3d:59:af:8c:2d:9c:1f:
                    56:b7:b5:90:1d:cb:3b:ce:fc:93:b7:c7:03:71:83:
                    fe:e8:c0:50:89:56:02:b2:25:bb:da:41:e3:53:b5:
                    c2:17:32:12:8c:27:4e:b4:44:e1:df:66:52:a9:b7:
                    6c:89:3b:a3:87:80:33:12:e2:eb:8b:97:85:89:67:
                    0b:83:1c:1e:72:f0:56:13:cc:27:b1:d2:75:26:38:
                    13:73:ce:7f:91:88:b2:ca:cd:0e:42:d6:8f:a1:45:
                    ee:ea:09:37:fb:25:45:af:27:37:59:e5:83:20:66:
                    f2:12:9a:bf:74:86:11:f3:b7:17:09:85:a7:dc:48:
                    1a:8d:d1:02:53:e8:81:bf:86:8e:bb:8d:3f:a3:a0:
                    7d:5a:11:11:8f:f2:8c:4c:63:d4:22:49:14:9b:e8:
                    d7:3b:18:ad:24:ba:9f:b2:24:1b:86:c6:7c:9d:56:
                    d8:f4:22:64:be:49:40:af:b3:29:00:68:d1:e0:fa:
                    08:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E7:01:0D:52:35:34:C7:2D:04:A7:3A:F3:EB:61:AF:F1:4D:85:8F
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e35382e3139322e302f31392d3139203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b4:61:d3:2c:fb:0b:25:72:45:08:96:0b:60:66:21:91:2a:ad:
         2a:e8:d7:36:91:4d:ba:eb:7d:87:88:e2:bb:85:e3:60:53:aa:
         5e:af:a9:cd:f1:cd:78:f6:eb:1f:35:bf:4c:ff:1c:40:c2:9d:
         ff:c3:03:3c:39:d5:a3:1e:e7:5d:c2:6f:db:48:d7:2f:f9:bf:
         41:e6:dd:e9:56:ac:a2:10:cb:ea:25:79:65:50:2f:d1:c4:5f:
         f8:64:fe:65:53:00:fb:49:1d:d4:1c:fb:60:49:bb:e1:ee:19:
         26:46:53:b0:73:15:ea:7b:84:b1:bd:7a:0a:a8:92:a5:1c:15:
         4e:9f:b5:85:78:2a:5d:bf:a2:10:fe:5d:9a:3f:ec:6a:4a:22:
         ed:05:05:c7:f1:b5:45:14:9c:64:96:31:1b:32:07:f0:19:34:
         1e:44:6c:2f:cd:ef:2a:c7:9a:74:eb:e9:ad:20:cb:d2:d9:7a:
         f0:72:66:5e:94:da:61:75:01:f2:5a:b4:dc:18:58:33:7d:35:
         ce:b0:e7:a3:da:7c:a3:88:13:11:71:5e:8a:b4:ca:41:e7:18:
         d6:3d:d7:22:d8:22:1e:05:6f:0a:19:9b:82:0a:f6:64:80:67:
         02:f7:a1:a0:1f:19:c6:f1:8a:d3:83:96:ad:d8:e2:6b:af:5c:
         73:48:48:0a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNgzH9RO+ks8M9zsmq9/gnKSWmMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNDA5MzAyMjE1MDBaFw0yNTA5MjkyMjIwMDBaMDMxMTAvBgNV
BAMTKEUyRTcwMTBENTIzNTM0QzcyRDA0QTczQUYzRUI2MUFGRjE0RDg1OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZvB3PBck6+qo6lYy519UhoZM
sYs0RBORWZ0IS2ZtGEj9X2aRAuFD40pOVW2IzyZcNE8catpZiFFmIOwVdGedXmZx
PVmvjC2cH1a3tZAdyzvO/JO3xwNxg/7owFCJVgKyJbvaQeNTtcIXMhKMJ060ROHf
ZlKpt2yJO6OHgDMS4uuLl4WJZwuDHB5y8FYTzCex0nUmOBNzzn+RiLLKzQ5C1o+h
Re7qCTf7JUWvJzdZ5YMgZvISmr90hhHztxcJhafcSBqN0QJT6IG/ho67jT+joH1a
ERGP8oxMY9QiSRSb6Nc7GK0kup+yJBuGxnydVtj0ImS+SUCvsykAaNHg+gh3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU4ucBDVI1NMctBKc68+thr/FNhY8wHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMyMzAzMDJlMzUzODJlMzEzOTMyMmUz
MDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzMzM0MzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcg6wDAN
BgkqhkiG9w0BAQsFAAOCAQEAtGHTLPsLJXJFCJYLYGYhkSqtKujXNpFNuut9h4ji
u4XjYFOqXq+pzfHNePbrHzW/TP8cQMKd/8MDPDnVox7nXcJv20jXL/m/Qebd6Vas
ohDL6iV5ZVAv0cRf+GT+ZVMA+0kd1Bz7YEm74e4ZJkZTsHMV6nuEsb16CqiSpRwV
Tp+1hXgqXb+iEP5dmj/sakoi7QUFx/G1RRScZJYxGzIH8Bk0HkRsL83vKseadOvp
rSDL0tl68HJmXpTaYXUB8lq03BhYM301zrDno9p8o4gTEXFeirTKQecY1j3XItgi
HgVvChmbggr2ZIBnAvehoB8ZxvGK04OWrdjia69cc0hICg==
-----END CERTIFICATE-----
Generated at Tue Oct 8 22:29:09 2024 by rpki-client on console-ams.rpki-client.org