Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/4033d3eae0de19f2d3335820cc62ceea9bfbd215.roa
File:                     4033d3eae0de19f2d3335820cc62ceea9bfbd215.roa (raw, json)
Hash identifier:          4+FPUHkJPodG+HnZe6UaWcKLuSykD/Zk1qtUEUeedlM=
Subject key identifier:   0E:C1:F4:EE:E0:4F:33:6F:FD:EB:34:70:FC:7C:08:18:39:50:6D:7F
Certificate issuer:       /CN=9288132902323827f44806de3061debd517a8fd9
Certificate serial:       1E3370
Authority key identifier: AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/4033d3eae0de19f2d3335820cc62ceea9bfbd215.roa
Signing time:             Tue 07 Mar 2023 21:39:26 +0000
ROA not before:           Mon 06 Mar 2023 21:39:04 +0000
ROA not after:            Fri 07 Mar 2025 21:39:04 +0000
asID:                     265858
IP address blocks:        45.225.206.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jan 2024 17:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1979248 (0x1e3370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9288132902323827f44806de3061debd517a8fd9
        Validity
            Not Before: Mar  6 21:39:04 2023 GMT
            Not After : Mar  7 21:39:04 2025 GMT
        Subject: CN=4033d3eae0de19f2d3335820cc62ceea9bfbd215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5e:e5:52:84:d7:2d:bc:6f:c7:07:53:a4:00:
                    a7:da:58:2a:6a:f4:5e:83:44:fd:dc:3a:f7:c9:cd:
                    1e:4c:87:87:42:ac:f6:03:dd:fb:46:96:94:bd:0d:
                    44:34:7a:a5:84:ce:3c:27:5d:85:5d:f2:36:1d:84:
                    ab:52:43:09:81:83:58:46:3d:ba:1a:aa:cf:ae:9c:
                    46:a9:13:a4:3e:02:49:36:dd:5b:ad:22:f0:f4:b9:
                    5e:ef:54:0e:a2:b0:72:8d:9f:0c:1c:e3:c8:cf:04:
                    dc:6c:7f:33:d1:b0:d3:82:93:65:da:a9:8c:65:29:
                    b4:55:08:25:08:8e:2f:b3:50:c0:fc:24:32:61:89:
                    6a:2f:6d:38:36:a1:1a:cf:48:06:cd:0d:76:e3:27:
                    85:af:9b:90:ac:dd:29:12:76:1a:86:5c:5d:40:5c:
                    87:db:0b:2c:67:a1:c6:4c:cd:3a:23:b8:a1:55:89:
                    8c:a1:ac:13:4d:58:16:5c:73:af:87:ee:00:ad:08:
                    25:fe:65:42:f8:ca:f0:ec:00:69:2d:d3:07:21:fb:
                    c4:30:ff:7e:a1:b4:6e:75:c9:68:9b:c6:85:bd:ee:
                    95:da:e1:59:12:86:6b:3e:b7:8b:e0:38:80:23:de:
                    4f:21:4d:dd:99:a9:b5:3b:47:50:a4:38:a3:a3:2b:
                    76:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C1:F4:EE:E0:4F:33:6F:FD:EB:34:70:FC:7C:08:18:39:50:6D:7F
            X509v3 Authority Key Identifier:
                keyid:AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/4033d3eae0de19f2d3335820cc62ceea9bfbd215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/9288132902323827f44806de3061debd517a8fd9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:67:f3:07:ab:d7:26:c9:74:86:dd:93:8c:be:0c:89:a2:da:
