Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3139302e3131322e35322e302f32322d3234203d3e203238303032.roa
File:                     3139302e3131322e35322e302f32322d3234203d3e203238303032.roa (raw, json)
Hash identifier:          qTnlHnm6vebN7sUJTpKFjCGNMiwlUR5Yca0e1keMbac=
Subject key identifier:   7B:E9:DF:1A:5F:B1:5A:55:52:D2:EE:06:9F:7F:D9:C0:52:A1:F5:47
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       411CBC7DC8BD6F0154B9E661503B71D183A28F78
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3139302e3131322e35322e302f32322d3234203d3e203238303032.roa
Signing time:             Tue 05 Mar 2024 17:39:59 +0000
ROA not before:           Tue 05 Mar 2024 17:34:59 +0000
ROA not after:            Tue 04 Mar 2025 17:39:59 +0000
asID:                     28002
IP address blocks:        190.112.52.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 02 May 2024 17:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1c:bc:7d:c8:bd:6f:01:54:b9:e6:61:50:3b:71:d1:83:a2:8f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:59 2024 GMT
            Not After : Mar  4 17:39:59 2025 GMT
        Subject: CN=7BE9DF1A5FB15A5552D2EE069F7FD9C052A1F547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e4:5b:fc:20:64:0a:cc:69:0f:07:82:7d:86:
                    d2:6d:7c:2e:80:3b:4f:3f:a8:2f:d1:ed:24:42:be:
                    e8:41:58:0d:73:f7:5d:c5:07:d6:46:a0:3d:98:0b:
                    1e:e5:78:2c:c2:59:15:4b:22:ce:bd:4e:51:92:d1:
                    57:25:80:b8:d5:6d:89:63:03:9c:3a:6d:14:2d:ff:
                    58:1f:82:8f:91:82:c5:a7:0b:4c:0a:21:a3:57:88:
                    76:b4:77:75:99:71:34:82:a5:15:21:89:fe:59:32:
                    a0:f6:42:65:3b:69:20:15:04:c5:f6:6c:33:4f:fa:
                    22:29:b4:e5:64:f4:2f:01:b9:78:62:d5:d4:0b:99:
                    12:e5:1f:02:28:b3:d1:08:47:ea:cd:f4:0c:42:62:
                    8f:83:e9:ac:41:86:ef:63:ca:1d:cc:f5:ab:05:e1:
                    49:77:56:ce:ca:98:8b:6f:2a:ef:12:88:42:e0:af:
                    29:a3:65:ac:e0:f2:fe:b1:92:88:ff:88:a8:32:62:
                    a4:6c:9e:2a:b2:9b:23:dc:fa:bf:60:35:6f:65:08:
                    d9:30:0e:f6:4f:40:19:1f:d6:14:da:e8:39:48:a0:
                    ef:f4:5d:cc:e7:03:12:49:65:41:40:29:b6:66:91:
                    8b:48:ae:98:50:56:b1:49:43:ae:ca:98:e9:1e:9b:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E9:DF:1A:5F:B1:5A:55:52:D2:EE:06:9F:7F:D9:C0:52:A1:F5:47
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3139302e3131322e35322e302f32322d3234203d3e203238303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:a9:96:32:a5:86:0e:16:5f:df:b9:e0:61:0a:aa:3d:d7:ea:
         cb:21:c7:c8:ad:91:f8:58:e8:aa:77:39:a2:08:fc:ea:68:ac:
         14:5e:5e:cc:ec:a8:50:7f:13:a6:2d:d9:0e:be:b9:96:81:97:
         2a:b3:7c:c4:7e:65:2c:d9:8d:0d:ae:29:97:a9:bd:7e:31:64:
         8a:2f:40:bd:80:b1:01:7f:94:ca:ee:c8:32:02:11:98:7c:38:
         15:df:39:2e:1f:45:ca:b3:2b:e8:76:a4:2c:0c:28:5e:ee:c4:
         7b:35:95:85:09:fd:f9:7e:57:0b:e9:5d:e7:5f:a2:11:6f:cb:
         8e:3a:44:f6:03:fb:6b:25:e1:8e:29:42:22:8a:15:f6:d2:80:
         c5:c5:0c:32:f3:28:59:71:f7:22:a5:0c:b9:b4:9a:39:36:73:
         5a:93:b5:e6:34:50:7d:3f:27:5e:12:c8:f8:f4:d2:d5:5a:7d:
         43:82:76:73:fb:2a:13:4d:56:d4:23:e5:2c:f6:7b:6a:a4:41:
         53:ee:9b:be:76:a7:81:d5:c1:04:ca:f0:da:eb:9a:0a:2f:70:
         1c:9a:c4:f3:2f:51:4d:66:d1:b6:35:a7:66:51:cc:69:44:c5:
         08:62:3f:ae:8b:73:48:c1:55:92:2d:a5:f2:d7:18:89:e8:a6:
         2a:52:67:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org