Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235332e302f32342d3234203d3e20323632313534.roa
File:                     3230302e35352e3235332e302f32342d3234203d3e20323632313534.roa (raw, json)
Hash identifier:          WwsHSTLr7BboTTed5eSBHZhO3zP9gH9A0A0XWT0/ToI=
Subject key identifier:   1E:7D:82:DE:9E:E3:F4:14:BF:6B:F7:BB:55:14:D5:22:59:CF:CE:BE
Certificate issuer:       /CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
Certificate serial:       6C4BF169444D5DE0023146937BFC7885DD678683
Authority key identifier: 5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235332e302f32342d3234203d3e20323632313534.roa
Signing time:             Tue 05 Mar 2024 18:11:42 +0000
ROA not before:           Tue 05 Mar 2024 18:06:42 +0000
ROA not after:            Tue 04 Mar 2025 18:11:42 +0000
asID:                     262154
IP address blocks:        200.55.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 May 2024 17:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4b:f1:69:44:4d:5d:e0:02:31:46:93:7b:fc:78:85:dd:67:86:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
        Validity
            Not Before: Mar  5 18:06:42 2024 GMT
            Not After : Mar  4 18:11:42 2025 GMT
        Subject: CN=1E7D82DE9EE3F414BF6BF7BB5514D52259CFCEBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:f9:c5:48:03:50:91:40:42:b9:d2:94:8d:
                    08:59:ba:e5:f4:a1:a7:5c:a2:09:d7:1b:0b:d4:55:
                    cf:eb:e0:52:fa:e4:1e:b7:18:c3:3d:1e:7d:5a:7a:
                    e6:f6:6a:59:5d:df:c5:cb:ed:ee:e6:d3:a1:3f:9e:
                    8e:ea:0b:fe:b8:10:c9:24:37:f9:d0:cb:82:4e:1a:
                    98:91:4f:8f:5d:a7:f0:86:43:7f:1e:b9:a4:30:ca:
                    43:34:52:a9:c9:e0:67:bf:1f:6b:bf:aa:a0:67:f5:
                    39:36:be:9f:9f:6c:f5:e3:38:61:06:11:56:fa:a3:
                    13:76:10:db:e6:7c:15:4d:c7:26:23:fd:98:21:70:
                    81:ce:b7:f6:1c:e8:d3:76:00:6e:ff:f9:ec:a9:5e:
                    3f:ca:f6:f0:3e:59:c2:57:ee:4d:0c:2e:54:dc:0b:
                    34:bd:6d:ee:7e:6c:3d:f1:b9:f3:eb:58:90:28:7b:
                    55:1a:31:f2:a5:02:a0:86:08:c7:b1:b5:13:f2:39:
                    cd:98:2c:f7:84:8a:49:04:9c:00:0d:c3:e8:9e:84:
                    7f:92:2d:71:f1:9a:c4:1c:f7:f8:a7:95:a2:73:c5:
                    c1:38:b7:2d:3c:22:9d:b1:8a:bc:fa:2e:8a:8f:8f:
                    66:52:24:d9:e1:03:67:a7:61:7e:00:1a:fe:55:1a:
                    6b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7D:82:DE:9E:E3:F4:14:BF:6B:F7:BB:55:14:D5:22:59:CF:CE:BE
            X509v3 Authority Key Identifier:
                keyid:5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235332e302f32342d3234203d3e20323632313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:20:0a:42:65:b3:fb:3c:00:87:b0:ca:30:e9:aa:95:c4:1e:
