Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235352e302f32342d3234203d3e20323632313534.roa
File:                     3230302e35352e3235352e302f32342d3234203d3e20323632313534.roa (raw, json)
Hash identifier:          Q9GudgW9QV14zbQA47w7yn4P0FETyFzE4rRB2CXdwok=
Subject key identifier:   E6:81:11:27:80:7A:C6:8F:BF:2E:D6:D6:37:1C:25:F7:DA:23:C6:2F
Certificate issuer:       /CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
Certificate serial:       31489A9C18B008E4508069F82CEE52E64B083BBB
Authority key identifier: 5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235352e302f32342d3234203d3e20323632313534.roa
Signing time:             Tue 05 Mar 2024 18:11:44 +0000
ROA not before:           Tue 05 Mar 2024 18:06:44 +0000
ROA not after:            Tue 04 Mar 2025 18:11:44 +0000
asID:                     262154
IP address blocks:        200.55.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 May 2024 17:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:48:9a:9c:18:b0:08:e4:50:80:69:f8:2c:ee:52:e6:4b:08:3b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
        Validity
            Not Before: Mar  5 18:06:44 2024 GMT
            Not After : Mar  4 18:11:44 2025 GMT
        Subject: CN=E6811127807AC68FBF2ED6D6371C25F7DA23C62F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:5c:9c:7c:55:ed:d1:9f:94:bf:49:fb:71:
                    db:36:2c:ab:be:97:a0:43:54:c0:00:ee:bd:36:b4:
                    36:a8:e8:d4:4a:08:bc:7e:18:7f:85:0e:de:7d:80:
                    95:40:6e:14:46:3d:b4:ae:f0:52:85:6a:21:dd:ce:
                    09:bd:fb:bc:2c:8d:99:c9:d0:c8:3a:82:49:6b:c4:
                    21:36:b5:cf:9c:d3:d8:d8:03:13:0a:e9:62:e5:99:
                    3f:8f:0c:cc:4f:42:da:07:11:b3:72:0b:9d:aa:a6:
                    f7:b8:d6:52:95:39:69:f6:4f:e6:eb:25:12:d5:dd:
                    6f:7c:80:52:f5:ae:73:c8:7e:07:43:aa:47:57:8a:
                    00:f5:f8:02:0a:13:e1:13:94:a0:89:28:a3:60:31:
                    68:bc:1f:7e:af:ec:94:70:da:88:40:69:9c:4c:6a:
                    f6:66:66:99:84:d1:72:16:6d:7f:28:8f:8b:db:50:
                    48:eb:5e:6a:fa:0d:67:b2:fe:f4:81:a7:5f:04:26:
                    14:c4:f9:78:ed:a6:f0:dc:9d:84:a7:33:cd:b7:5e:
                    26:cb:01:c0:24:85:11:39:0a:0e:82:f0:3c:be:0c:
                    e3:2d:89:18:86:af:44:8f:e6:f6:c9:01:85:31:f6:
                    a6:f3:75:b2:93:2b:fe:7f:53:2a:ad:5f:8f:f8:af:
                    fd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:81:11:27:80:7A:C6:8F:BF:2E:D6:D6:37:1C:25:F7:DA:23:C6:2F
            X509v3 Authority Key Identifier:
                keyid:5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235352e302f32342d3234203d3e20323632313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:11:0f:be:1e:fa:92:5f:a1:89:7b:dc:36:ec:02:8e:21:fc:
         98:2a:89:89:42:47:e7:76:53:dc:c4:90:22:42:f2:e6:44:71:
         d7:f6:d3:93:54:46:ea:9e:10:60:c3:15:13:a2:05:b7:d9:92:
         24:50:5e:4b:91:65:f9:a3:50:8e:df:d8:ec:a5:a4:5f:db:7e:
         91:25:66:86:d8:64:ec:81:33:f5:ad:e4:fe:54:26:2a:aa:e0:
         10:44:0b:8f:23:d4:9d:cc:5d:7b:e1:b5:49:b4:69:c0:66:51:
         93:6b:62:df:ac:8a:09:29:39:2b:c5:f1:3a:cb:b5:8c:5c:f3:
         8d:07:57:6f:fd:77:8d:ad:9c:ca:d4:6f:63:01:d6:e1:a6:d2:
         b8:21:f5:e3:34:cd:e8:b5:16:e0:8c:32:4a:f7:d7:1d:5e:9c:
         72:ee:0a:29:a9:5a:1a:40:f1:78:24:3d:b7:40:1c:10:6e:50:
         75:d5:75:d2:a9:5c:4a:d6:4c:2a:9a:c1:6e:48:a5:44:29:67:
         ac:ad:99:4a:42:c3:f2:4b:6a:cf:a0:f8:0b:f5:65:e4:93:ca:
         22:84:c0:13:3a:83:95:79:cc:d4:53:59:c1:c9:cd:02:f7:70:
         8b:54:ae:cf:36:89:44:23:58:32:b7:71:87:78:03:1e:a0:af:
         0c:33:c7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org