Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3230302e392e3136372e302f32342d3234203d3e203532323530.roa
File:                     3230302e392e3136372e302f32342d3234203d3e203532323530.roa (raw, json)
Hash identifier:          CNLMucVG1RTJZqL1yseFtP53wZpQAcE4apReYiolOWU=
Subject key identifier:   FC:F6:1A:B4:36:5C:34:BE:CA:55:5B:A7:DF:99:B4:98:5F:40:13:2B
Certificate issuer:       /CN=E840769E201D72D7EA098EEE7538061FBEA58116
Certificate serial:       255531215A0449D521C6CBF3A4374145BA9F9239
Authority key identifier: E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3230302e392e3136372e302f32342d3234203d3e203532323530.roa
Signing time:             Tue 05 Mar 2024 18:05:03 +0000
ROA not before:           Tue 05 Mar 2024 18:00:03 +0000
ROA not after:            Tue 04 Mar 2025 18:05:03 +0000
asID:                     52250
IP address blocks:        200.9.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Nov 2024 18:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:55:31:21:5a:04:49:d5:21:c6:cb:f3:a4:37:41:45:ba:9f:92:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E840769E201D72D7EA098EEE7538061FBEA58116
        Validity
            Not Before: Mar  5 18:00:03 2024 GMT
            Not After : Mar  4 18:05:03 2025 GMT
        Subject: CN=FCF61AB4365C34BECA555BA7DF99B4985F40132B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7e:a9:72:8a:10:b7:9d:48:77:40:cf:e8:0c:
                    95:64:da:8d:a3:23:e4:a7:d2:61:0d:07:88:5c:0c:
                    3d:20:b3:42:a9:a6:4f:ff:62:09:7d:ed:bb:ae:cf:
                    4f:ae:e1:9e:82:9d:ce:ff:6a:14:75:bc:92:fa:fa:
                    a7:4b:3c:a3:ab:fa:d4:70:92:0c:13:25:50:31:b4:
                    5c:61:c7:2c:a6:1c:1c:6f:93:76:82:9c:76:14:97:
                    93:da:c1:73:75:bf:04:e2:c7:a6:88:91:0a:fa:30:
                    97:13:ed:ce:d6:7e:e3:82:c6:98:4c:63:63:35:aa:
                    7f:f1:c0:58:1c:31:28:68:18:00:e4:f6:0d:c4:1c:
                    e2:5e:66:83:ed:52:32:10:7e:35:93:d2:0b:4d:98:
                    e4:aa:a3:7b:f1:02:94:31:44:40:e0:9e:be:fa:6d:
                    b6:ab:0f:5a:59:f7:02:78:0f:30:c7:4a:13:b0:12:
                    29:dd:24:52:1c:dc:6c:fa:4c:78:c4:b3:35:de:e6:
                    20:db:d3:59:9b:16:fa:46:0c:23:8d:9c:e1:e3:00:
                    ee:cd:73:9a:bc:bf:43:70:66:15:0f:68:fd:4e:07:
                    3a:df:53:7c:96:9d:78:0e:5e:b5:00:24:59:3b:8e:
                    fa:90:f2:3f:09:5c:73:08:35:3b:c6:d9:d4:ee:6c:
                    6c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F6:1A:B4:36:5C:34:BE:CA:55:5B:A7:DF:99:B4:98:5F:40:13:2B
            X509v3 Authority Key Identifier:
                keyid:E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3230302e392e3136372e302f32342d3234203d3e203532323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:77:a4:8c:a3:f8:fa:9e:af:75:03:04:ec:ce:e8:99:1a:c7:
         9f:5a:4c:2a:e8:e2:d3:9d:f3:48:b0:58:c5:27:1f:ff:42:8f:
         f0:71:2f:84:db:80:5f:17:2a:0b:70:c6:ea:6b:76:4b:26:d6:
         06:f7:7c:c8:e4:af:be:1e:48:cd:e1:ff:cb:81:b6:50:95:ed:
         8c:29:e0:3c:71:a7:8e:06:3f:10:3f:a2:07:a5:73:69:d6:bc:
         97:d9:f3:8b:ba:a4:b1:13:a8:a6:11:04:e8:19:7c:81:e0:1b:
         a0:e6:ca:2e:28:cc:ca:5f:3e:1e:7d:84:fa:2f:d2:ef:8f:90:
         95:2d:e0:12:1c:c5:36:ee:a7:f7:eb:9f:33:82:f0:12:0a:bb:
         72:94:6b:4c:ac:3a:0f:ae:27:47:e0:b8:9d:7b:eb:c1:e8:a3:
         7c:c1:e9:3b:0b:97:c9:c2:d2:18:9b:0f:3d:c8:18:2d:66:9e:
         c8:61:eb:03:5a:eb:d7:92:51:be:47:ee:4e:80:a7:69:ef:5f:
         f6:a8:3e:0c:2a:4a:e9:9b:f6:16:18:92:c4:84:55:35:dd:1a:
         d4:69:80:bc:63:01:c8:4e:cb:d0:94:4d:39:3b:5f:c0:58:22:
         7e:d5:81:e0:5b:a8:0d:d3:3d:64:86:12:95:3e:cb:3f:58:53:
         73:ab:66:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 20:03:55 2024 by rpki-client on console-ams.rpki-client.org