Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230312e302f32342d3234203d3e203532343339.roa
File:                     3136302e31392e3230312e302f32342d3234203d3e203532343339.roa (raw, json)
Hash identifier:          VhxCMBMuJcnjNPm5FNdfRPuslCpAg+rmil//A5oviAg=
Subject key identifier:   05:50:35:67:86:B5:6D:41:39:86:16:75:EC:5C:64:38:7A:C2:8A:CE
Certificate issuer:       /CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
Certificate serial:       74ABD42F0300C8DA3B0B8423A46486A90826F263
Authority key identifier: DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230312e302f32342d3234203d3e203532343339.roa
Signing time:             Tue 04 Feb 2025 18:28:34 +0000
ROA not before:           Tue 04 Feb 2025 18:23:34 +0000
ROA not after:            Tue 03 Feb 2026 18:28:34 +0000
asID:                     52439
IP address blocks:        160.19.201.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 19:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ab:d4:2f:03:00:c8:da:3b:0b:84:23:a4:64:86:a9:08:26:f2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
        Validity
            Not Before: Feb  4 18:23:34 2025 GMT
            Not After : Feb  3 18:28:34 2026 GMT
        Subject: CN=0550356786B56D4139861675EC5C64387AC28ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:20:c0:c7:fd:31:b2:8f:a2:1e:1c:08:2c:
                    2d:03:47:9f:19:cd:7e:2e:77:27:35:12:38:c4:82:
                    44:2c:8b:11:d9:91:18:7a:a7:0c:5c:35:80:f9:bd:
                    04:b8:d6:b6:4c:bb:98:f0:84:41:e4:64:bf:ba:7d:
                    9b:fe:ed:84:bc:43:d7:68:70:64:1b:70:c3:2a:02:
                    ab:ff:08:0d:03:28:93:2c:db:94:d6:c4:c3:cf:c3:
                    a2:18:32:65:f9:1f:8f:ce:14:1e:03:27:45:03:d2:
                    01:e7:c3:cc:97:08:f4:f9:75:0c:d5:a2:27:4a:8d:
                    1d:26:87:56:25:55:c1:a5:06:ab:33:35:cd:de:88:
                    05:3f:c4:9b:d6:2f:0d:6d:31:db:10:28:92:5e:dc:
                    fe:f2:fb:e0:48:4f:5a:30:35:62:84:23:3e:21:9d:
                    96:d9:63:53:f3:5f:7a:7a:c8:fb:f3:c1:48:07:68:
                    b5:b1:57:79:9c:83:71:da:aa:61:9b:25:32:42:52:
                    f7:cd:a9:f0:f0:3e:a5:a0:13:1e:56:f0:0e:be:21:
                    65:a0:fc:29:2f:66:4a:b7:63:38:5d:e8:44:39:d1:
                    d0:87:5e:89:b3:68:55:40:ba:6f:0d:e6:a1:c8:af:
                    e6:53:1b:0b:ef:7a:bb:41:6a:73:e5:00:a6:ac:01:
                    97:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:50:35:67:86:B5:6D:41:39:86:16:75:EC:5C:64:38:7A:C2:8A:CE
            X509v3 Authority Key Identifier:
                keyid:DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230312e302f32342d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:89:52:c5:4c:36:92:19:e9:33:75:c6:d7:56:23:c2:59:54:
         2b:00:bd:37:49:d0:f5:52:39:7e:36:68:97:25:6d:13:0c:b4:
         0e:aa:05:b2:44:31:5e:b8:8c:d3:76:99:1d:a5:55:6a:0b:ec:
         7c:04:d8:c4:0e:9f:2d:0c:59:fa:16:f3:0e:1a:f4:ad:65:0c:
         2e:b8:e4:e2:e1:93:e3:24:95:2b:45:d5:de:3b:e0:ad:65:da:
         ac:3a:2d:8d:d8:6b:c0:7a:34:b2:7f:23:ed:42:da:e3:e1:50:
         63:05:6b:93:34:63:b5:f2:b6:e1:f1:20:78:8f:95:cd:34:7d:
         3c:7a:87:24:b0:a4:ba:f8:fe:46:dc:22:57:7c:3a:77:3e:39:
         66:b1:d8:ec:70:0d:e4:bf:d4:28:8b:84:68:7e:cf:d5:d4:bf:
         b0:68:ed:fb:62:85:30:63:c4:f8:d0:8a:b7:c2:8a:7f:4f:9e:
         6c:29:a7:8a:35:a9:a3:f2:d9:13:a1:8e:15:b4:d4:0a:03:fe:
         3f:74:95:cd:91:7e:ae:66:82:c7:57:ec:3b:c3:88:00:94:35:
         4d:89:cc:e3:3e:f1:21:46:3d:98:85:18:2f:05:7d:89:1a:8a:
         d6:92:c9:13:34:2a:6a:60:45:07:4a:9a:e5:99:8f:74:d3:ca:
         60:5c:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:17:23 2025 by rpki-client