Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e36362e33392e302f32342d3234203d3e20323632393136.roa
File:                     3230302e36362e33392e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          N1TdxFe8pBNTVpiJ+Lsicp0e4CdK10Hm6IRM6IpbEO4=
Subject key identifier:   AE:60:03:21:CF:8D:D6:86:B2:01:6D:FA:5D:44:39:7F:6A:73:07:50
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       4C32B4A19F7999B670C9A3B7CEEEE9F4509AFEDA
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e36362e33392e302f32342d3234203d3e20323632393136.roa
Signing time:             Tue 21 May 2024 03:55:01 +0000
ROA not before:           Tue 21 May 2024 03:50:01 +0000
ROA not after:            Tue 20 May 2025 03:55:01 +0000
asID:                     262916
IP address blocks:        200.66.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:32:b4:a1:9f:79:99:b6:70:c9:a3:b7:ce:ee:e9:f4:50:9a:fe:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 21 03:50:01 2024 GMT
            Not After : May 20 03:55:01 2025 GMT
        Subject: CN=AE600321CF8DD686B2016DFA5D44397F6A730750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:4b:88:4d:fd:a0:bc:cc:af:ea:83:ff:13:
                    d7:1f:b0:e6:bf:6c:7a:73:89:f2:06:b9:2a:16:66:
                    c9:c0:33:70:86:82:97:c8:b4:07:2f:e9:75:fa:70:
                    e1:62:ea:88:70:3f:1f:f6:fb:2e:ca:90:9e:82:ca:
                    37:ff:d8:2e:37:df:2b:40:80:2f:8e:d2:64:32:72:
                    38:53:b8:67:a9:ea:cf:47:9f:a7:26:d6:6f:49:d0:
                    51:ed:0e:cb:9f:3a:7d:41:68:1a:37:bf:c5:26:14:
                    ae:02:d2:ac:49:bf:cc:d1:77:24:5b:31:1c:ef:e9:
                    7d:02:a0:d6:f5:27:cc:c7:2e:a9:7f:69:27:c3:63:
                    cc:d4:2b:36:75:d4:f5:41:22:4f:02:f9:71:0f:71:
                    9a:a3:55:37:f0:11:70:a8:9b:b0:60:27:65:2f:81:
                    e6:4b:b2:6f:75:76:b2:52:1e:06:b6:85:f6:80:e4:
                    6f:43:3a:f2:88:eb:7b:61:17:35:3c:97:2b:42:31:
                    81:27:82:26:ea:81:2b:9e:9d:be:0c:7e:13:87:63:
                    f2:2c:12:a3:ba:11:be:77:0e:e1:96:bd:ee:4b:92:
                    55:e3:6a:cb:c5:1a:9b:bf:5b:73:a9:39:8a:8f:b3:
                    cc:41:44:76:b5:b3:f5:4c:bf:21:56:bb:04:b9:6b:
                    19:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:60:03:21:CF:8D:D6:86:B2:01:6D:FA:5D:44:39:7F:6A:73:07:50
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e36362e33392e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.66.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:9b:ad:b2:e3:04:7d:15:52:55:f2:78:4c:fe:6e:d3:a7:24:
         e1:19:51:54:46:21:c3:58:b1:6b:df:3b:54:7f:73:87:d2:fb:
         f3:32:04:1d:93:e7:e1:34:09:e5:d8:01:d0:53:49:28:39:6d:
         89:9e:83:92:ba:54:8b:fb:22:51:3c:7a:2d:00:af:6f:71:5d:
         df:28:1d:3e:5e:53:8d:8a:d0:d6:0d:20:e8:a4:71:37:ca:07:
         7d:3a:52:e1:ed:1b:fc:4f:f7:59:e3:3b:aa:89:cd:f2:f2:b1:
         02:07:87:ab:39:1a:6d:2f:0c:65:0c:d3:a5:9a:bd:d0:5b:0c:
         a5:d3:b9:b1:e8:95:0e:36:53:0e:ce:0e:fe:f0:e8:71:54:be:
         59:f9:4c:48:d1:6c:99:6a:0c:7d:19:d7:6d:fa:8c:53:12:37:
         5e:ab:3d:10:41:bf:ed:f5:3a:ed:e9:1e:6d:ef:85:7e:e6:a0:
         48:10:99:e6:75:0c:4d:59:61:b5:52:ea:79:8b:b3:49:8c:ab:
         8b:8d:20:d6:c3:81:63:bb:6c:53:89:2e:73:69:77:f5:45:40:
         dd:0c:78:dc:47:24:e2:5e:a7:fa:0c:04:ac:0c:fd:cc:4f:d0:
         6b:28:5a:91:55:27:f8:88:de:16:31:35:e3:b4:c4:ad:4b:b6:
         89:93:fa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org