Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e33332e3131312e302f32342d3234203d3e203232383934.roa
File:                     3230302e33332e3131312e302f32342d3234203d3e203232383934.roa (raw, json)
Hash identifier:          4qpZfDBjrkfShgF4WKQvlhZRfSzJcpeoGrHwHLi1RA4=
Subject key identifier:   01:BB:F6:45:D0:6E:59:C5:A9:77:27:FF:29:16:32:19:E9:4D:9C:9E
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       0EB23A36351F06ABE715BF9964A1F19D495657D0
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e33332e3131312e302f32342d3234203d3e203232383934.roa
Signing time:             Wed 04 Dec 2024 04:30:00 +0000
ROA not before:           Wed 04 Dec 2024 04:25:00 +0000
ROA not after:            Wed 03 Dec 2025 04:30:00 +0000
asID:                     22894
IP address blocks:        200.33.111.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 29 Jan 2025 17:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b2:3a:36:35:1f:06:ab:e7:15:bf:99:64:a1:f1:9d:49:56:57:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Dec  4 04:25:00 2024 GMT
            Not After : Dec  3 04:30:00 2025 GMT
        Subject: CN=01BBF645D06E59C5A97727FF29163219E94D9C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:71:90:94:c2:fe:c9:f1:24:7b:0e:5e:26:55:
                    c6:e7:81:83:4b:8f:76:87:5a:4e:ab:19:b5:4e:2c:
                    2f:a6:21:8a:40:9c:dc:8d:60:19:53:88:60:f0:81:
                    67:91:65:05:31:5f:a6:c5:5d:c5:3f:73:e8:17:5f:
                    4d:93:09:b8:f0:87:3d:92:ff:e1:13:ea:41:29:84:
                    99:93:d6:af:08:e6:a7:dd:74:07:96:ed:6c:f8:05:
                    4a:f8:cf:ba:64:f1:d4:2c:84:1e:b4:fc:c2:c7:2a:
                    e8:4f:70:85:48:7c:19:ae:a6:1d:6b:74:0a:f4:11:
                    e1:94:62:20:e5:07:11:4f:0e:52:82:2e:2c:01:13:
                    18:e2:b9:3b:0c:2e:6e:87:29:ca:66:72:4f:01:ea:
                    42:84:5e:82:b1:bb:61:3b:0a:70:e7:05:a3:ce:d4:
                    0f:63:d3:ba:ec:75:9e:66:ac:c9:0e:25:4a:2f:0e:
                    0f:5c:bb:f2:62:c8:7f:76:2a:5f:8c:ee:bc:ea:35:
                    f7:ab:be:62:ea:c4:52:d1:49:66:35:1f:64:56:42:
                    3d:f3:7b:b8:b7:9c:8f:27:81:2f:be:08:25:5d:5d:
                    7c:7a:52:22:10:54:6b:fd:66:d2:f4:de:84:9c:69:
                    55:45:ea:e6:b4:84:e3:da:68:2c:64:f4:04:8e:16:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BB:F6:45:D0:6E:59:C5:A9:77:27:FF:29:16:32:19:E9:4D:9C:9E
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e33332e3131312e302f32342d3234203d3e203232383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:f9:c1:b6:54:c2:17:c6:41:f2:65:51:a4:da:fc:c7:eb:46:
         43:c8:ff:ba:a5:a9:e0:9b:c1:aa:39:37:ad:2a:79:bc:07:70:
         77:d8:24:87:61:a9:c6:1e:46:10:a5:14:d0:03:62:2a:71:7e:
         2b:97:cf:93:65:e5:38:b2:70:47:7a:f0:5f:bb:41:5a:a1:44:
         11:4e:e9:7c:08:78:df:05:35:ea:83:4e:91:95:a5:dc:cb:41:
         2e:1a:44:77:8c:60:41:68:e7:b6:50:bc:54:d6:20:54:24:fd:
         bf:89:d9:c0:cd:7c:46:76:c2:9b:67:e1:08:6e:dc:dc:2f:b6:
         0d:cf:5e:12:16:3a:ad:a1:d2:4b:8c:ee:37:ce:58:40:a0:f6:
         f8:52:c9:8f:dc:63:a6:31:85:b2:09:97:f5:ff:4a:ff:d7:5a:
         1e:06:f1:f7:bd:ca:36:f7:54:0b:6c:f3:61:e0:36:ae:7f:37:
         f4:e2:62:ff:07:35:8b:42:56:80:10:3e:04:ca:fc:ed:fe:4b:
         5a:b1:04:0e:f6:6c:52:19:bf:6c:46:c8:61:eb:f1:ec:01:40:
         97:77:04:83:7d:a5:cf:88:fe:80:d7:44:31:c6:ef:c1:60:5c:
         1a:c3:68:19:e6:bd:61:60:52:f8:13:fc:75:38:1a:ca:1b:2b:
         9e:61:f8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:57:11 2025 by rpki-client