         4b:fa:44:fc:5e:aa:37:c9:c6:e4:fd:9b:61:91:c1:fd:82:30:
         65:51:07:74:f3:1f:e3:8b:fc:e9:1a:d4:e0:98:0a:63:01:57:
         17:5b:2f:84:71:35:e9:0e:ab:29:c0:a3:93:e9:16:d7:97:b3:
         3b:bc:5f:fb:c8:8c:92:ce:1d:ec:c2:a6:75:ba:69:b7:77:53:
         fa:5d:e4:72:1e:3e:80:77:95:9e:75:db:59:77:ee:a1:0f:af:
         6e:52:3c:99:4c:6b:c5:30:d0:be:94:f3:f4:ae:8b:37:e9:d6:
         f9:94:85:8e:3b:25:2d:80:26:fb:14:6b:5c:5f:38:44:cd:c8:
         be:8e:32:23:47:12:b6:61:30:8b:52:f1:60:fe:ba:25:a2:08:
         08:3e:25:f3:71:a0:3a:78:a1:2b:9b:58:90:b3:40:79:b2:9f:
         cc:ad:35:0d:7f:52:31:c2:40:d3:87:3b:d8:12:56:51:b4:29:
         d3:c5:5c:b8:d6:0f:5f:8a:9f:4a:27:16:e7:13:9c:b2:90:24:
         cc:4d:24:16:07:ae:88:18:32:f4:07:15:c1:09:45:79:d2:0f:
         c0:49:28:98:a9:c7:d1:1d:06:4d:cc:e4:86:13:1a:f1:54:e4:
         60:33:05:fb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHjNwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDky
ODgxMzI5MDIzMjM4MjdmNDQ4MDZkZTMwNjFkZWJkNTE3YThmZDkwHhcNMjMwMzA2
MjEzOTA0WhcNMjUwMzA3MjEzOTA0WjAzMTEwLwYDVQQDEyg0MDMzZDNlYWUwZGUx
OWYyZDMzMzU4MjBjYzYyY2VlYTliZmJkMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlF7lUoTXLbxvxwdTpACn2lgqavReg0T93Dr3yc0eTIeHQqz2
A937RpaUvQ1ENHqlhM48J12FXfI2HYSrUkMJgYNYRj26GqrPrpxGqROkPgJJNt1b
rSLw9Lle71QOorByjZ8MHOPIzwTcbH8z0bDTgpNl2qmMZSm0VQglCI4vs1DA/CQy
YYlqL204NqEaz0gGzQ124yeFr5uQrN0pEnYahlxdQFyH2wssZ6HGTM06I7ihVYmM
oawTTVgWXHOvh+4ArQgl/mVC+Mrw7ABpLdMHIfvEMP9+obRudclom8aFve6V2uFZ
EoZrPreL4DiAI95PIU3dmam1O0dQpDijoyt2ywIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFA7B9O7gTzNv/es0cPx8CBg5UG1/MB8GA1UdIwQYMBaAFK8sqhZbBgdOVzws
IeLxoDobMV+ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTI4ODEz
MjkwMjMyMzgyN2Y0NDgwNmRlMzA2MWRlYmQ1MTdhOGZkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTE1ZWNjMTYtY2JhNy00MjAwLTlmNWUtOTc5NGM1
ZTUzNTlkLzQwMzNkM2VhZTBkZTE5ZjJkMzMzNTgyMGNjNjJjZWVhOWJmYmQyMTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMTVlY2MxNi1jYmE3LTQyMDAtOWY1ZS05Nzk0
YzVlNTM1OWQvOTI4ODEzMjkwMjMyMzgyN2Y0NDgwNmRlMzA2MWRlYmQ1MTdhOGZk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3hzjANBgkqhkiG9w0BAQsFAAOCAQEAEGfzB6vXJsl0ht2T
jL4MiaLaS/pE/F6qN8nG5P2bYZHB/YIwZVEHdPMf44v86RrU4JgKYwFXF1svhHE1
6Q6rKcCjk+kW15ezO7xf+8iMks4d7MKmdbppt3dT+l3kch4+gHeVnnXbWXfuoQ+v
blI8mUxrxTDQvpTz9K6LN+nW+ZSFjjslLYAm+xRrXF84RM3Ivo4yI0cStmEwi1Lx
YP66JaIICD4l83GgOnihK5tYkLNAebKfzK01DX9SMcJA04c72BJWUbQp08VcuNYP
X4qfSicW5xOcspAkzE0kFgeuiBgy9AcVwQlFedIPwEkomKnH0R0GTczkhhMa8VTk
YDMF+w==
-----END CERTIFICATE-----
Generated at Thu Jan 18 22:04:32 2024 by rpki-client on console-fra.rpki-client.org