Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34342d3634203d3e20323634383435.roa
File:                     323030313a313363373a373032303a3a2f34342d3634203d3e20323634383435.roa (raw, json)
Hash identifier:          pkm/RMOkjFI01ja5cxHC2ZzxsfHw8l/b3I3nYIodb94=
Subject key identifier:   1B:E0:AF:AD:BD:00:7C:03:D9:A1:7A:7F:24:9B:F2:27:E6:33:3C:13
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       3A7E9029DFB1B9CA262C716C324FD9534DE6C5D6
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34342d3634203d3e20323634383435.roa
Signing time:             Tue 05 Mar 2024 17:39:55 +0000
ROA not before:           Tue 05 Mar 2024 17:34:55 +0000
ROA not after:            Tue 04 Mar 2025 17:39:55 +0000
asID:                     264845
IP address blocks:        2001:13c7:7020::/44 maxlen: 64

Validation:               Failed, certificate revoked on Thu 02 May 2024 18:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7e:90:29:df:b1:b9:ca:26:2c:71:6c:32:4f:d9:53:4d:e6:c5:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:55 2024 GMT
            Not After : Mar  4 17:39:55 2025 GMT
        Subject: CN=1BE0AFADBD007C03D9A17A7F249BF227E6333C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:c5:dd:c9:42:45:93:bd:89:36:05:19:6e:
                    81:c9:89:5f:cf:b7:fe:b6:97:98:83:5a:61:38:d2:
                    92:59:e4:73:0d:df:cb:86:97:12:8e:16:be:fb:ac:
                    68:64:d7:5a:cf:d2:f5:74:51:0c:2d:95:6d:68:3a:
                    e6:32:38:49:38:4f:b0:04:55:7a:91:00:ec:f6:14:
                    7b:51:75:33:59:a4:3d:c5:09:95:20:6e:b3:02:c8:
                    d3:5a:9e:b6:f2:7b:1d:14:eb:73:15:c6:37:06:bc:
                    17:c1:90:79:d0:98:51:44:0a:18:f7:5b:ba:6a:41:
                    0c:7a:36:c2:7c:57:20:60:09:bf:2f:dc:6f:7e:7e:
                    14:eb:65:77:23:85:c9:f9:dc:50:70:ea:a6:3b:e6:
                    ba:93:c1:56:4f:ab:f6:c9:71:1a:bd:e7:e8:0c:a1:
                    b3:44:8f:29:02:50:a8:7b:ca:ec:cd:78:50:09:2b:
                    ae:04:64:ad:da:ca:4a:f9:0c:2f:c5:a1:45:46:f1:
                    0a:fa:a1:54:10:82:4b:77:0b:ac:ef:3d:1c:20:e5:
                    bf:43:9f:94:7a:f8:fc:c7:c7:10:92:3d:66:ab:3d:
                    21:af:e6:4a:56:28:e7:a5:dc:15:23:26:49:1b:87:
                    e4:88:d2:fa:f3:5f:58:9b:00:5e:47:09:25:fd:7d:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E0:AF:AD:BD:00:7C:03:D9:A1:7A:7F:24:9B:F2:27:E6:33:3C:13
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34342d3634203d3e20323634383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         7a:4f:ef:4c:98:71:f9:21:f1:33:9a:c5:ea:f2:9d:fd:1b:fe:
         df:95:2c:0a:39:d8:bb:ee:b1:98:38:64:55:54:59:32:35:9d:
