Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3230382e302f32332d3233203d3e20323632393136.roa
File:                     3230302e39322e3230382e302f32332d3233203d3e20323632393136.roa (raw, json)
Hash identifier:          NcDvg5DLImKckXdpQO1a3ssXZIYeV0qLIVQ1AE0t14Y=
Subject key identifier:   00:7D:EA:23:2B:8A:7A:31:0E:CF:E9:7F:32:45:8C:27:0E:D5:86:34
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       51B7237C2769726933BBD877B59A525CD62B72EB
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3230382e302f32332d3233203d3e20323632393136.roa
Signing time:             Thu 23 May 2024 04:30:05 +0000
ROA not before:           Thu 23 May 2024 04:25:05 +0000
ROA not after:            Thu 22 May 2025 04:30:05 +0000
asID:                     262916
IP address blocks:        200.92.208.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b7:23:7c:27:69:72:69:33:bb:d8:77:b5:9a:52:5c:d6:2b:72:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:05 2024 GMT
            Not After : May 22 04:30:05 2025 GMT
        Subject: CN=007DEA232B8A7A310ECFE97F32458C270ED58634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:92:e0:6c:c7:41:c4:22:55:bf:f4:2a:f0:94:
                    4a:44:bc:b4:d8:1d:46:f8:5e:24:c4:6d:06:e9:e5:
                    7c:4d:6c:47:80:67:65:bd:6d:42:99:c8:cc:07:d8:
                    0a:3f:65:5f:dc:95:c0:a4:59:f4:b0:a9:7b:aa:fe:
                    78:57:69:8d:72:6f:ab:2a:6d:51:8d:2d:36:5a:62:
                    ff:eb:71:b4:f5:31:5d:d7:c1:20:45:74:71:cc:e8:
                    d6:ae:2b:71:b9:6b:7c:c7:63:3b:12:7f:28:ce:cc:
                    39:4f:f5:08:cc:c4:5b:b9:92:74:36:44:e1:01:22:
                    af:b5:0e:f3:6e:ef:16:1a:27:d3:d7:4d:db:db:b6:
                    0d:16:75:e4:12:7e:d3:f7:0f:f5:13:c7:89:11:84:
                    c4:92:4d:d4:db:3f:24:6d:c0:05:0e:4b:5d:aa:a3:
                    fa:b7:a6:a3:8b:c0:cd:a9:30:3a:d0:32:b6:bd:61:
                    1a:b9:2d:bb:65:0f:d6:12:c1:27:31:8a:71:36:70:
                    0c:b8:41:97:95:5c:7c:f9:46:a3:c8:6e:c1:e7:00:
                    68:6a:12:7e:81:dd:45:4a:ec:fb:81:d4:31:94:75:
                    27:d0:e9:ef:80:e1:84:4c:d7:48:0e:11:78:dc:cb:
                    95:e3:e9:af:0f:2f:c5:d5:27:a3:5e:75:28:6a:3f:
                    ef:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7D:EA:23:2B:8A:7A:31:0E:CF:E9:7F:32:45:8C:27:0E:D5:86:34
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3230382e302f32332d3233203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:85:57:74:0a:93:7d:0b:aa:b9:ad:49:ad:12:a1:9e:6c:d5:
         16:af:0d:50:b6:4d:87:8f:91:38:bf:fe:73:95:51:e6:ec:c4:
         84:11:06:49:65:7e:bd:db:af:e5:37:8b:a9:46:d9:e1:e8:5d:
         d1:f8:59:89:63:41:9f:42:1c:db:ae:03:76:18:57:ff:ec:cb:
         52:7f:f0:ac:70:61:b2:5d:74:8d:0c:69:c1:2e:6b:56:8e:af:
         b7:23:36:10:3c:d4:8d:e9:d0:6d:26:c5:58:83:ad:f8:37:71:
         92:db:06:0a:1d:fe:e5:61:53:20:71:e5:00:db:42:85:2e:3e:
         91:85:e2:05:ae:92:73:86:4d:63:cd:c4:b2:bb:12:5d:ab:6f:
         ff:13:f0:dc:ea:7a:48:a8:51:65:bc:a1:5d:c0:5e:70:1e:b8:
         3f:89:7b:c4:0f:80:f7:e7:0c:f5:05:6f:41:4d:99:eb:e8:9d:
         55:f6:5f:16:a6:68:5c:fb:2b:6d:41:10:03:a1:6c:22:06:06:
         e1:81:ff:9b:85:32:1b:3c:16:9a:9c:43:35:be:b6:5c:2a:a4:
         80:11:96:9b:41:f3:08:2c:f1:c2:a4:bc:c5:26:1a:dc:4e:a3:
         5f:23:05:1e:2d:bf:08:7a:6a:f3:b5:59:2d:a7:1e:13:b0:60:
         60:88:cd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org