Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/87a92d2fcc642dffb1014c0b877edac36099d7bb.roa
File:                     87a92d2fcc642dffb1014c0b877edac36099d7bb.roa (raw, json)
Hash identifier:          GTJIlkLvdy/M3qLynwgQLVout8tnBxcDT+rIrM9o/xY=
Subject key identifier:   27:EC:6D:5F:03:1C:5F:32:04:DB:94:D7:F0:D8:9B:DE:C2:06:49:DF
Certificate issuer:       /CN=9e7a5fab05d84621ad4b78ccf141868a98875d29
Certificate serial:       1322C2
Authority key identifier: 6E:4A:37:C8:01:68:41:93:FF:F7:E0:63:E3:9D:2C:C9:C5:B5:79:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7a5fab05d84621ad4b78ccf141868a98875d29.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/87a92d2fcc642dffb1014c0b877edac36099d7bb.roa
Signing time:             Wed 10 Nov 2021 01:00:32 +0000
ROA not before:           Wed 10 Nov 2021 01:00:32 +0000
ROA not after:            Tue 10 Nov 2026 01:00:32 +0000
asID:                     265524
IP address blocks:        170.80.28.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Mar 2024 06:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1254082 (0x1322c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7a5fab05d84621ad4b78ccf141868a98875d29
        Validity
            Not Before: Nov 10 01:00:32 2021 GMT
            Not After : Nov 10 01:00:32 2026 GMT
        Subject: CN=87a92d2fcc642dffb1014c0b877edac36099d7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:29:42:6f:c1:9c:e7:44:6f:19:b1:e3:13:83:
                    3b:a1:71:71:91:51:77:d1:ce:87:83:8b:dc:8f:83:
                    80:71:64:f0:d7:9e:8c:10:ab:ca:d0:5c:02:bc:eb:
                    17:30:04:04:02:6a:d7:ed:90:de:cc:77:6e:e7:0d:
                    70:e2:1e:63:a2:d2:a4:8b:22:bc:00:1a:91:17:4b:
                    00:9f:bf:df:76:d4:c6:9e:ee:b8:ba:ea:44:ab:8e:
                    09:19:15:db:b6:93:f6:54:f6:24:01:b1:8a:0a:78:
                    90:2f:7c:d2:9a:62:2b:1c:ca:78:48:c3:33:63:48:
                    de:d1:2a:4a:09:02:c1:de:3c:81:59:58:d7:3e:d1:
                    de:9f:c0:66:ea:81:fb:d1:65:db:be:65:8f:31:26:
                    96:34:86:d8:f7:62:fd:1d:4b:02:d7:9a:4a:fb:67:
                    f8:bb:49:32:1d:74:69:b8:eb:c7:61:bb:5a:a1:57:
                    60:a5:ff:7e:9e:26:91:e2:25:24:e2:5d:40:82:00:
                    90:69:36:8d:01:cb:97:34:b9:66:c8:44:f3:84:35:
                    ed:1d:3c:a2:05:95:59:b7:04:6a:ce:ba:fa:ce:10:
                    c5:0d:28:47:4d:f9:f1:8b:f5:60:bb:c4:b6:1c:3f:
                    69:b4:0f:b8:af:84:1b:b0:15:7e:db:21:b8:02:b0:
                    c9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EC:6D:5F:03:1C:5F:32:04:DB:94:D7:F0:D8:9B:DE:C2:06:49:DF
            X509v3 Authority Key Identifier:
                keyid:6E:4A:37:C8:01:68:41:93:FF:F7:E0:63:E3:9D:2C:C9:C5:B5:79:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7a5fab05d84621ad4b78ccf141868a98875d29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/87a92d2fcc642dffb1014c0b877edac36099d7bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/9e7a5fab05d84621ad4b78ccf141868a98875d29.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:f6:8b:70:66:01:9e:54:25:4f:15:6d:10:c0:86:09:4e:c7:
         26:44:80:e2:74:92:fb:25:6d:a3:74:03:e0:d0:c2:b5:60:2f:
         a7:14:23:db:cf:18:fc:33:34:c4:c3:90:fb:44:10:51:ab:dc:
         e0:1b:a7:1e:f1:59:0b:1a:2f:b8:37:7a:be:78:00:a9:44:16:
         43:96:25:f0:c3:51:83:ca:37:4f:00:de:fd:e7:f5:05:54:52:
         c8:53:e7:65:e4:1e:33:cd:12:ad:64:d1:a6:10:b6:fc:0e:e9:
         64:af:a1:d4:a8:85:ca:49:ab:e6:9c:b0:fb:5c:a3:d8:99:39:
         f3:6c:0f:3b:ad:5f:03:86:a4:72:fd:fe:96:aa:00:c6:6e:fe:
         91:2b:8f:5a:de:96:f3:16:28:2e:13:1b:38:25:53:30:ae:f8:
         48:01:51:7a:30:11:a2:2a:9c:b0:54:09:5c:b6:c8:ce:e1:a5:
         f1:4e:d5:30:b1:9d:a8:93:fa:de:85:f6:7c:1a:6d:0b:c0:ea:
         47:22:02:06:c5:ac:bf:51:a4:71:9e:0d:bf:d3:a8:29:a6:7e:
         d9:2b:bb:36:56:bc:9f:54:78:3c:49:77:ba:8a:6b:4f:34:64:
         d4:3f:bf:bf:f0:73:13:83:eb:4b:f9:34:5a:ff:25:9c:ea:30:
         21:7c:fa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 11:26:25 2024 by rpki-client on console-ams.rpki-client.org