Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35322e302f32322d3232203d3e203631343832.roa
File:                     3230302e3132362e35322e302f32322d3232203d3e203631343832.roa (raw, json)
Hash identifier:          1eI/yN0qPLAckfJIrZbQDX2E0Isknfyo2WGoSmztzXU=
Subject key identifier:   D9:E8:AC:8A:3B:8D:54:8C:F4:42:47:06:B0:45:7D:AE:E9:60:B2:1E
Certificate issuer:       /CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
Certificate serial:       29224AB8B62DDB9D5E25AF3C4449A65F5FBA4DD3
Authority key identifier: 27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35322e302f32322d3232203d3e203631343832.roa
Signing time:             Thu 25 Jul 2024 17:30:00 +0000
ROA not before:           Thu 25 Jul 2024 17:25:00 +0000
ROA not after:            Thu 24 Jul 2025 17:30:00 +0000
asID:                     61482
IP address blocks:        200.126.52.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 26 Jul 2024 16:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:22:4a:b8:b6:2d:db:9d:5e:25:af:3c:44:49:a6:5f:5f:ba:4d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
        Validity
            Not Before: Jul 25 17:25:00 2024 GMT
            Not After : Jul 24 17:30:00 2025 GMT
        Subject: CN=D9E8AC8A3B8D548CF4424706B0457DAEE960B21E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:81:48:6d:07:b8:cc:78:4d:47:70:7f:74:1a:
                    d1:47:21:cc:15:9b:af:40:ea:f5:8d:f3:1f:26:2e:
                    ec:d9:32:4b:30:13:d4:1a:40:27:ce:0a:0b:47:d1:
                    2b:cf:79:db:91:c8:f8:fc:8b:c2:c3:1d:95:b4:1d:
                    40:06:57:8a:e7:61:fd:0b:66:9c:4c:ae:dc:7a:33:
                    15:9c:2d:3f:25:cd:91:58:dc:27:e2:59:df:c7:3a:
                    79:95:51:73:4a:54:13:ec:ab:e6:57:01:ef:72:25:
                    1c:f9:03:27:da:a0:70:5a:e1:b3:d8:89:14:4c:a6:
                    d1:14:d4:fb:56:a1:ae:49:b6:f0:6b:cd:78:b2:f1:
                    08:b6:b5:64:8f:0f:40:03:14:3a:67:75:c3:ef:ba:
                    bb:73:6e:52:37:40:50:32:61:b0:87:40:f0:85:79:
                    96:13:0a:c7:0f:04:61:b4:11:74:72:38:f0:36:2e:
                    7f:76:43:b7:5e:e9:ae:3e:68:a8:19:50:24:e6:aa:
                    a0:c8:49:c3:22:c0:85:1c:ca:85:8c:e4:84:8d:30:
                    47:22:c7:57:0f:84:de:11:e4:82:67:c8:d2:06:16:
                    34:52:80:25:6e:19:ee:8f:c9:99:5a:d8:ba:41:3c:
                    17:92:d9:58:49:db:d0:8a:af:ea:59:9e:ff:55:5e:
                    a1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E8:AC:8A:3B:8D:54:8C:F4:42:47:06:B0:45:7D:AE:E9:60:B2:1E
            X509v3 Authority Key Identifier:
                keyid:27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35322e302f32322d3232203d3e203631343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:4b:ff:62:4b:7e:ed:f2:ca:c2:27:53:32:60:35:f1:11:2f:
         1a:38:ff:ec:a3:5d:ef:9c:32:d0:78:8e:60:ff:d1:10:5a:e7:
         0b:81:45:f6:15:62:95:71:54:e9:45:5e:88:d1:d4:72:37:ca:
         4b:3c:f9:60:72:b0:ea:d7:84:14:71:20:0e:f0:05:8a:dc:a2:
         2f:8d:f7:03:c5:48:6a:33:8c:c3:bc:de:e8:32:4d:f9:d9:97:
         33:f5:c0:6e:e3:6b:76:2b:23:c7:bc:5a:74:b0:9f:19:35:70:
         d5:1a:08:35:de:1e:96:09:c0:43:cf:89:d6:83:d7:40:56:16:
         84:5d:08:02:46:7b:e2:61:ab:fc:42:15:92:a8:2c:e6:fe:c7:
         bf:ef:05:12:ad:57:6c:2c:40:ee:49:df:08:f7:00:68:f8:f2:
         6b:82:34:9a:db:35:a2:97:33:55:9c:a7:11:59:92:d4:0b:bc:
         72:91:03:81:9a:28:12:37:f4:cd:37:66:28:1b:b2:a2:ab:0b:
         9c:92:52:19:76:b2:3e:7a:b6:0e:ca:b6:5f:23:65:3d:60:89:
         d6:88:ce:76:c8:88:c2:2c:85:09:e0:21:1a:85:e1:0d:55:66:
         66:8d:6f:ed:52:05:09:19:36:06:f4:30:bb:eb:ed:36:ec:b8:
         21:06:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----