Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/3230302e31322e3230302e302f32312d3231203d3e2030.roa
File:                     3230302e31322e3230302e302f32312d3231203d3e2030.roa (raw, json)
Hash identifier:          d2LChcSu4gW55x3v+J8k22mNo1j/a3a8YRSgqPDkOVs=
Subject key identifier:   AA:DC:9B:4C:DD:62:93:72:FD:D2:80:E6:29:1E:C1:6C:82:51:AC:A1
Certificate issuer:       /CN=53B392C71D73A953C0321875651DEFD6AC96AE92
Certificate serial:       5FCC5DDC0167E7E6A69CDD2F041F8C697F16D579
Authority key identifier: 53:B3:92:C7:1D:73:A9:53:C0:32:18:75:65:1D:EF:D6:AC:96:AE:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B392C71D73A953C0321875651DEFD6AC96AE92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/3230302e31322e3230302e302f32312d3231203d3e2030.roa
Signing time:             Thu 05 Dec 2024 16:00:00 +0000
ROA not before:           Thu 05 Dec 2024 15:55:00 +0000
ROA not after:            Thu 04 Dec 2025 16:00:00 +0000
asID:                     0
IP address blocks:        200.12.200.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Thu 05 Dec 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cc:5d:dc:01:67:e7:e6:a6:9c:dd:2f:04:1f:8c:69:7f:16:d5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B392C71D73A953C0321875651DEFD6AC96AE92
        Validity
            Not Before: Dec  5 15:55:00 2024 GMT
            Not After : Dec  4 16:00:00 2025 GMT
        Subject: CN=AADC9B4CDD629372FDD280E6291EC16C8251ACA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c7:9e:04:d2:a2:87:cb:92:e7:3f:1a:b3:88:
                    ef:45:73:db:7d:e1:28:c2:03:84:42:59:bd:cf:4f:
                    3a:a2:86:c7:0a:46:96:7b:c6:c5:69:f2:cc:03:a1:
                    c5:b6:aa:ec:ba:41:d0:e6:fe:03:ab:72:fa:4f:22:
                    b0:af:24:12:51:1f:c2:ce:7f:09:db:8e:9b:32:10:
                    f0:07:aa:bb:be:db:9a:51:bc:12:c5:bc:e8:e5:8f:
                    0b:a5:1a:52:fa:a0:ac:82:b4:64:3c:00:a6:a8:dd:
                    f6:88:78:f9:65:ec:d1:7e:65:10:49:e7:17:c8:cb:
                    94:f5:e5:47:49:da:1d:9f:92:6f:c4:30:db:ec:f0:
                    f2:49:cc:61:26:26:d7:99:0d:83:99:e0:48:3b:9e:
                    2f:82:15:57:c5:5d:b7:b2:45:f3:7f:19:5b:54:c2:
                    c2:3a:35:6e:56:9f:a0:2c:37:d5:a8:9f:b1:5a:7b:
                    93:89:1a:5d:f8:11:67:5f:52:05:0b:27:41:55:f7:
                    be:8f:05:eb:9e:b3:e3:ae:cd:83:a9:40:5b:cc:66:
                    51:69:3d:87:96:7c:63:c4:2b:5d:2d:e6:66:85:8f:
                    25:ba:3c:ff:ce:75:e1:e7:61:f2:fb:d6:ce:a3:9e:
                    d0:f2:01:79:e2:4f:e9:40:38:d6:1e:82:db:5b:30:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DC:9B:4C:DD:62:93:72:FD:D2:80:E6:29:1E:C1:6C:82:51:AC:A1
            X509v3 Authority Key Identifier:
                keyid:53:B3:92:C7:1D:73:A9:53:C0:32:18:75:65:1D:EF:D6:AC:96:AE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/53B392C71D73A953C0321875651DEFD6AC96AE92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B392C71D73A953C0321875651DEFD6AC96AE92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/3230302e31322e3230302e302f32312d3231203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:49:4c:18:7c:0d:3c:5f:ab:48:e8:cb:da:ad:2e:4f:fe:b6:
         05:1a:20:19:71:7f:1a:e8:59:a4:71:1f:e1:68:9d:20:98:b7:
         93:93:3d:7d:48:bf:04:02:05:39:ce:62:a6:dd:92:70:bd:ec:
         5f:33:21:c8:29:f4:8f:5d:87:8c:98:ac:da:3d:ec:e7:18:70:
         a5:2f:c5:da:4a:76:9f:3b:b2:c0:54:48:35:5c:b9:58:69:2e:
         19:d3:d3:22:d6:3d:db:44:27:a6:75:63:66:2a:44:a8:a3:59:
         3a:12:79:3e:1c:d2:6f:18:2c:00:85:ac:17:ad:e8:21:a0:ce:
         9f:f7:27:6e:07:c2:96:cb:7a:35:01:3e:d0:f5:2c:89:7e:ec:
         cd:94:73:4b:c7:c8:dd:d2:4d:46:c5:a7:e4:9d:de:6c:9b:06:
         4f:36:b8:ca:67:96:13:d2:4d:82:84:54:e2:b8:10:92:5b:b2:
         08:c4:3f:45:85:17:26:4d:b4:fb:10:f4:66:9d:23:fd:e3:09:
         e7:a8:a8:42:46:8c:31:38:00:ab:ef:c1:23:ed:e7:bc:8c:8a:
         40:97:94:49:e0:8b:55:f3:17:2b:3d:72:85:76:e3:f8:6c:0a:
         e2:37:9c:9b:57:13:0f:44:e6:dc:c2:1a:7c:5c:b5:5a:f0:53:
         5c:b1:62:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 5 23:58:02 2024 by rpki-client on console-fra.rpki-client.org