Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/8f65fe162462327d9f6e467b9a0df7a365e9694b.roa
File:                     8f65fe162462327d9f6e467b9a0df7a365e9694b.roa (raw, json)
Hash identifier:          Ka9vM4jTCy0ua6XMxHdoMl5iRYYx6RN7eH/IyeVuX/M=
Subject key identifier:   3B:69:04:04:00:99:34:8C:F1:8B:6D:82:3C:5B:73:3C:84:A4:7D:4F
Certificate issuer:       /CN=e804a389c3b0880219ecf5f7a3c62d96a274b592
Certificate serial:       1B3E29
Authority key identifier: 4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/8f65fe162462327d9f6e467b9a0df7a365e9694b.roa
Signing time:             Thu 27 Oct 2022 12:40:26 +0000
ROA not before:           Mon 24 Oct 2022 12:12:36 +0000
ROA not after:            Sun 27 Oct 2024 12:12:36 +0000
asID:                     8048
IP address blocks:        200.90.64.0/18 maxlen: 24
                          200.84.160.0/19 maxlen: 24
                          200.90.32.0/19 maxlen: 24
                          200.90.0.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 13:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1785385 (0x1b3e29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e804a389c3b0880219ecf5f7a3c62d96a274b592
        Validity
            Not Before: Oct 24 12:12:36 2022 GMT
            Not After : Oct 27 12:12:36 2024 GMT
        Subject: CN=8f65fe162462327d9f6e467b9a0df7a365e9694b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:69:71:6d:e5:81:f1:94:7a:16:4b:5b:27:b3:
                    a3:3a:82:8e:2f:5c:07:6a:b9:b9:58:70:00:b3:5b:
                    66:61:47:21:37:5c:15:31:13:31:1b:21:ff:36:96:
                    7b:dc:47:f5:e7:e4:76:c9:86:9b:3b:3c:28:b9:38:
                    05:1c:54:c6:c7:06:31:6b:f2:70:36:66:b3:91:38:
                    4d:c1:f2:71:6a:a9:29:be:97:12:b8:6b:d0:16:10:
                    de:83:1c:78:75:f7:20:96:fa:ac:b6:64:40:60:41:
                    0c:fb:30:34:78:47:d1:a1:9b:e8:24:05:62:6a:1a:
                    f5:0a:70:ed:c7:93:f7:4a:51:72:a6:fb:93:1c:b1:
                    da:62:9f:da:eb:16:d2:6e:e4:fa:55:78:d1:e0:87:
                    77:5e:20:58:a6:bf:0d:ba:8b:9d:85:39:50:f1:87:
                    c4:42:fe:01:c6:22:6d:a3:ba:44:d8:51:b0:91:cb:
                    73:9a:93:eb:d3:1f:ba:a0:58:c5:a7:c2:b9:d5:cc:
                    32:ae:33:89:55:c6:5d:51:fc:8d:35:d1:8a:0c:5f:
                    7d:59:f2:b7:18:7f:77:61:51:d5:87:f2:fe:0e:14:
                    1e:38:aa:ff:8a:17:db:a2:f9:c6:bb:28:b0:4a:50:
                    b1:54:3f:19:79:21:a9:af:95:47:33:38:76:c1:7d:
                    ed:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:69:04:04:00:99:34:8C:F1:8B:6D:82:3C:5B:73:3C:84:A4:7D:4F
            X509v3 Authority Key Identifier:
                keyid:4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/8f65fe162462327d9f6e467b9a0df7a365e9694b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/e804a389c3b0880219ecf5f7a3c62d96a274b592.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.84.160.0/19
                  200.90.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5f:4d:01:1a:d8:6c:20:1d:50:53:35:c2:85:79:58:ae:83:96:
         14:a2:41:eb:6c:fc:c0:36:ee:9d:e6:a7:40:d9:6e:47:ea:63:
         2b:db:ab:48:7d:0b:29:90:2a:00:58:7e:f7:4b:8d:49:85:8e:
         42:4b:2b:d2:83:73:b8:af:21:cd:5f:c7:4d:eb:21:b8:4e:ab:
         86:aa:b3:dd:69:8b:25:e8:e0:00:6f:f0:28:29:31:8c:f2:58:
         74:55:bb:d8:e4:de:40:6f:2f:f2:82:67:39:2e:1f:f7:7f:c9:
         9d:b9:5e:60:db:12:e6:d6:4c:44:a1:c8:78:e5:ee:d0:e8:26:
         7c:81:f8:2c:57:83:8e:cb:81:08:57:5b:d1:eb:60:28:12:b3:
         49:b7:7e:db:4a:b2:3a:7c:0d:f8:83:43:22:0c:41:21:b8:98:
         35:c2:7d:40:97:c8:8d:37:64:e4:16:23:c5:93:ce:db:9b:73:
         0a:5b:0b:9c:c6:39:85:84:39:8c:26:4c:c5:ca:94:d5:44:b9:
         f0:b5:87:be:45:e1:b8:9c:97:42:39:4b:4e:3f:c0:8c:04:a6:
         3c:e8:78:4b:b1:1a:19:82:73:37:08:a6:b5:35:57:23:0b:43:
         86:51:37:e5:04:68:a7:8a:7f:09:c4:05:e4:b8:83:48:4b:e9:
         b2:d0:6a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 18:16:51 2024 by rpki-client on console-fra.rpki-client.org