Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34342d3634203d3e203238303032.roa
File:                     323030313a313363373a373032303a3a2f34342d3634203d3e203238303032.roa (raw, json)
Hash identifier:          7awZG60I4tbU22YO7cc0k7uAjivM2Q3oqYvEccytzGM=
Subject key identifier:   17:3D:FD:7D:8A:52:3B:7D:5D:F6:F9:2A:9E:2E:E8:10:C4:23:EB:7E
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       0FFC5DB58BC3E1635F8ED47FB194392C5078F91C
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34342d3634203d3e203238303032.roa
Signing time:             Tue 05 Mar 2024 17:39:53 +0000
ROA not before:           Tue 05 Mar 2024 17:34:53 +0000
ROA not after:            Tue 04 Mar 2025 17:39:53 +0000
asID:                     28002
IP address blocks:        2001:13c7:7020::/44 maxlen: 64

Validation:               Failed, certificate revoked on Thu 02 May 2024 17:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fc:5d:b5:8b:c3:e1:63:5f:8e:d4:7f:b1:94:39:2c:50:78:f9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:53 2024 GMT
            Not After : Mar  4 17:39:53 2025 GMT
        Subject: CN=173DFD7D8A523B7D5DF6F92A9E2EE810C423EB7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:77:e4:94:5e:4b:2c:06:9b:21:7c:5e:d0:
                    f2:e8:24:ec:ce:5e:24:e5:5f:23:05:b8:98:42:0c:
                    80:60:a3:a7:67:6e:9c:71:77:59:45:4e:45:59:f0:
                    61:10:7a:78:80:50:f5:3a:d4:7f:a1:59:a2:c7:47:
                    a4:2f:ad:5c:40:c5:1a:ac:d2:b7:1d:6c:28:3f:f9:
                    23:f9:b4:e8:eb:36:99:e0:86:c1:e4:67:20:ac:ec:
                    b4:8e:15:46:71:73:0f:2a:0d:ef:23:6a:22:78:1b:
                    f7:8d:43:44:4f:d8:56:4e:68:e1:35:aa:6f:9e:28:
                    01:1f:97:19:c3:72:e9:b0:8a:3b:28:9b:16:b4:69:
                    a1:9d:83:e1:68:6d:11:2b:5b:d9:a7:12:b9:9e:41:
                    e1:1e:bb:92:fa:1d:e7:38:8e:2b:96:99:63:04:ee:
                    bc:51:7c:80:a9:db:5e:65:a9:58:78:70:48:83:9f:
                    ce:ec:a5:a7:92:e4:b5:d3:77:5b:a7:4e:54:51:24:
                    9b:81:5e:85:16:21:1f:9b:10:40:03:56:a3:aa:02:
                    84:37:b0:cf:e3:99:78:a5:11:16:43:62:45:99:14:
                    e1:35:bf:a8:11:2c:55:84:b6:20:ff:75:55:86:cb:
                    d7:59:ca:8d:02:2e:be:0f:b1:e6:b9:28:fd:fd:08:
                    c4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3D:FD:7D:8A:52:3B:7D:5D:F6:F9:2A:9E:2E:E8:10:C4:23:EB:7E
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34342d3634203d3e203238303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         9e:6b:6f:5f:7e:67:6a:d3:9a:26:f5:d1:a7:9e:e7:fc:3f:0d:
         49:94:80:d3:30:e5:ca:50:a6:f4:42:d7:f8:d3:34:88:6e:00:
