Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/08b3d26fe8c16ae6a1bad4b5282a8efec75308e7.roa
File:                     08b3d26fe8c16ae6a1bad4b5282a8efec75308e7.roa (raw, json)
Hash identifier:          vrkZrEdvUeGT0umW0PyOHYq6T80DqwyG8y0NPlSt240=
Subject key identifier:   8A:CE:3A:97:B3:25:70:72:64:8C:BC:4C:4A:9E:A1:F3:00:1A:95:4E
Certificate issuer:       /CN=98a80d301d847e6c050c408da1b0efe36548fad8
Certificate serial:       15C62E
Authority key identifier: 44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98a80d301d847e6c050c408da1b0efe36548fad8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/08b3d26fe8c16ae6a1bad4b5282a8efec75308e7.roa
Signing time:             Mon 07 Mar 2022 16:13:02 +0000
ROA not before:           Wed 02 Mar 2022 03:00:00 +0000
ROA not after:            Sat 02 Mar 2024 03:00:00 +0000
asID:                     264659
IP address blocks:        179.43.104.0/22 maxlen: 24
                          179.43.108.0/22 maxlen: 24
                          190.211.140.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 08:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1426990 (0x15c62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a80d301d847e6c050c408da1b0efe36548fad8
        Validity
            Not Before: Mar  2 03:00:00 2022 GMT
            Not After : Mar  2 03:00:00 2024 GMT
        Subject: CN=08b3d26fe8c16ae6a1bad4b5282a8efec75308e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:28:e2:ac:9f:7c:73:11:80:80:2f:09:8d:f2:
                    26:04:9b:fa:c1:5e:46:b9:11:d6:07:6b:e4:53:e7:
                    9a:15:c9:6f:7d:0d:c1:ed:e7:64:34:a2:8b:b1:9a:
                    98:bc:1c:06:3e:23:7a:bc:a9:21:32:72:e4:0c:1a:
                    b5:6b:53:c9:de:04:36:d6:bc:c0:6f:73:f6:a8:05:
                    02:98:d1:20:a8:3e:7f:7d:aa:75:3d:a9:90:6a:58:
                    6c:28:f2:25:e9:69:2d:2d:47:bc:9f:6d:83:5a:3d:
                    7a:63:4d:c6:94:74:1f:16:c7:38:9f:65:fe:96:4d:
                    02:bc:92:8e:bb:3f:9d:c0:c6:88:3f:df:c0:ba:49:
                    c8:5b:1b:64:78:35:7b:2d:13:96:c4:2c:eb:4a:5f:
                    73:7b:c8:94:f7:bb:f9:fa:44:f2:6d:c0:e1:db:10:
                    a3:df:4d:8a:39:ee:ef:10:8c:bd:8b:40:50:26:6f:
                    23:a3:64:8b:ac:42:06:5d:36:34:c0:38:2e:7b:d3:
                    9e:99:e4:20:7f:b9:72:17:ad:3c:2b:21:dc:cc:81:
                    f0:ea:47:de:0e:5f:35:51:22:6c:7d:fd:e4:e8:ab:
                    32:83:7e:2c:d5:01:5c:3b:b8:95:95:55:97:c6:b0:
                    e0:34:f2:af:83:c7:a3:4b:55:30:83:03:af:6e:8c:
                    6a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CE:3A:97:B3:25:70:72:64:8C:BC:4C:4A:9E:A1:F3:00:1A:95:4E
            X509v3 Authority Key Identifier:
                keyid:44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98a80d301d847e6c050c408da1b0efe36548fad8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/08b3d26fe8c16ae6a1bad4b5282a8efec75308e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/98a80d301d847e6c050c408da1b0efe36548fad8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.104.0/21
                  190.211.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:e9:48:b6:af:96:b3:9e:fe:12:3c:4d:d6:01:52:81:fc:14:
         9e:b3:fa:8a:37:3b:aa:7c:b7:86:52:4f:a7:93:28:f0:b3:a0:
         9f:2d:18:38:9e:98:f9:c8:00:d4:60:3a:e3:f4:28:a4:55:ca:
         50:dd:d8:1b:ca:b2:55:96:76:80:c9:18:5b:97:a1:02:62:f1:
         25:78:da:65:03:bf:11:18:81:17:80:97:bc:33:41:00:c4:ef:
         3c:17:05:56:5a:89:96:88:ed:36:80:f9:bf:d1:2d:d0:1d:6e:
         68:d1:80:85:47:f1:d4:f5:56:f8:a7:be:19:be:b1:65:75:d3:
         82:18:56:f8:64:17:7c:90:47:86:23:c7:f9:b5:b3:0a:1b:a8:
         c3:41:d2:0c:52:5c:87:71:40:38:30:d7:7e:23:b0:8b:0c:42:
         33:a6:97:ff:e7:91:a7:bf:78:02:b8:f9:31:56:f9:3b:4b:ad:
         90:d7:2a:d8:5f:c1:01:7a:44:1a:dc:ca:84:37:b0:fb:a0:d9:
         3d:f0:7d:3c:19:33:a5:b3:6b:9f:7d:25:9b:02:2f:65:bd:ca:
         ba:e8:01:ef:22:d6:80:cc:aa:88:f7:dd:e3:03:f9:d8:7b:40:
         32:80:7c:c0:bc:bf:5b:09:91:b5:32:43:c1:68:47:38:9f:85:
         bf:78:b5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 11:11:42 2024 by rpki-client on console-ams.rpki-client.org