Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38382e302f32342d3332203d3e20323830303031.roa
File:                     3230302e302e38382e302f32342d3332203d3e20323830303031.roa (raw, json)
Hash identifier:          tY3uJErc85vmE2Fc1W9/NaijWOMJrZEmt5DN4jYilEw=
Subject key identifier:   10:42:32:10:7D:DD:13:6B:05:37:2A:A1:E6:20:6C:55:3E:05:1B:EC
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       208CFEAC8CF0FD80639C3FAF79C742FE06B042D1
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38382e302f32342d3332203d3e20323830303031.roa
Signing time:             Tue 05 Mar 2024 17:39:58 +0000
ROA not before:           Tue 05 Mar 2024 17:34:58 +0000
ROA not after:            Tue 04 Mar 2025 17:39:58 +0000
asID:                     280001
IP address blocks:        200.0.88.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Thu 02 May 2024 17:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8c:fe:ac:8c:f0:fd:80:63:9c:3f:af:79:c7:42:fe:06:b0:42:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:58 2024 GMT
            Not After : Mar  4 17:39:58 2025 GMT
        Subject: CN=104232107DDD136B05372AA1E6206C553E051BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:07:a6:bf:d7:c6:de:58:28:e3:75:01:4b:
                    d5:86:db:c5:c8:02:93:46:c8:58:63:25:70:d5:76:
                    1c:59:54:89:58:78:36:a3:22:6a:40:d5:89:47:d3:
                    87:fb:42:f7:05:6a:28:d5:b2:72:a6:fb:e5:34:23:
                    7e:06:2f:61:79:09:a7:dc:11:69:c9:15:98:14:33:
                    e1:42:27:a3:78:cb:b9:b6:6f:65:4e:00:3f:13:bd:
                    3f:d7:9d:c2:ea:ed:bd:e1:59:b7:05:90:43:de:48:
                    6d:1f:27:e1:13:24:69:82:66:ac:ba:f0:74:44:2d:
                    88:a6:83:80:b5:f2:c6:90:91:5d:ed:8d:cc:a0:c6:
                    98:77:45:eb:c2:1a:f2:07:67:d6:df:60:fd:59:1c:
                    1d:05:c5:8c:ce:21:eb:dc:7e:ee:9c:8c:b0:3d:d4:
                    b3:f8:e2:22:7f:55:32:9d:0a:cc:4b:da:52:22:0f:
                    c0:f9:61:f5:05:6e:01:42:96:39:e3:55:34:8f:63:
                    a0:a3:26:33:de:65:90:5e:5c:af:7b:71:7e:6b:71:
                    a6:16:00:b8:22:b6:fa:d4:44:ec:65:a1:a6:87:e9:
                    69:07:da:7d:2c:a2:97:3c:44:47:f9:bd:d0:4f:d3:
                    41:22:1e:d1:b8:a6:60:1f:db:2d:19:48:2e:76:09:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:42:32:10:7D:DD:13:6B:05:37:2A:A1:E6:20:6C:55:3E:05:1B:EC
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38382e302f32342d3332203d3e20323830303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:48:5f:56:15:4f:69:61:6f:59:b1:ba:d7:da:6b:b1:90:dd:
         bb:bb:1d:d3:38:fa:5d:9d:cc:fc:bf:2b:d6:65:7d:0b:7a:d5:
         0b:5a:44:30:52:2b:61:53:cc:6b:86:c8:78:f4:30:17:27:b9:
         7b:dd:72:00:a9:6b:b2:5b:75:a2:ce:c1:d0:43:7f:e6:45:77:
         4c:aa:fb:d5:4e:9d:5d:20:ed:18:0f:cb:7a:18:a3:20:eb:1a:
         2c:09:38:00:31:e8:29:29:2a:af:16:f5:1e:85:09:b9:9d:39:
         46:13:69:27:ce:90:d7:f6:ea:11:06:62:3c:ba:d4:b1:25:fe:
         cf:b7:00:d4:c2:97:a2:24:29:0a:f9:04:99:9a:fa:d5:7e:d2:
         01:99:4e:ee:2c:d7:67:5f:5c:83:bc:20:10:45:92:01:5b:34:
         c4:3f:6b:f6:89:1f:18:1e:bc:7c:80:b8:24:40:79:95:be:b8:
         19:39:f9:37:83:7a:8e:89:dd:99:e9:2d:3c:e8:84:c1:c0:59:
         d7:e4:99:70:2b:df:cf:27:d3:a9:b0:e7:f1:f8:31:27:07:da:
         0f:64:4b:bf:75:41:77:23:73:4a:ce:f8:87:85:84:39:0d:aa:
         cd:de:aa:83:7b:b7:25:16:41:16:1b:46:36:38:e5:c0:08:fa:
         4c:b3:22:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org