Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3234382e302f32342d3234203d3e20323632313534.roa
File:                     3230302e35352e3234382e302f32342d3234203d3e20323632313534.roa (raw, json)
Hash identifier:          GlwUAgyWTOGMKN8MwK195XRyKzm1gvWQp4ox+2w7DC0=
Subject key identifier:   00:CD:C0:3B:19:70:6E:5B:2E:70:D1:88:79:F8:7E:7F:75:B9:90:3B
Certificate issuer:       /CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
Certificate serial:       4D22396CAFDBE7B6BE5BE15FE1A51FD9768D000D
Authority key identifier: 5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3234382e302f32342d3234203d3e20323632313534.roa
Signing time:             Tue 05 Mar 2024 18:11:44 +0000
ROA not before:           Tue 05 Mar 2024 18:06:44 +0000
ROA not after:            Tue 04 Mar 2025 18:11:44 +0000
asID:                     262154
IP address blocks:        200.55.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 May 2024 17:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:22:39:6c:af:db:e7:b6:be:5b:e1:5f:e1:a5:1f:d9:76:8d:00:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
        Validity
            Not Before: Mar  5 18:06:44 2024 GMT
            Not After : Mar  4 18:11:44 2025 GMT
        Subject: CN=00CDC03B19706E5B2E70D18879F87E7F75B9903B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:cb:77:77:87:88:4d:83:39:11:1a:f9:fa:
                    04:2d:da:9a:e5:a4:2c:5b:48:9c:1b:2c:f5:60:99:
                    5a:72:d5:bd:c3:3a:18:d7:42:81:59:4c:f7:84:12:
                    d6:fb:98:01:10:a7:18:74:39:cd:35:9c:41:a0:b9:
                    26:76:33:a1:ec:8e:ea:35:05:15:15:43:81:ab:94:
                    a4:75:4b:a7:f3:cf:3f:1a:7f:46:b1:01:0f:27:f9:
                    ed:ef:b6:27:39:25:48:85:31:22:15:d3:7a:ec:d8:
                    d3:d9:cf:00:bd:0b:00:fc:b1:9d:75:36:55:84:29:
                    9f:bd:3c:14:56:13:4b:4c:65:82:61:da:5e:e1:59:
                    14:bc:a4:5e:ff:a4:21:50:87:e5:a5:ea:af:e8:8b:
                    fb:04:b6:08:16:e0:81:11:bb:f8:b8:12:12:44:7e:
                    79:da:4d:90:57:6d:46:11:8f:52:17:aa:be:22:8a:
                    73:3b:79:58:b0:b2:1f:e9:69:fd:43:78:e0:f0:fe:
                    10:74:f4:2e:11:bd:eb:9e:d6:0b:c4:c0:93:f3:92:
                    ad:1c:fb:a7:03:b3:db:fd:f2:9c:8c:b0:98:8a:f5:
                    8c:2b:4b:80:36:d4:b9:98:76:0a:98:ef:15:f3:92:
                    d3:69:b3:12:2b:a4:d3:64:0c:57:0d:a7:a1:69:64:
                    a2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CD:C0:3B:19:70:6E:5B:2E:70:D1:88:79:F8:7E:7F:75:B9:90:3B
            X509v3 Authority Key Identifier:
                keyid:5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3234382e302f32342d3234203d3e20323632313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:10:e5:02:4e:b9:5e:00:1a:4e:0d:8f:cd:c0:e9:67:12:8b:
         a5:16:3b:61:12:66:1a:24:c8:a6:81:fc:ac:eb:28:6b:c8:3c:
         6e:3a:e3:0e:74:03:27:60:11:c4:a4:88:bb:04:12:63:d9:49:
         16:c5:d7:cc:3c:25:2f:de:59:72:27:ad:5e:3e:b2:09:16:b1:
         ff:1f:f5:5a:1d:69:f4:0c:6d:3f:6f:4d:50:6c:d9:90:c6:11:
         c0:02:1c:1a:30:4b:ec:97:7d:e9:fe:4e:09:fc:b2:df:cd:e3:
         50:85:95:b3:28:98:ae:10:23:58:cc:03:a0:ae:eb:72:60:ab:
         45:bb:46:48:c1:77:50:81:b9:57:e5:46:6f:9c:24:77:61:0c:
         e0:56:a8:af:12:28:fe:07:1c:c1:9e:03:09:98:48:3e:ce:72:
         45:18:a8:e9:77:60:b9:f7:0d:4c:d8:4a:31:94:33:20:5c:0e:
         ea:46:0b:32:77:a1:c6:cb:c0:5a:92:3c:c6:f1:50:97:a0:53:
         3c:3a:d3:03:ff:59:b1:76:da:28:f5:9b:65:4d:e8:48:79:06:
         52:0e:54:bf:09:96:32:01:ca:bf:93:3a:9e:c4:e6:0d:d8:a2:
         2e:70:e1:09:6d:35:62:40:cf:0e:74:5c:92:a1:ef:52:20:5f:
         ff:3c:8a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 19:53:44 2024 by rpki-client on console-ams.rpki-client.org