Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/712efb8bf82f962c0ee50e78e1ae4e6ccbbb997d.roa
File:                     712efb8bf82f962c0ee50e78e1ae4e6ccbbb997d.roa (raw, json)
Hash identifier:          XclY6JGACc391XPYAw+IGM845wlFr6rWGTCmFEwDsNo=
Subject key identifier:   65:17:E8:6E:74:9D:24:62:3B:8F:9A:93:B9:5C:11:C2:58:B2:D5:57
Certificate issuer:       /CN=5959e68ec46f3f840aa00e6a2a7b00f49f253fe7
Certificate serial:       1922D0
Authority key identifier: FD:88:C1:AC:A5:DD:02:7B:5C:A0:72:12:26:6E:3D:3C:59:68:45:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/712efb8bf82f962c0ee50e78e1ae4e6ccbbb997d.roa
Signing time:             Sat 30 Jul 2022 21:51:01 +0000
ROA not before:           Sat 30 Jul 2022 03:00:00 +0000
ROA not after:            Sat 31 Dec 2022 03:00:00 +0000
asID:                     269838
IP address blocks:        45.229.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1647312 (0x1922d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5959e68ec46f3f840aa00e6a2a7b00f49f253fe7
        Validity
            Not Before: Jul 30 03:00:00 2022 GMT
            Not After : Dec 31 03:00:00 2022 GMT
        Subject: CN=712efb8bf82f962c0ee50e78e1ae4e6ccbbb997d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:53:31:55:95:d4:c7:90:26:4c:52:b5:54:
                    96:1b:8f:f0:9f:74:65:65:fe:b4:d7:9d:ee:50:a5:
                    d1:61:3a:a0:d3:84:05:a8:70:50:bb:53:ff:03:a4:
                    c5:e0:82:2c:e3:66:95:89:07:27:c9:87:de:99:d6:
                    ca:69:c0:5b:ba:d8:28:d5:cc:8a:5c:f9:b7:02:a0:
                    41:1f:aa:00:38:b0:48:db:10:9e:08:cf:dc:00:1b:
                    66:85:67:cb:6c:5f:2e:e8:c9:27:f0:23:1c:a7:3e:
                    7b:87:2b:ce:66:fe:bd:f3:be:bc:92:42:08:de:c4:
                    a4:58:d9:03:29:d7:a4:22:f8:04:1f:94:69:f6:7f:
                    f3:1e:5f:0c:cb:47:f2:29:64:67:05:b1:71:ed:70:
                    d1:a9:2b:1f:03:a3:4d:a2:37:b8:1a:bb:1f:bc:bc:
                    19:39:bb:04:68:31:96:35:b2:59:ea:8e:07:4e:72:
                    49:e2:b2:32:81:6e:73:3f:71:01:c8:76:89:26:e3:
                    a5:38:22:5a:a1:cb:0d:8a:78:9c:bd:28:56:c9:0e:
                    2b:dd:9f:98:8c:70:b6:c5:d2:d7:5a:84:e6:65:f5:
                    3b:e6:07:75:2b:48:8f:55:9b:39:d3:31:22:00:02:
                    a9:98:41:04:66:e0:40:d6:2b:f2:33:84:5f:85:d2:
                    ba:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:17:E8:6E:74:9D:24:62:3B:8F:9A:93:B9:5C:11:C2:58:B2:D5:57
            X509v3 Authority Key Identifier:
                keyid:FD:88:C1:AC:A5:DD:02:7B:5C:A0:72:12:26:6E:3D:3C:59:68:45:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/712efb8bf82f962c0ee50e78e1ae4e6ccbbb997d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:ca:43:97:ca:a9:68:06:e6:04:07:e6:14:98:17:61:bb:79:
         ba:28:b8:b9:f7:93:24:29:66:9a:4b:0e:46:07:a2:70:5b:73:
         a1:f5:47:f5:69:77:2c:3d:88:f6:2c:b5:4e:04:71:47:e6:f5:
         8e:c2:c0:06:8b:3c:4e:a9:9a:d9:b7:1e:55:2c:fe:29:39:37:
         0e:d4:0e:55:e5:10:28:39:77:72:8c:0f:62:3a:6f:92:f2:66:
         3d:2e:f4:2d:e9:55:e9:d9:bc:0b:d6:df:ee:eb:77:e0:fd:ef:
         b2:b0:12:7b:f7:6d:c0:28:c8:e3:44:22:06:c8:90:e3:9d:81:
         1e:3c:cc:5d:3a:74:46:2a:f7:f2:a7:3c:8f:40:d1:dd:56:e1:
         36:65:60:b0:5b:15:76:7f:ae:5a:e1:7c:33:bf:77:6b:0b:d4:
         90:2b:d3:30:24:9f:9c:06:2c:51:15:42:d9:e1:ec:57:58:40:
         54:f1:93:32:4f:81:4a:2a:db:0e:a0:22:cc:fd:42:76:88:90:
         6b:ad:48:f8:5c:e7:c6:49:6b:54:c9:f6:39:2d:7b:aa:79:15:
         1c:80:a1:9b:67:02:dc:e7:b1:f6:8f:bb:37:3f:52:49:00:83:
         c1:e6:bd:87:57:63:8a:13:63:33:a3:b9:44:21:2c:93:66:38:
         77:94:2f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-fra.rpki-client.org