Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135342e302f32332d3233203d3e20323733313131.roa
File:                     3230302e35302e3135342e302f32332d3233203d3e20323733313131.roa (raw, json)
Hash identifier:          BSb1E9kdw96Nn1qy/aFWzWsY1msOSxToSzrELWCRy+g=
Subject key identifier:   22:5C:83:78:19:64:36:87:32:4A:DD:90:C4:FE:E8:70:BB:5E:96:94
Certificate issuer:       /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial:       281EEB2BC89D215F61FE97A3A8E7631BF5B4167F
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135342e302f32332d3233203d3e20323733313131.roa
Signing time:             Tue 05 Mar 2024 18:11:22 +0000
ROA not before:           Tue 05 Mar 2024 18:06:22 +0000
ROA not after:            Tue 04 Mar 2025 18:11:22 +0000
asID:                     273111
IP address blocks:        200.50.154.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 07 May 2024 19:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1e:eb:2b:c8:9d:21:5f:61:fe:97:a3:a8:e7:63:1b:f5:b4:16:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
        Validity
            Not Before: Mar  5 18:06:22 2024 GMT
            Not After : Mar  4 18:11:22 2025 GMT
        Subject: CN=225C837819643687324ADD90C4FEE870BB5E9694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2f:80:16:c7:f9:c3:f6:f9:35:b4:1c:0f:ce:
                    d7:ed:31:84:11:fd:01:39:0b:18:5e:80:e8:f1:1a:
                    f2:53:e0:8b:ed:34:53:7f:b1:88:c7:81:2e:ec:7f:
                    c5:ed:91:f6:0b:1b:de:d8:9a:48:a4:65:fc:5c:13:
                    02:5e:78:82:e8:97:3d:33:95:a5:f0:f2:24:64:aa:
                    c3:9b:ba:fa:b5:41:f1:32:75:62:a7:c2:fa:9e:88:
                    d0:85:5c:bc:5f:74:af:61:a3:51:1b:87:cb:11:d2:
                    a5:cd:b6:52:00:76:82:bb:cb:90:17:ee:48:24:a0:
                    a5:93:cb:c8:fb:75:91:71:74:a7:90:54:c6:20:ee:
                    d0:af:c2:23:07:3b:88:2b:99:83:e9:57:e8:42:82:
                    36:75:c4:eb:3c:e1:b7:f2:50:b8:dd:75:95:bc:0c:
                    3e:9c:af:06:a3:47:02:a5:8d:96:b9:66:23:31:83:
                    f2:e0:d6:e4:9d:55:d7:f7:50:19:25:20:e8:65:23:
                    ec:cc:e0:e3:70:2d:f8:d8:4d:bc:4d:42:af:e9:6b:
                    a8:05:17:aa:58:2d:c9:54:15:11:d6:21:cc:7c:b9:
                    1e:fe:63:eb:a2:14:55:c1:24:72:31:34:8c:d8:7f:
                    81:11:31:7a:8b:14:32:99:b5:d2:4b:67:1d:72:21:
                    ef:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5C:83:78:19:64:36:87:32:4A:DD:90:C4:FE:E8:70:BB:5E:96:94
            X509v3 Authority Key Identifier:
                keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135342e302f32332d3233203d3e20323733313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:dc:82:c8:d2:76:fc:10:e2:b2:13:66:b5:b9:d9:21:28:07:
         19:2b:09:f8:5a:0f:69:fe:77:77:33:fc:f8:25:6a:36:80:86:
         97:c0:06:81:de:c2:aa:ea:bf:1d:6e:15:59:dd:e7:01:3e:fc:
         22:47:7a:99:dc:8f:2f:ee:31:8d:ec:30:28:66:c9:f1:b7:f9:
         41:61:e4:c4:84:d3:0e:7d:99:5a:c1:23:07:43:6a:57:06:77:
         38:a7:0f:7f:28:75:81:14:47:4a:95:19:52:b4:8b:dc:7a:93:
         d5:9c:48:b2:b2:b2:55:99:72:d0:8d:f4:07:2d:44:4c:f2:89:
         de:57:ba:90:07:da:6d:63:f5:12:61:be:d5:84:0c:8e:b2:40:
         09:51:b6:79:12:f1:77:6e:4e:8f:83:3d:e2:c9:d9:25:5b:4c:
         90:fc:ff:b5:2b:1f:84:fa:0d:52:dc:d9:8e:8a:0d:03:9f:ca:
         d0:89:ff:83:42:46:52:49:c1:3e:79:12:6c:d9:da:55:58:b9:
         86:ec:f6:a0:15:86:b3:e8:1a:aa:3c:d5:c1:ee:d6:e8:13:7e:
         27:ba:1a:e4:a1:4e:d1:38:79:d0:36:a3:cd:08:e3:66:88:e3:
         f1:85:3d:e9:6b:dc:53:a7:3e:78:20:aa:9a:00:e6:94:b7:bb:
         60:46:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org