Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230312e3135392e3230302e302f32312d3231203d3e203133393939.roa
File:                     3230312e3135392e3230302e302f32312d3231203d3e203133393939.roa (raw, json)
Hash identifier:          Ft2aUkX0S2elEWSUIHajp2SrdQDnK17sJP6eE4a7dGg=
Subject key identifier:   9B:BB:99:14:54:21:48:89:9B:AF:B7:E4:12:4D:03:C8:CE:7D:9A:F7
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       4A99691677C56F6063F81B8A5EE19D5071716E04
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230312e3135392e3230302e302f32312d3231203d3e203133393939.roa
Signing time:             Tue 05 Mar 2024 17:50:54 +0000
ROA not before:           Tue 05 Mar 2024 17:45:54 +0000
ROA not after:            Tue 04 Mar 2025 17:50:54 +0000
asID:                     13999
IP address blocks:        201.159.200.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:99:69:16:77:c5:6f:60:63:f8:1b:8a:5e:e1:9d:50:71:71:6e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: Mar  5 17:45:54 2024 GMT
            Not After : Mar  4 17:50:54 2025 GMT
        Subject: CN=9BBB9914542148899BAFB7E4124D03C8CE7D9AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:2a:9b:a7:d2:03:0c:ca:a4:1d:da:8e:af:
                    25:6d:e5:19:14:b4:55:ab:b5:ce:26:ca:b4:cf:0f:
                    e5:88:20:ed:98:16:9f:ae:64:ec:96:9c:b4:3d:2a:
                    01:25:cb:ec:e2:7e:e0:26:a0:18:c2:96:41:6b:4d:
                    d3:e4:8a:e4:06:12:28:62:4b:93:87:bc:78:0d:8d:
                    b2:f1:28:16:47:a2:2a:36:96:97:cf:53:61:fe:f9:
                    03:10:84:18:d7:88:6c:2b:f8:b3:85:b3:2c:e1:18:
                    13:98:53:a8:c1:91:f9:61:d7:8c:36:09:4b:a8:ad:
                    04:7f:ac:2f:e2:11:a3:e1:ea:4b:17:70:8c:43:97:
                    8c:6d:1f:ef:16:96:f2:f9:03:27:0e:e7:53:87:b4:
                    07:00:fa:a3:b8:fe:cd:ad:42:34:ec:9a:6d:f3:64:
                    fc:a8:4b:67:de:08:bf:60:69:c0:16:38:1a:2d:cc:
                    65:4b:06:42:cc:12:da:a5:4f:41:d2:bc:e3:5d:8e:
                    a7:91:f4:62:ac:4a:84:76:bc:ae:29:23:68:2d:99:
                    5d:d9:19:b4:94:1f:5b:6f:a3:2e:4f:58:a6:cd:6c:
                    49:7e:8e:ae:10:e7:f6:6a:bd:f0:ab:f0:58:1a:fa:
                    a0:95:0e:8f:04:55:88:9f:f1:d2:64:aa:fb:00:42:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BB:99:14:54:21:48:89:9B:AF:B7:E4:12:4D:03:C8:CE:7D:9A:F7
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230312e3135392e3230302e302f32312d3231203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:a4:ae:0d:a5:0d:14:0f:c6:9c:79:c1:0b:91:e6:62:4e:f5:
         90:24:df:55:81:53:bf:f4:fc:49:cd:ee:08:39:f2:09:27:14:
         dd:86:b2:9a:86:18:94:df:57:a2:2a:2d:42:05:a4:7a:85:f1:
         b0:fd:3f:86:2f:16:91:c3:20:71:6f:80:ea:f9:d1:22:d6:19:
         1a:55:17:dd:39:61:2d:db:42:d3:a9:a8:49:a3:57:e9:12:d9:
         c3:5b:70:0b:a6:66:3c:f2:cb:74:69:67:9b:6a:33:80:bd:63:
         5c:a5:9d:77:b2:e9:5a:57:b0:30:17:b6:a2:db:29:7f:41:f0:
         44:1f:20:f5:02:ca:bf:05:c0:d8:8e:98:e9:d5:d8:e2:e0:40:
         c4:ce:28:05:68:ed:17:0b:aa:90:a6:77:32:0a:be:e2:c4:39:
         1a:06:65:82:60:41:3a:12:63:57:1e:00:86:14:5d:24:79:f8:
         c5:b4:42:ea:81:c6:30:ed:64:7b:ee:30:1c:ff:7d:6d:6a:fc:
         68:ca:87:96:63:ff:3b:08:de:90:35:85:b0:36:6c:50:bf:d4:
         31:30:6f:1a:ad:e1:39:fd:6b:d4:90:a6:08:3d:2a:1c:3f:9f:
         c1:97:c9:14:0b:42:9b:b3:90:c4:ef:96:e1:e9:43:5e:80:19:
         46:2d:bf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org