Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135322e302f32322d3233203d3e20323733313131.roa
File:                     3230302e35302e3135322e302f32322d3233203d3e20323733313131.roa (raw, json)
Hash identifier:          kPzaw09SH4lX+vmYko7DSg9G8LdH0oUOw2ljYi6XfXk=
Subject key identifier:   57:74:90:68:CC:79:88:D8:44:64:57:D4:48:51:53:74:D8:06:E5:88
Certificate issuer:       /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial:       4B012425E8CC6DE56C172DF4B223E0CC2EAD015C
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135322e302f32322d3233203d3e20323733313131.roa
Signing time:             Tue 07 May 2024 19:15:00 +0000
ROA not before:           Tue 07 May 2024 19:10:00 +0000
ROA not after:            Tue 06 May 2025 19:15:00 +0000
asID:                     273111
IP address blocks:        200.50.152.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:01:24:25:e8:cc:6d:e5:6c:17:2d:f4:b2:23:e0:cc:2e:ad:01:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
        Validity
            Not Before: May  7 19:10:00 2024 GMT
            Not After : May  6 19:15:00 2025 GMT
        Subject: CN=57749068CC7988D8446457D448515374D806E588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ab:06:bc:49:0f:88:e6:1d:bc:32:53:36:cb:
                    23:59:2d:c5:f7:71:f3:87:6c:7c:04:f3:62:23:47:
                    94:f9:b3:f1:9a:c1:93:30:7c:35:48:7b:91:a1:07:
                    a8:74:48:12:95:f5:62:62:7d:d0:ad:aa:a2:6c:d0:
                    6c:bf:d8:4a:cc:cb:8a:05:da:31:10:f2:f9:9c:74:
                    f7:ea:81:c8:0c:07:0f:e4:47:08:da:29:c5:e7:d1:
                    4b:28:2f:1a:7f:d7:d1:ce:68:aa:47:9c:f9:a7:aa:
                    c7:c9:7a:41:57:ab:e1:2c:ff:24:4c:95:b7:32:1b:
                    a1:a8:c1:d8:e7:72:1d:5b:d2:39:a2:92:6c:eb:97:
                    6b:f1:85:d3:78:0c:9b:e5:eb:5b:60:dd:78:93:39:
                    c5:66:04:1a:2e:e2:f4:0d:b9:f9:d8:d9:d2:44:f2:
                    53:7a:5d:88:b0:ef:24:a1:b8:18:01:bd:fa:a1:4b:
                    35:eb:15:9e:36:9f:f5:38:b0:05:9f:b0:07:cb:c8:
                    61:fc:8e:16:2d:85:f2:e4:8f:4f:ee:1e:32:55:a7:
                    eb:58:41:01:e4:6b:e1:d1:3c:cc:74:80:14:a2:85:
                    bc:d8:15:46:b0:6e:27:d2:23:cc:80:e2:23:d6:4d:
                    4b:66:6a:cd:1b:b5:6a:50:66:63:29:5a:3d:95:1e:
                    4d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:74:90:68:CC:79:88:D8:44:64:57:D4:48:51:53:74:D8:06:E5:88
            X509v3 Authority Key Identifier:
                keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135322e302f32322d3233203d3e20323733313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:04:58:b6:51:f3:5f:10:13:88:45:44:5f:0a:fb:af:2b:7d:
         83:bd:b4:a5:6d:21:a1:bf:5a:ef:b1:b7:ee:a2:5f:73:b8:5a:
         cf:d0:5c:e7:08:1c:0e:1e:26:c8:10:fb:84:ae:d1:94:1d:03:
         57:b6:b6:05:6b:f5:8a:1e:27:37:3f:dc:30:1c:4d:77:33:2f:
         dc:c8:94:e9:68:9c:05:65:06:2b:15:dc:98:a5:11:a5:f2:20:
         a4:e5:bf:6a:e2:b5:c8:62:f3:d5:1d:6d:29:19:99:85:07:2e:
         ad:b2:37:d6:8e:aa:a8:86:4f:c7:76:59:87:0f:e0:f5:8e:e5:
         d6:b6:7b:d5:b7:5f:37:a3:32:06:78:de:d4:95:4a:c3:5c:9f:
         96:6c:50:56:37:08:8b:94:30:c2:42:a0:f7:77:e1:44:6f:3b:
         8f:79:2d:23:0b:37:b6:de:98:18:80:c1:c3:15:01:90:08:1d:
         f1:df:0c:09:7d:3d:03:89:69:09:2c:6b:c6:fa:a6:81:68:19:
         31:2f:ef:9a:fe:c9:03:72:bb:8d:dc:03:84:92:e8:eb:ad:e2:
         22:57:02:2d:36:10:78:98:77:3a:d5:52:3b:e4:da:2d:08:14:
         d6:54:26:23:b5:46:70:7d:10:9a:cb:10:32:98:63:c9:d8:de:
         9c:ae:0b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org