Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230312e3135392e3230302e302f32342d3234203d3e203133393939.roa
File:                     3230312e3135392e3230302e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          uClKfbsqWzTftqvePPe+DyNjjKsyB63CDE3fk7NwOJs=
Subject key identifier:   BF:BC:73:36:12:EC:96:E9:21:47:C0:22:F9:CF:90:97:9B:C8:A8:E1
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       66BD30E7B178F24A93E16E8399925419DF3BC787
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230312e3135392e3230302e302f32342d3234203d3e203133393939.roa
Signing time:             Tue 05 Mar 2024 17:50:52 +0000
ROA not before:           Tue 05 Mar 2024 17:45:52 +0000
ROA not after:            Tue 04 Mar 2025 17:50:52 +0000
asID:                     13999
IP address blocks:        201.159.200.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bd:30:e7:b1:78:f2:4a:93:e1:6e:83:99:92:54:19:df:3b:c7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: Mar  5 17:45:52 2024 GMT
            Not After : Mar  4 17:50:52 2025 GMT
        Subject: CN=BFBC733612EC96E92147C022F9CF90979BC8A8E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:af:40:d3:d9:a5:6a:67:02:d9:4f:a5:a9:6b:
                    eb:6e:3d:3d:63:1f:84:eb:39:ed:e0:ad:39:c4:72:
                    13:f2:17:5a:4a:51:af:6b:1f:c7:6d:bb:f7:ce:35:
                    5a:4c:e6:51:5b:f7:c2:b5:8e:ce:85:ef:50:9d:d1:
                    a0:e5:c0:e6:bd:4c:e5:f0:aa:28:04:64:de:ac:3b:
                    ff:2c:de:b6:ed:a4:ad:d6:a4:aa:12:20:94:d4:cc:
                    5d:ba:81:ef:34:f6:60:63:2a:dc:75:9c:36:40:57:
                    01:c4:66:0b:51:9f:da:71:00:06:4b:02:68:d6:84:
                    86:56:04:36:3e:e5:8b:01:c9:12:2c:51:b1:d9:97:
                    40:65:26:23:0f:cd:b8:30:c7:da:f1:ea:cb:5a:1e:
                    3f:e6:aa:fe:7e:4b:21:28:93:7c:de:c5:00:2b:e6:
                    e2:02:52:d7:23:e2:01:b2:a3:b5:56:81:c4:bb:d7:
                    4a:43:1e:ff:ed:a2:09:de:b9:22:88:06:d5:c5:14:
                    e5:cf:a5:44:bb:6d:0b:30:76:d7:90:f2:49:1d:83:
                    2e:b9:2b:1f:7a:27:65:d7:87:08:a3:71:82:8d:7d:
                    26:f9:7d:27:19:8e:82:bc:23:d0:d7:2a:2e:a5:52:
                    75:40:4c:22:45:9f:30:8e:49:ea:1b:ad:3c:82:9c:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BC:73:36:12:EC:96:E9:21:47:C0:22:F9:CF:90:97:9B:C8:A8:E1
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230312e3135392e3230302e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ae:a3:28:3b:db:b3:21:d1:dd:83:35:6c:84:3e:64:3e:9f:
         38:0e:46:d0:11:78:79:db:28:98:9a:a8:be:11:86:7d:83:9d:
         06:e1:b4:7f:45:73:71:3d:9d:53:7e:11:09:7b:02:0d:e1:31:
         31:15:65:2f:a1:86:37:8c:eb:10:d2:20:57:b2:40:91:a9:c7:
         62:3b:81:a1:f9:48:81:dc:b8:81:0f:6d:e1:8f:75:8e:1c:05:
         e6:e7:a0:e4:9b:a2:23:cf:47:e7:89:df:7a:a9:f1:18:80:0b:
         69:ba:2d:2d:39:f5:1f:ba:34:3a:69:7b:2e:0d:db:00:c9:73:
         20:a4:c4:df:90:ee:83:48:e9:15:24:f9:b9:ae:0b:0b:07:6a:
         ba:36:9d:aa:90:d2:4b:d6:96:be:4e:f6:d9:68:97:17:85:f3:
         14:12:63:8f:44:1f:2b:1d:70:bd:91:f6:a1:6e:55:8a:60:40:
         6f:4b:c1:6e:fb:7e:82:94:86:84:55:27:c9:b2:f0:6d:ce:ec:
         69:ef:9c:ed:9e:87:7e:e3:6f:bf:c1:5f:af:c1:45:94:f1:e3:
         ef:c5:77:ce:f9:55:57:ec:f0:5f:5b:83:82:1f:fe:2f:55:ac:
         d9:31:e4:2c:e9:8a:39:76:b8:ec:31:ee:73:7e:bb:d5:28:0c:
         a1:9b:c8:59
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZr0w57F48kqT4W6DmZJUGd87x4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDAzMDUxNzQ1NTJaFw0yNTAzMDQxNzUwNTJaMDMxMTAvBgNV
BAMTKEJGQkM3MzM2MTJFQzk2RTkyMTQ3QzAyMkY5Q0Y5MDk3OUJDOEE4RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlr0DT2aVqZwLZT6Wpa+tuPT1j
H4TrOe3grTnEchPyF1pKUa9rH8dtu/fONVpM5lFb98K1js6F71Cd0aDlwOa9TOXw
qigEZN6sO/8s3rbtpK3WpKoSIJTUzF26ge809mBjKtx1nDZAVwHEZgtRn9pxAAZL
AmjWhIZWBDY+5YsByRIsUbHZl0BlJiMPzbgwx9rx6staHj/mqv5+SyEok3zexQAr
5uICUtcj4gGyo7VWgcS710pDHv/togneuSKIBtXFFOXPpUS7bQswdteQ8kkdgy65
Kx96J2XXhwijcYKNfSb5fScZjoK8I9DXKi6lUnVATCJFnzCOSeobrTyCnHwbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUv7xzNhLslukhR8Ai+c+Ql5vIqOEwHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5NzI3N0Q1Mzk2QjYzMTc0REIw
QzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzMyMzAzMTJlMzEzNTM5MmUzMjMwMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyZ/I
MA0GCSqGSIb3DQEBCwUAA4IBAQBVrqMoO9uzIdHdgzVshD5kPp84DkbQEXh52yiY
mqi+EYZ9g50G4bR/RXNxPZ1TfhEJewIN4TExFWUvoYY3jOsQ0iBXskCRqcdiO4Gh
+UiB3LiBD23hj3WOHAXm56Dkm6Ijz0fnid96qfEYgAtpui0tOfUfujQ6aXsuDdsA
yXMgpMTfkO6DSOkVJPm5rgsLB2q6Np2qkNJL1pa+TvbZaJcXhfMUEmOPRB8rHXC9
kfahblWKYEBvS8Fu+36ClIaEVSfJsvBtzuxp75ztnod+42+/wV+vwUWU8ePvxXfO
+VVX7PBfW4OCH/4vVazZMeQs6Yo5drjsMe5zfrvVKAyhm8hZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org