Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38302e302f32312d3234203d3e203238303635.roa
File:                     3230302e3131342e38302e302f32312d3234203d3e203238303635.roa (raw, json)
Hash identifier:          tRbasY0TJzUUHCXsfXYpgNiLju/S4Si/QPbrRcTORZw=
Subject key identifier:   16:6E:CD:FA:5A:3D:0A:D3:9A:C7:9A:99:14:09:D5:76:42:76:CB:69
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       61A6C96D2B735209B681CF7533A5ED5C2652A1AA
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38302e302f32312d3234203d3e203238303635.roa
Signing time:             Tue 05 Mar 2024 18:11:53 +0000
ROA not before:           Tue 05 Mar 2024 18:06:53 +0000
ROA not after:            Tue 04 Mar 2025 18:11:53 +0000
asID:                     28065
IP address blocks:        200.114.80.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Mon 16 Sep 2024 21:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a6:c9:6d:2b:73:52:09:b6:81:cf:75:33:a5:ed:5c:26:52:a1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Mar  5 18:06:53 2024 GMT
            Not After : Mar  4 18:11:53 2025 GMT
        Subject: CN=166ECDFA5A3D0AD39AC79A991409D5764276CB69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:09:53:70:bb:0d:7f:d8:58:a9:65:09:a6:
                    19:f5:bd:ec:f3:c7:86:a2:c6:30:9f:13:63:61:15:
                    ee:64:28:f3:b2:d3:7c:4a:26:d5:cd:6d:3f:75:a3:
                    41:a0:69:b2:6a:66:eb:1f:06:43:56:00:be:18:9c:
                    41:8b:cf:09:a3:08:b2:25:48:26:1b:b2:dd:6c:e3:
                    15:19:4a:e7:ab:08:86:b8:c4:9b:ef:7c:b2:d8:07:
                    94:1b:cc:86:c9:ea:7b:9d:68:35:fd:62:45:b1:d2:
                    73:b9:d3:36:a9:d9:af:ab:9e:bf:35:a0:e4:b9:4a:
                    15:32:4e:52:03:4e:6a:15:c3:90:12:ec:33:89:35:
                    94:2c:9a:22:af:c7:0a:8e:1d:9a:ba:e7:7f:ae:68:
                    e3:03:18:a1:c9:a4:ee:ef:c3:eb:73:0a:9f:96:e8:
                    58:41:af:81:a2:ad:bf:ac:89:c2:2b:3e:17:fa:7c:
                    63:26:23:25:2f:eb:08:ad:61:f8:b6:d1:4b:b4:03:
                    6c:ea:b8:2c:70:a6:8e:4c:e3:9b:b0:2b:5d:47:20:
                    23:38:61:29:3a:b8:7c:f8:19:b8:c2:73:4f:3c:96:
                    40:99:70:43:b6:ca:66:52:37:22:46:0c:41:4d:82:
                    03:17:58:db:29:ed:2c:52:0d:1d:6a:4e:4f:1e:7f:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6E:CD:FA:5A:3D:0A:D3:9A:C7:9A:99:14:09:D5:76:42:76:CB:69
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38302e302f32312d3234203d3e203238303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:1f:7f:05:e5:b4:79:2b:c3:34:e0:29:9e:d4:68:d0:09:5b:
         76:38:e0:07:57:b3:29:16:14:fe:6e:f1:6d:09:6d:86:35:dc:
         e1:50:ab:57:2e:ba:94:b2:54:40:29:8f:94:c8:65:71:98:bd:
         9d:fc:31:98:13:d5:6b:47:ad:8c:c5:8b:70:54:7e:59:b0:ab:
         a8:9e:22:aa:6e:95:33:b0:78:2c:2f:01:b0:6c:74:3a:54:69:
         79:06:ee:ac:56:0a:db:d6:b9:b8:3a:4d:b1:c7:1b:68:b0:7a:
         be:b5:6b:1a:12:8c:15:4a:23:5a:4d:a6:f5:94:d2:1d:6a:c8:
         68:15:06:ec:aa:24:81:8f:e5:b7:37:1a:15:3c:fd:3a:e6:db:
         e3:92:a1:dd:2b:7e:c7:8f:e4:d4:3c:fc:fd:b9:8d:75:dd:d5:
         51:32:4e:fc:4c:e3:8e:0b:b8:c5:0f:3e:b4:a7:ab:f9:b0:8f:
         ee:56:f1:4c:e3:96:37:ff:d6:25:8e:1a:ec:c8:d0:72:18:a9:
         e3:24:ac:54:d2:c4:01:19:d0:2c:34:cd:f4:df:47:6c:28:ab:
         bd:5f:18:b9:c5:01:9e:de:a9:ff:47:30:41:5a:93:20:a9:c7:
         c0:5b:6c:2a:b3:af:b8:05:cb:2e:ce:ae:85:78:ce:76:10:27:
         2b:4c:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----