Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a643030303a3a2f34342d3434203d3e203232383934.roa
File:                     323030313a313235303a643030303a3a2f34342d3434203d3e203232383934.roa (raw, json)
Hash identifier:          uIXUm4A+NCMEG5THleQjIGZ3f+tcYSGDbniY7xloMkk=
Subject key identifier:   1F:5C:ED:03:B1:67:B4:F4:3C:34:63:8E:5B:A0:B3:7F:44:00:FF:D8
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       5528633C8F9A92A2E95701490877EAE2FF446DD4
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a643030303a3a2f34342d3434203d3e203232383934.roa
Signing time:             Wed 04 Dec 2024 04:30:01 +0000
ROA not before:           Wed 04 Dec 2024 04:25:01 +0000
ROA not after:            Wed 03 Dec 2025 04:30:01 +0000
asID:                     22894
IP address blocks:        2001:1250:d000::/44 maxlen: 44
Validation:               Failed, certificate revoked on Wed 29 Jan 2025 17:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:28:63:3c:8f:9a:92:a2:e9:57:01:49:08:77:ea:e2:ff:44:6d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Dec  4 04:25:01 2024 GMT
            Not After : Dec  3 04:30:01 2025 GMT
        Subject: CN=1F5CED03B167B4F43C34638E5BA0B37F4400FFD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:46:7b:dc:06:d8:db:28:0c:13:a3:ca:ea:86:
                    fc:5a:68:24:10:6d:ec:d8:6c:15:4f:5e:be:73:1b:
                    62:93:ec:13:52:84:8d:4f:78:62:66:98:91:b2:bc:
                    72:5c:ed:a4:6c:fc:83:9b:ec:23:f4:14:60:cc:10:
                    0f:2d:ad:8a:a2:b6:64:e3:40:9a:e6:0b:a5:8b:e4:
                    ed:76:66:5d:70:ac:bf:07:79:28:d7:00:e2:3a:8c:
                    c8:d1:95:8e:46:c4:4f:1c:4f:ce:a9:63:46:32:fb:
                    ea:6d:00:90:50:eb:9a:36:28:6b:66:f9:3c:83:68:
                    43:7a:8e:3e:66:a8:a6:7f:07:0e:9a:3b:1d:1b:5a:
                    f1:5e:ae:a3:3a:7a:8d:00:00:f9:43:4a:21:e6:80:
                    cf:f9:4b:4e:48:d0:88:4a:a1:cb:90:cf:51:35:28:
                    25:17:55:b0:fc:0f:a3:f5:49:c3:44:81:9d:ad:fc:
                    c4:cc:7e:d2:26:d1:a9:d2:2b:13:0e:e6:fb:04:80:
                    a3:91:dc:a7:b5:d3:be:9d:29:a6:c0:57:85:5b:06:
                    7d:c3:a7:8b:17:d9:a2:35:c8:13:67:9d:bb:d3:5a:
                    32:49:23:9e:47:cc:e9:cd:0c:05:cc:da:aa:3b:34:
                    49:77:10:f8:a3:cf:2f:22:9e:61:b4:99:d7:ad:1a:
                    53:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5C:ED:03:B1:67:B4:F4:3C:34:63:8E:5B:A0:B3:7F:44:00:FF:D8
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/323030313a313235303a643030303a3a2f34342d3434203d3e203232383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1250:d000::/44

