Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e35312e302f32342d3234203d3e203133393939.roa
File:                     3230302e37372e35312e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          3bIh6Hh4vyoVKes0XVapJ28g3Py4EvH45gyyLRoGlz8=
Subject key identifier:   4E:EE:F6:89:18:93:18:86:65:D6:FC:19:DF:A8:0B:A3:3F:CC:53:04
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       7C8A75E8C42E6FE8865BA366DD274929E876DFB8
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e35312e302f32342d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:00 +0000
ROA not before:           Thu 23 May 2024 04:25:00 +0000
ROA not after:            Thu 22 May 2025 04:30:00 +0000
asID:                     13999
IP address blocks:        200.77.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8a:75:e8:c4:2e:6f:e8:86:5b:a3:66:dd:27:49:29:e8:76:df:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:00 2024 GMT
            Not After : May 22 04:30:00 2025 GMT
        Subject: CN=4EEEF6891893188665D6FC19DFA80BA33FCC5304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:10:35:28:08:15:78:98:57:89:6f:0a:94:
                    18:b7:a5:44:b5:de:66:8b:5c:7c:a6:9a:f3:b8:80:
                    62:66:a6:d3:d5:67:ff:fb:af:7d:82:2f:f8:5d:aa:
                    dd:0c:53:b5:4c:86:d1:07:bf:19:15:c4:cf:84:7b:
                    22:4c:45:ea:d4:9f:51:f5:56:c2:56:97:2a:92:db:
                    24:85:1a:39:cf:6d:35:0e:59:34:f1:8f:5c:2b:c3:
                    7f:c8:10:98:1a:45:d0:7b:01:73:f2:84:3f:8e:48:
                    84:1f:4a:a9:73:66:55:c2:fd:96:d9:c4:81:bf:6d:
                    4b:05:64:a1:71:6d:1f:49:41:1b:33:7d:11:8b:da:
                    c7:0e:94:60:af:f5:a4:9f:a8:01:b1:e4:25:5f:97:
                    64:23:a3:c0:2f:10:44:c7:c6:26:c6:ad:b1:e5:f5:
                    95:3c:5f:8d:49:06:fd:5c:42:51:c9:ec:b9:20:a3:
                    6b:b8:0c:c7:e9:f3:f5:72:a2:9a:9c:fb:36:2f:ed:
                    2c:e3:82:fd:c0:36:c4:26:54:1e:74:e0:dd:60:98:
                    5f:0f:48:e3:75:51:b1:df:a5:f2:00:ae:31:18:23:
                    3e:e0:ad:35:a2:be:4b:d6:4e:90:66:08:be:a2:49:
                    f0:d8:75:45:6e:a4:65:cc:ac:2b:91:1a:da:90:35:
                    1c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EE:F6:89:18:93:18:86:65:D6:FC:19:DF:A8:0B:A3:3F:CC:53:04
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e35312e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:bb:e9:13:57:7a:68:58:68:4f:48:c0:0c:02:b7:fe:98:8b:
         ec:f7:4a:58:73:f4:c3:35:05:6d:88:a5:05:a6:a8:01:e1:46:
         37:8f:f2:5a:d9:b7:22:0e:ec:5b:ed:e1:76:03:b1:e4:5a:ba:
         0f:ce:51:8f:42:d2:bf:c4:2e:b9:a9:39:f0:1d:ea:db:f0:fc:
         de:3b:b5:c1:49:0a:37:4c:f4:42:8c:aa:b6:e6:c2:c1:77:fe:
         14:ca:10:e9:1a:f5:fd:0a:ee:a0:eb:4d:d2:fb:3f:84:3c:f5:
         ee:7c:70:c2:5a:21:b8:f1:cd:63:a3:f8:d3:c5:07:8d:dc:74:
         34:92:ab:3c:25:17:da:5c:b9:fa:52:b7:c3:48:36:49:9f:78:
         a9:b5:c1:32:d9:ec:94:06:a1:a4:fb:44:5a:9c:a3:aa:c5:35:
         69:91:a7:49:19:c7:8c:d9:fc:7d:d0:2c:97:18:9c:1e:31:21:
         06:7c:79:df:0e:74:fd:b6:16:4e:d2:6e:8e:34:fe:93:f6:e5:
         53:36:1d:20:ae:ad:32:b4:34:30:d3:b4:3e:a0:6c:5e:ba:ce:
         c8:18:a9:ab:af:1a:e5:20:8d:b2:39:b5:a8:55:77:e3:fb:03:
         37:ea:b1:da:45:38:71:79:e9:86:12:51:be:2d:a0:9d:29:2a:
         e6:29:01:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org