         f8:af:42:5e:aa:b2:de:53:92:a1:b9:47:a9:34:a3:1e:45:6c:
         fb:b4:a5:f0:84:fc:ad:aa:e7:2f:55:32:e0:0a:a6:01:2e:29:
         84:b4:25:ab:17:8f:56:6a:e3:a9:1c:82:7a:48:34:d3:c6:87:
         f0:e5:10:57:b0:37:04:f4:3e:fc:12:55:6f:3a:96:d8:f8:3f:
         9c:ae:92:e0:99:f2:fc:45:32:6b:0f:0b:2f:79:b4:3a:8b:69:
         a7:32:36:4c:8f:90:5f:9d:3e:ba:6b:ad:39:bc:be:1a:b6:3f:
         2a:ae:b7:73:c1:f3:59:cb:0e:52:25:6f:31:07:6e:f7:86:3b:
         82:e5:02:70:13:70:cf:ed:72:d7:fb:d1:88:9e:db:6b:56:cf:
         8f:d7:f8:f4:1e:39:88:8d:c2:b0:f0:fc:ae:f9:f4:18:90:a7:
         9b:3b:d8:9a:17:f2:a7:12:af:a5:60:88:7b:66:de:de:8c:f6:
         e1:4f:14:35:5c:58:dc:d3:6d:6e:22:e1:cb:e3:29:3e:36:9a:
         9b:d4:66:c8:dc:b5:6a:fc:90:b1:71:ec:77:bc:bc:d3:37:9b:
         0b:79:1c:7e
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUOn6QKd+xucomLHFsMk/ZU03mxdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1NkI5MDExQUU4QzlBREREOTY4MDNERUNFMUQxRjkz
MDZEODFERTAeFw0yNDAzMDUxNzM0NTVaFw0yNTAzMDQxNzM5NTVaMDMxMTAvBgNV
BAMTKDFCRTBBRkFEQkQwMDdDMDNEOUExN0E3RjI0OUJGMjI3RTYzMzNDMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6x8XdyUJFk72JNgUZboHJiV/P
t/62l5iDWmE40pJZ5HMN38uGlxKOFr77rGhk11rP0vV0UQwtlW1oOuYyOEk4T7AE
VXqRAOz2FHtRdTNZpD3FCZUgbrMCyNNanrbyex0U63MVxjcGvBfBkHnQmFFEChj3
W7pqQQx6NsJ8VyBgCb8v3G9+fhTrZXcjhcn53FBw6qY75rqTwVZPq/bJcRq95+gM
obNEjykCUKh7yuzNeFAJK64EZK3aykr5DC/FoUVG8Qr6oVQQgkt3C6zvPRwg5b9D
n5R6+PzHxxCSPWarPSGv5kpWKOel3BUjJkkbh+SI0vrzX1ibAF5HCSX9fRDjAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUG+Cvrb0AfAPZoXp/JJvyJ+YzPBMwHwYDVR0j
BBgwFoAUH1a5ARroya3dloA97OHR+TBtgd4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUMzM0Q0QUM4NDQ0MzlEOTQ1RjJGQTlGN0JCNzhGMDY0
NjhFMjJDOEJGNTgzNEE1NjhDQzAwMDQ5QUMzQTdCLzAvMUY1NkI5MDExQUU4QzlB
REREOTY4MDNERUNFMUQxRjkzMDZEODFERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjU2QjkwMTFBRThDOUFEREQ5
NjgwM0RFQ0UxRDFGOTMwNkQ4MURFLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFDMzNENEFDODQ0NDM5RDk0NUYyRkE5RjdCQjc4RjA2NDY4RTIyQzhC
RjU4MzRBNTY4Q0MwMDA0OUFDM0E3Qi8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzcz
MDMyMzAzYTNhMmYzNDM0MmQzNjM0MjAzZDNlMjAzMjM2MzQzODM0MzUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQgARPHcCAwDQYJKoZIhvcNAQELBQADggEBAHpP70yYcfkh8TOaxerynf0b
/t+VLAo52LvusZg4ZFVUWTI1nfivQl6qst5TkqG5R6k0ox5FbPu0pfCE/K2q5y9V
MuAKpgEuKYS0JasXj1Zq46kcgnpINNPGh/DlEFewNwT0PvwSVW86ltj4P5yukuCZ
8vxFMmsPCy95tDqLaacyNkyPkF+dPrprrTm8vhq2Pyqut3PB81nLDlIlbzEHbveG
O4LlAnATcM/tctf70Yie22tWz4/X+PQeOYiNwrDw/K759BiQp5s72JoX8qcSr6Vg
iHtm3t6M9uFPFDVcWNzTbW4i4cvjKT42mpvUZsjctWr8kLFx7He8vNM3mwt5HH4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org