Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135322e302f32322d3232203d3e20323733313131.roa
File:                     3230302e35302e3135322e302f32322d3232203d3e20323733313131.roa (raw, json)
Hash identifier:          KbETCHSae/7pDPxDDyxNAEkVVfMTbZ1JUh7jFA/cdkc=
Subject key identifier:   F2:C3:7E:E3:CC:6C:BB:B0:C5:FD:F8:A0:D0:48:C8:02:1E:3E:C7:97
Certificate issuer:       /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial:       75AD8C725CD237DCE3B43470BFDF19719A18F969
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135322e302f32322d3232203d3e20323733313131.roa
Signing time:             Tue 05 Mar 2024 18:11:24 +0000
ROA not before:           Tue 05 Mar 2024 18:06:24 +0000
ROA not after:            Tue 04 Mar 2025 18:11:24 +0000
asID:                     273111
IP address blocks:        200.50.152.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 07 May 2024 19:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ad:8c:72:5c:d2:37:dc:e3:b4:34:70:bf:df:19:71:9a:18:f9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
        Validity
            Not Before: Mar  5 18:06:24 2024 GMT
            Not After : Mar  4 18:11:24 2025 GMT
        Subject: CN=F2C37EE3CC6CBBB0C5FDF8A0D048C8021E3EC797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e7:7f:65:e3:0c:c8:6c:ac:f1:9b:dc:39:d5:
                    9c:0c:7f:d7:c0:fb:cc:3c:53:6c:ed:8a:e7:2c:db:
                    ae:92:4c:f5:31:f4:ec:62:ad:de:0d:60:2c:0d:0e:
                    2f:6d:7a:32:2e:3c:84:2c:56:34:7b:27:37:82:96:
                    bd:49:1e:df:b3:ef:ea:37:86:f3:48:9c:24:a5:e5:
                    43:61:89:e0:4d:c0:3b:d3:59:82:b2:c9:f4:66:4e:
                    37:85:67:36:a7:10:9f:29:fe:81:53:7a:5d:25:a9:
                    9d:90:ed:d9:92:88:36:29:77:9b:44:aa:3b:cb:50:
                    b2:26:f7:c8:16:2f:20:84:ce:e7:2f:cb:6e:84:6a:
                    18:cb:4a:88:f5:8d:15:6f:78:93:c4:8a:f2:fb:bc:
                    5b:e6:e3:e9:0f:d0:1d:86:5d:b9:eb:75:d3:89:4a:
                    26:9a:3a:b7:de:bd:bb:51:1f:4d:dc:a5:79:93:23:
                    4f:fb:5f:d8:2b:ab:2b:1a:ca:7a:3d:9e:be:d5:f7:
                    1c:89:a0:43:21:56:89:41:44:bb:a4:03:82:4f:f7:
                    95:4b:8f:23:8a:53:46:14:76:3a:24:16:e3:53:99:
                    20:9b:23:25:b6:ea:04:9e:f3:42:c7:7a:c4:a7:93:
                    23:60:52:c3:ad:21:01:e5:57:59:33:b5:43:c5:1b:
                    f8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C3:7E:E3:CC:6C:BB:B0:C5:FD:F8:A0:D0:48:C8:02:1E:3E:C7:97
            X509v3 Authority Key Identifier:
                keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135322e302f32322d3232203d3e20323733313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:f0:a9:95:fb:2d:7d:1f:63:00:25:20:37:28:a1:f6:f0:9c:
         38:df:0a:41:5c:ce:1f:42:3f:c1:18:85:9e:e5:26:ec:50:c4:
         65:b5:0a:96:78:35:92:18:3c:63:ee:2d:52:65:97:5d:d0:b9:
         a9:32:ab:f3:29:01:ef:b9:a8:4e:06:c3:85:8b:42:7a:96:5b:
         08:57:16:fe:61:ab:2c:85:72:d9:16:55:b0:7b:9f:b1:c3:ba:
         01:dd:70:9d:f1:bf:9a:a2:58:13:56:97:cb:1a:2e:c1:11:58:
         8b:a7:9c:00:fc:b8:35:32:ed:7a:00:b9:a3:4f:ca:5b:09:dc:
         e6:ed:09:fa:dc:d8:e9:88:d4:e8:68:99:81:09:d5:59:8f:bf:
         ff:d4:f2:40:e4:84:eb:3a:6e:78:c4:b3:e3:73:b9:ca:4a:4d:
         40:96:72:cd:a9:f3:4c:42:7f:d8:60:79:62:19:8c:40:17:4f:
         9b:86:25:46:98:00:08:23:27:6b:fb:bb:aa:65:cf:79:04:1b:
         7e:93:8a:b9:fc:a7:1f:58:fd:d4:6d:4e:32:91:44:96:81:0c:
         30:8b:dc:98:d4:76:9e:dc:0d:f8:a2:9f:e3:22:d2:86:21:d5:
         d4:f1:e5:b6:19:a5:2f:91:bb:91:fc:c4:c4:c4:c0:04:33:fc:
         c1:e0:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org