         d4:da:54:46:30:b8:c6:e2:eb:46:e3:b8:4a:82:6f:86:8a:bb:
         d7:4b:93:1b:a3:18:42:ed:f6:35:f1:d0:c3:3e:68:fb:05:cf:
         09:f6:a4:29:72:6f:d8:1a:4b:7b:43:13:0b:0f:68:a5:ce:16:
         7a:12:d3:03:b3:20:25:4f:ac:b8:d3:1d:19:c5:ba:d9:ea:70:
         3c:ba:3d:e7:a8:4e:02:5b:a6:44:2f:38:8a:07:c0:27:70:f1:
         27:05:89:fe:36:7b:12:ae:de:8c:f6:18:96:c9:38:6f:c1:ea:
         0f:4e:6e:a8:09:8e:91:67:e2:a2:ca:c3:a2:9a:e3:f4:cc:70:
         fb:2b:dc:ac:86:74:8e:ae:fd:ba:9f:9f:23:c2:f9:47:17:6b:
         97:14:99:15:cf:22:fd:3d:1a:4b:82:a0:bc:b4:a5:9f:a3:1f:
         81:b7:a1:03:ef:a7:8c:e5:35:ca:11:d1:09:bb:f3:95:97:98:
         25:b4:ec:ca:d5:92:d8:9d:31:62:20:ac:17:ac:04:77:86:f0:
         ec:4d:36:f8:aa:0c:24:2a:6c:d5:ac:bc:7b:c7:8e:28:ac:7f:
         64:3b:16:2a
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUD/xdtYvD4WNfjtR/sZQ5LFB4+RwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1NkI5MDExQUU4QzlBREREOTY4MDNERUNFMUQxRjkz
MDZEODFERTAeFw0yNDAzMDUxNzM0NTNaFw0yNTAzMDQxNzM5NTNaMDMxMTAvBgNV
BAMTKDE3M0RGRDdEOEE1MjNCN0Q1REY2RjkyQTlFMkVFODEwQzQyM0VCN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0nfklF5LLAabIXxe0PLoJOzO
XiTlXyMFuJhCDIBgo6dnbpxxd1lFTkVZ8GEQeniAUPU61H+hWaLHR6QvrVxAxRqs
0rcdbCg/+SP5tOjrNpnghsHkZyCs7LSOFUZxcw8qDe8jaiJ4G/eNQ0RP2FZOaOE1
qm+eKAEflxnDcumwijsomxa0aaGdg+FobRErW9mnErmeQeEeu5L6Hec4jiuWmWME
7rxRfICp215lqVh4cEiDn87spaeS5LXTd1unTlRRJJuBXoUWIR+bEEADVqOqAoQ3
sM/jmXilERZDYkWZFOE1v6gRLFWEtiD/dVWGy9dZyo0CLr4Psea5KP39CMQ/AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUFz39fYpSO31d9vkqni7oEMQj634wHwYDVR0j
BBgwFoAUH1a5ARroya3dloA97OHR+TBtgd4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUMzM0Q0QUM4NDQ0MzlEOTQ1RjJGQTlGN0JCNzhGMDY0
NjhFMjJDOEJGNTgzNEE1NjhDQzAwMDQ5QUMzQTdCLzAvMUY1NkI5MDExQUU4QzlB
REREOTY4MDNERUNFMUQxRjkzMDZEODFERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjU2QjkwMTFBRThDOUFEREQ5
NjgwM0RFQ0UxRDFGOTMwNkQ4MURFLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFDMzNENEFDODQ0NDM5RDk0NUYyRkE5RjdCQjc4RjA2NDY4RTIyQzhC
RjU4MzRBNTY4Q0MwMDA0OUFDM0E3Qi8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzcz
MDMyMzAzYTNhMmYzNDM0MmQzNjM0MjAzZDNlMjAzMjM4MzAzMDMyLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcEIAETx3AgMA0GCSqGSIb3DQEBCwUAA4IBAQCea29ffmdq05om9dGnnuf8Pw1J
lIDTMOXKUKb0Qtf40zSIbgDU2lRGMLjG4utG47hKgm+GirvXS5MboxhC7fY18dDD
Pmj7Bc8J9qQpcm/YGkt7QxMLD2ilzhZ6EtMDsyAlT6y40x0ZxbrZ6nA8uj3nqE4C
W6ZELziKB8AncPEnBYn+NnsSrt6M9hiWyThvweoPTm6oCY6RZ+KiysOimuP0zHD7
K9yshnSOrv26n58jwvlHF2uXFJkVzyL9PRpLgqC8tKWfox+Bt6ED76eM5TXKEdEJ
u/OVl5gltOzK1ZLYnTFiIKwXrAR3hvDsTTb4qgwkKmzVrLx7x44orH9kOxYq
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org