Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3139302e3131322e35322e302f32322d3235203d3e203238303030.roa
File:                     3139302e3131322e35322e302f32322d3235203d3e203238303030.roa (raw, json)
Hash identifier:          nQwLzRbpHuUHMGuxHvwwHzOIJbp3iIJFcIwWwUpyqbY=
Subject key identifier:   80:40:83:9A:39:6D:05:BC:DC:A7:2E:4F:A2:CB:7B:6D:09:08:5A:2C
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       6ECDEDAE22FF64DE4B2B06CE385477C39C585A24
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3139302e3131322e35322e302f32322d3235203d3e203238303030.roa
Signing time:             Tue 05 Mar 2024 17:39:54 +0000
ROA not before:           Tue 05 Mar 2024 17:34:54 +0000
ROA not after:            Tue 04 Mar 2025 17:39:54 +0000
asID:                     28000
IP address blocks:        190.112.52.0/22 maxlen: 25

Validation:               Failed, certificate revoked on Thu 02 May 2024 18:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cd:ed:ae:22:ff:64:de:4b:2b:06:ce:38:54:77:c3:9c:58:5a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:54 2024 GMT
            Not After : Mar  4 17:39:54 2025 GMT
        Subject: CN=8040839A396D05BCDCA72E4FA2CB7B6D09085A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:a0:33:64:38:03:5c:16:61:ec:0b:38:60:
                    bf:c0:e1:30:99:00:1a:cc:be:12:87:8b:07:31:2c:
                    c9:9b:91:03:60:e5:fe:0d:3c:c8:11:77:2a:f4:01:
                    e2:19:8c:04:a7:b1:02:e7:53:87:7a:dd:78:10:2c:
                    4d:a3:e1:83:c9:53:81:7b:e3:79:86:44:9f:f6:47:
                    79:ea:4e:a7:a5:13:a0:33:47:e5:a7:ed:d0:a4:e0:
                    8c:9a:72:14:c4:f4:31:86:26:45:10:a8:4a:1b:3d:
                    c8:20:1c:9a:b6:9c:5c:7c:7b:a1:43:29:2c:a6:43:
                    f9:63:6d:f6:94:c4:b1:30:03:7d:68:31:de:1d:e8:
                    3e:3f:4e:da:3a:14:9c:db:8f:97:80:48:3c:7e:54:
                    29:4d:ea:33:83:51:0b:f7:f8:23:33:1d:35:ae:51:
                    62:14:71:53:c3:95:4b:ec:6b:8f:b4:75:2e:43:91:
                    55:73:04:cb:9b:3d:9a:8a:ee:a0:65:ac:40:2a:84:
                    cd:81:7e:95:90:45:50:2b:93:ff:c4:5d:1f:20:8f:
                    83:12:29:dd:0e:0e:3b:7b:4c:7d:71:91:b2:eb:92:
                    07:c8:56:81:d0:16:10:42:44:f1:c4:a7:7c:bb:20:
                    fe:47:5e:90:3b:d5:f1:42:9e:7e:94:c6:8e:58:9b:
                    53:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:40:83:9A:39:6D:05:BC:DC:A7:2E:4F:A2:CB:7B:6D:09:08:5A:2C
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3139302e3131322e35322e302f32322d3235203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:c7:de:69:b6:96:c6:60:4f:ba:ac:7d:a8:22:a3:db:f6:de:
         f9:20:dc:5d:aa:9a:06:cf:97:1d:28:03:1d:35:2f:9a:51:78:
         78:b8:78:fd:45:7d:3e:7e:50:7d:5a:fc:2b:1f:ae:54:ac:6f:
         7e:9b:32:9c:13:a7:59:6f:33:ba:b8:b1:47:50:de:9c:38:cb:
         e8:0e:f3:a0:d5:86:03:d1:04:b5:33:f5:ca:2e:db:d2:b4:95:
         7c:7c:53:9e:d6:8f:31:81:7d:92:b8:d0:4d:3e:83:f8:41:2f:
         50:20:15:ed:5c:60:80:64:d6:b2:e6:39:8a:b8:69:0d:87:80:
         df:c1:bd:c8:11:95:4c:e2:61:6b:e6:90:d8:55:d3:40:7f:a7:
         fe:35:d5:7e:ba:d1:fa:ed:12:c0:77:3a:33:dd:1a:95:6d:78:
         71:6b:25:fe:75:21:7f:f9:d7:e7:88:e0:37:d1:76:a0:33:67:
         ea:f5:c0:ca:b9:b6:2e:48:b5:ed:9a:79:af:b5:11:34:a9:84:
         2d:52:e0:dc:52:ac:4f:59:9f:d2:b0:28:09:a3:1b:fd:e2:a4:
         c8:18:42:f9:02:35:d8:43:5c:5f:ac:cc:00:9f:7d:de:7c:94:
         dc:81:52:ed:58:5f:8d:45:f3:b1:b6:76:7c:7d:1c:c4:9c:0a:
         7e:5f:9e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:42:23 2024 by rpki-client on console-ams.rpki-client.org