Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3234203d3e2036303537.roa
File:                     3230312e3231392e3235322e302f32322d3234203d3e2036303537.roa (raw, json)
Hash identifier:          sQJ5T2IGoARkBhfXqApKQOM6SHOmeVp4I9Dg9bOcWc0=
Subject key identifier:   5D:97:B7:58:42:DE:8C:0E:75:F4:8B:67:93:75:90:0B:5C:E5:95:0F
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       63063FEA5F4F79E849E1CA8B090E695278C1948B
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3234203d3e2036303537.roa
Signing time:             Fri 24 May 2024 16:55:00 +0000
ROA not before:           Fri 24 May 2024 16:50:00 +0000
ROA not after:            Fri 23 May 2025 16:55:00 +0000
asID:                     6057
IP address blocks:        201.219.252.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Fri 24 May 2024 17:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:06:3f:ea:5f:4f:79:e8:49:e1:ca:8b:09:0e:69:52:78:c1:94:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: May 24 16:50:00 2024 GMT
            Not After : May 23 16:55:00 2025 GMT
        Subject: CN=5D97B75842DE8C0E75F48B679375900B5CE5950F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fd:7a:67:e5:6f:ea:6f:de:3d:a2:ab:8e:37:
                    56:13:56:02:f1:62:2d:e2:85:2c:ea:99:97:d5:0a:
                    cc:0c:86:6d:06:9b:be:cd:6d:d1:6a:cb:da:7d:fb:
                    dd:c4:16:3b:c9:9c:42:49:00:e1:f6:40:9d:b1:22:
                    e7:4f:66:fb:e6:12:9f:95:78:19:9f:d0:1d:ac:e8:
                    6f:23:4e:b6:c0:86:75:64:2a:2b:63:ce:25:e6:7d:
                    34:ab:72:c9:f1:89:96:e0:12:8d:96:a2:53:70:60:
                    78:6b:03:84:11:9a:ae:55:b2:a0:31:67:27:5d:32:
                    2f:5e:d6:20:00:e8:13:9f:e3:7b:05:46:6a:e3:37:
                    d9:be:81:ce:09:6a:c1:c1:55:72:61:d8:e6:09:06:
                    ea:40:2b:ae:3f:78:03:bb:47:0a:c7:89:fe:5d:66:
                    a0:3b:97:db:dd:b2:e9:ab:ae:85:6f:88:38:f2:6a:
                    d2:b1:32:5e:de:49:5d:eb:0d:c6:a5:12:f4:42:5d:
                    1f:f4:9a:c0:1c:6e:32:05:56:4a:a0:df:4b:a5:e1:
                    36:e9:b0:d5:03:2e:59:71:68:c4:46:4d:cf:26:04:
                    f1:c8:67:e7:0b:f2:69:8b:f6:be:d3:aa:24:b6:2a:
                    5c:be:6a:c2:37:a2:b0:71:86:88:b2:d0:69:68:28:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:97:B7:58:42:DE:8C:0E:75:F4:8B:67:93:75:90:0B:5C:E5:95:0F
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3234203d3e2036303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:df:c3:ec:80:46:66:7c:0d:69:9f:17:4f:27:a9:35:c2:0c:
         13:69:43:ec:98:81:d7:90:36:db:0b:69:75:8b:82:e1:25:42:
         22:5c:b6:b2:6d:1a:2b:cf:bf:65:60:77:3b:50:e1:bf:e6:af:
         d9:b4:8b:bd:92:5c:e8:4b:1d:e4:a5:85:a8:2c:71:d8:9d:82:
         55:39:05:e1:72:b4:8c:2c:94:04:ba:f1:fc:04:ed:e7:9f:c0:
         ff:2b:32:51:92:03:4d:bb:fd:87:5e:61:b8:6c:ef:af:76:ea:
         47:9b:c0:ff:ac:f5:fd:42:e2:ff:2b:54:40:8f:0e:e5:bd:00:
         cc:99:55:f4:d6:da:02:ac:b7:f5:2c:62:d6:f5:12:0f:04:1e:
         18:f0:6e:3e:b7:a8:56:5f:cb:f4:b9:c8:d2:c7:6a:0d:72:c5:
         73:27:16:55:fd:5e:0f:e6:67:25:4c:09:aa:3d:d5:81:b6:3b:
         09:74:85:f2:e1:9f:ec:8a:3b:41:3a:86:59:14:3c:e0:34:70:
         99:c4:53:df:65:16:4b:ab:28:da:67:ef:22:5e:21:a0:72:d2:
         29:f9:2f:68:88:c1:dd:ce:30:54:f4:c7:26:0c:5e:d6:d9:63:
         f2:5e:cd:b6:27:18:77:e7:13:36:e8:47:11:e8:d1:7c:d8:8a:
         8b:aa:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:01:45 2025 by rpki-client