         70:a5:e7:04:1d:77:5d:64:76:a2:fa:3b:6b:90:3e:9d:6e:29:
         53:9c:f9:8f:bf:1b:2d:7a:60:95:a1:13:56:1e:b9:a4:28:e9:
         e1:ed:bd:10:6e:41:9b:03:a6:43:60:12:cc:dd:9d:7c:67:f8:
         de:46:5b:06:7d:93:eb:d5:aa:85:48:9c:ff:0a:2e:fe:27:95:
         fd:87:eb:0b:79:7e:ea:4f:0c:3f:5b:43:34:2b:d7:20:6e:bd:
         72:85:7c:34:47:1c:09:20:93:ce:ea:e4:7d:66:1d:66:4d:ef:
         01:0c:ef:2f:a7:a0:9d:34:b9:43:41:7b:75:2a:8a:e7:79:0b:
         d8:5c:e7:5c:59:ef:ea:97:c1:45:0a:b7:d1:23:5c:ef:73:ba:
         b7:49:05:79:be:22:a9:62:e9:6a:d3:d7:6b:ac:88:a6:1f:eb:
         af:72:64:54:31:54:71:88:74:9e:24:6b:72:40:41:59:2b:94:
         50:e6:9c:13:46:89:9c:e1:8a:37:c9:b9:fe:47:4e:d9:d6:b9:
         04:25:2f:6a:e0:4b:f2:be:07:74:a1:80:3e:d5:61:9f:22:53:
         54:f3:99:27:99:73:9b:18:f6:5a:0c:3a:14:21:94:73:50:58:
         1d:93:b2:b5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbEvxaURNXeACMUaTe/x4hd1nhoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM1MEIxOTM1Q0REOTUxRThGQjU3MkE1QUYzQzQxOUFD
NEQ0ODdFNDAeFw0yNDAzMDUxODA2NDJaFw0yNTAzMDQxODExNDJaMDMxMTAvBgNV
BAMTKDFFN0Q4MkRFOUVFM0Y0MTRCRjZCRjdCQjU1MTRENTIyNTlDRkNFQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ifnFSANQkUBCudKUjQhZuuX0
oadcognXGwvUVc/r4FL65B63GMM9Hn1aeub2alld38XL7e7m06E/no7qC/64EMkk
N/nQy4JOGpiRT49dp/CGQ38euaQwykM0UqnJ4Ge/H2u/qqBn9Tk2vp+fbPXjOGEG
EVb6oxN2ENvmfBVNxyYj/ZghcIHOt/Yc6NN2AG7/+eypXj/K9vA+WcJX7k0MLlTc
CzS9be5+bD3xufPrWJAoe1UaMfKlAqCGCMextRPyOc2YLPeEikkEnAANw+iehH+S
LXHxmsQc9/inlaJzxcE4ty08Ip2xirz6LoqPj2ZSJNnhA2enYX4AGv5VGmuvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUHn2C3p7j9BS/a/e7VRTVIlnPzr4wHwYDVR0j
BBgwFoAUXFCxk1zdlR6PtXKlrzxBmsTUh+QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODlEOTI3RUI5MDkxOTE3RjgxRDY3OEE0MUVBNDc2OTM1
ODg0MUQ5Nzc4REYyREExMDlDMzEzQjNFNzhBNkU4LzAvNUM1MEIxOTM1Q0REOTUx
RThGQjU3MkE1QUYzQzQxOUFDNEQ0ODdFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QzUwQjE5MzVDREQ5NTFFOEZC
NTcyQTVBRjNDNDE5QUM0RDQ4N0U0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg5RDkyN0VCOTA5MTkxN0Y4MUQ2NzhBNDFFQTQ3NjkzNTg4NDFEOTc3
OERGMkRBMTA5QzMxM0IzRTc4QTZFOC8wLzMyMzAzMDJlMzUzNTJlMzIzNTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyDf9
MA0GCSqGSIb3DQEBCwUAA4IBAQBPIApCZbP7PACHsMow6aqVxB5wpecEHXddZHai
+jtrkD6dbilTnPmPvxstemCVoRNWHrmkKOnh7b0QbkGbA6ZDYBLM3Z18Z/jeRlsG
fZPr1aqFSJz/Ci7+J5X9h+sLeX7qTww/W0M0K9cgbr1yhXw0RxwJIJPO6uR9Zh1m
Te8BDO8vp6CdNLlDQXt1KorneQvYXOdcWe/ql8FFCrfRI1zvc7q3SQV5viKpYulq
09drrIimH+uvcmRUMVRxiHSeJGtyQEFZK5RQ5pwTRomc4Yo3ybn+R07Z1rkEJS9q
4Evyvgd0oYA+1WGfIlNU85knmXObGPZaDDoUIZRzUFgdk7K1
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org