    Signature Algorithm: sha256WithRSAEncryption
         88:24:c2:29:f7:39:82:6a:ed:d2:b9:83:1a:8b:c9:8e:63:2d:
         44:81:f5:71:f8:a8:e8:78:68:a3:46:8e:29:97:d8:47:af:e4:
         22:74:e1:07:a4:01:81:f9:13:d2:f9:f4:d3:f8:d7:c2:57:02:
         df:1f:23:dd:b5:fe:0a:4d:2f:7c:18:d7:51:a1:be:3f:c6:00:
         7f:d9:6a:03:da:93:35:26:87:e4:6d:94:7a:97:f7:4b:41:43:
         01:43:6e:81:cf:ca:0c:cd:91:0f:1e:b4:ba:ee:b7:7d:51:6b:
         c3:c4:86:f3:35:a8:1c:a8:a9:ea:92:c6:85:a1:4e:6b:c2:11:
         64:4b:a0:ab:3f:ee:f7:c3:5c:78:92:51:85:e6:71:4b:e9:2e:
         96:6d:fa:dd:81:36:3f:3c:fc:78:4e:7b:d2:69:47:86:60:df:
         87:61:6b:26:11:7e:ce:9b:0c:96:5f:d4:5e:97:5b:13:b0:2e:
         73:19:13:88:dd:39:c4:72:5e:f6:2c:e0:ce:5e:e0:4c:17:bf:
         db:76:8b:b2:94:a7:83:96:0d:ae:cd:62:47:f1:44:a5:01:f0:
         7b:2b:24:8b:31:86:a7:11:29:ba:95:d3:50:58:0e:c9:a9:b5:
         9e:49:ad:97:00:89:d0:c1:c9:9b:00:e9:01:53:f8:65:86:93:
         1c:24:09:66
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUVShjPI+akqLpVwFJCHfq4v9EbdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4
OTM2NkYzMzAeFw0yNDEyMDQwNDI1MDFaFw0yNTEyMDMwNDMwMDFaMDMxMTAvBgNV
BAMTKDFGNUNFRDAzQjE2N0I0RjQzQzM0NjM4RTVCQTBCMzdGNDQwMEZGRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJRnvcBtjbKAwTo8rqhvxaaCQQ
bezYbBVPXr5zG2KT7BNShI1PeGJmmJGyvHJc7aRs/IOb7CP0FGDMEA8trYqitmTj
QJrmC6WL5O12Zl1wrL8HeSjXAOI6jMjRlY5GxE8cT86pY0Yy++ptAJBQ65o2KGtm
+TyDaEN6jj5mqKZ/Bw6aOx0bWvFerqM6eo0AAPlDSiHmgM/5S05I0IhKocuQz1E1
KCUXVbD8D6P1ScNEgZ2t/MTMftIm0anSKxMO5vsEgKOR3Ke1076dKabAV4VbBn3D
p4sX2aI1yBNnnbvTWjJJI55HzOnNDAXM2qo7NEl3EPijzy8inmG0mdetGlMjAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUH1ztA7FntPQ8NGOOW6Czf0QA/9gwHwYDVR0j
BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC
QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3
RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw
RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I0NTMxQkFBMzg0RUY0RDkxMDc4QzEwNTI5MEM0RjBGQkMwNTIxMzhG
QzlCMjFFN0Q5MTJGQkU5QUE4QTdGMC8wLzMyMzAzMDMxM2EzMTMyMzUzMDNhNjQz
MDMwMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMjMyMzgzOTM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcEIAESUNAAMA0GCSqGSIb3DQEBCwUAA4IBAQCIJMIp9zmCau3SuYMai8mOYy1E
gfVx+KjoeGijRo4pl9hHr+QidOEHpAGB+RPS+fTT+NfCVwLfHyPdtf4KTS98GNdR
ob4/xgB/2WoD2pM1JofkbZR6l/dLQUMBQ26Bz8oMzZEPHrS67rd9UWvDxIbzNagc
qKnqksaFoU5rwhFkS6CrP+73w1x4klGF5nFL6S6WbfrdgTY/PPx4TnvSaUeGYN+H
YWsmEX7OmwyWX9Rel1sTsC5zGROI3TnEcl72LODOXuBMF7/bdouylKeDlg2uzWJH
8USlAfB7KySLMYanESm6ldNQWA7JqbWeSa2XAInQwcmbAOkBU/hlhpMcJAlm
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:38:31 2025 by rpki-client