Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/960cec1551b2b5d99ece78643879862e4c4f7aa0.roa
File:                     960cec1551b2b5d99ece78643879862e4c4f7aa0.roa (raw, json)
Hash identifier:          hp0Kkzz/KoN0x7Ly8TAVPLlKW6Yz4J+029u5uiCRFoI=
Subject key identifier:   77:63:8F:1D:BC:B2:B2:15:A3:96:01:84:70:96:8E:11:A1:4C:92:ED
Certificate issuer:       /CN=9288132902323827f44806de3061debd517a8fd9
Certificate serial:       1E2C25
Authority key identifier: AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/960cec1551b2b5d99ece78643879862e4c4f7aa0.roa
Signing time:             Tue 07 Mar 2023 21:38:23 +0000
ROA not before:           Mon 06 Mar 2023 21:37:32 +0000
ROA not after:            Fri 07 Mar 2025 21:37:32 +0000
asID:                     265858
IP address blocks:        45.225.204.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jan 2024 17:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1977381 (0x1e2c25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9288132902323827f44806de3061debd517a8fd9
        Validity
            Not Before: Mar  6 21:37:32 2023 GMT
            Not After : Mar  7 21:37:32 2025 GMT
        Subject: CN=960cec1551b2b5d99ece78643879862e4c4f7aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:4f:b2:09:7a:8b:ff:e2:81:1d:60:7d:a1:
                    2f:9e:5b:ad:7d:b7:ba:d3:c0:f4:b0:60:68:6f:8c:
                    0d:5e:41:e4:e2:00:6c:5d:99:88:67:5f:9b:03:f3:
                    ff:f8:8d:d7:3c:57:cf:be:a3:ab:65:62:f7:3c:e3:
                    d5:71:d1:2e:18:18:44:20:9b:54:50:64:2d:20:17:
                    45:4b:08:91:9f:d7:86:25:f6:ba:ba:83:34:a1:02:
                    a4:7a:33:80:cf:60:8b:ee:a5:53:aa:f0:9b:36:b4:
                    bb:ab:d8:ae:41:b5:31:31:9a:76:30:04:75:6f:42:
                    ad:ff:aa:64:6b:fe:39:dd:0e:71:75:61:41:08:a8:
                    1f:e7:5a:3c:63:54:89:4b:b7:a4:e4:1e:d2:6f:43:
                    f1:80:61:be:52:9b:12:ed:51:05:60:40:f9:e4:ef:
                    b4:b2:fd:0f:ce:c1:b9:d7:ae:7e:a4:c9:e3:ef:bb:
                    da:4b:b3:b3:8d:87:d2:4c:2a:5b:60:99:ce:2e:78:
                    b1:b5:68:e6:d4:86:4c:11:0f:de:05:fd:08:51:97:
                    5e:73:89:68:63:9e:ff:58:c0:2c:c1:b9:dd:fb:31:
                    07:92:a5:84:5d:87:f5:e4:73:3a:fb:ab:c1:be:6d:
                    fd:76:20:6c:ff:ad:09:53:12:6f:4e:2e:67:12:c8:
                    e3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:63:8F:1D:BC:B2:B2:15:A3:96:01:84:70:96:8E:11:A1:4C:92:ED
            X509v3 Authority Key Identifier:
                keyid:AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/960cec1551b2b5d99ece78643879862e4c4f7aa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/9288132902323827f44806de3061debd517a8fd9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:62:49:bf:f5:2a:36:68:ec:14:5c:94:e5:b6:39:1f:40:ba:
         5b:b5:f8:ce:18:c8:b3:31:49:44:79:2f:82:61:66:75:7a:4c:
         9c:48:b0:c6:13:d6:03:c0:ae:fe:6f:2a:4f:b1:fe:80:98:8a:
         30:08:f5:0d:59:e7:6b:0d:13:fd:98:58:d4:67:0c:d3:40:ed:
         08:49:b9:e3:6c:23:c2:5f:18:6c:fd:97:dc:7d:0f:21:e1:da:
         02:a9:e9:e8:c4:25:0b:57:d5:e5:71:83:60:53:98:53:54:b7:
         77:c2:bd:90:bc:da:9d:09:35:fc:2f:b0:44:cc:2a:99:df:e4:
         16:96:26:72:3a:3d:5d:07:fa:6e:ad:b1:cf:81:ea:4e:50:2d:
         04:9a:7b:ea:24:c0:51:39:18:c6:a2:e1:f0:c1:2a:88:1a:4d:
         db:8c:f8:6d:38:3a:ea:05:4b:be:36:02:17:73:ae:26:43:6a:
         2e:cd:c6:3d:fd:af:5f:af:1e:16:4e:bd:4a:39:d0:f6:26:8c:
         ca:13:26:30:49:9d:39:ac:b9:4a:98:44:db:16:4b:9d:fd:7e:
         96:6d:ad:8e:58:89:27:00:a8:98:4f:50:0e:4d:d9:13:c5:4d:
         82:13:ca:b6:97:c7:87:c6:a7:a7:8e:19:16:b0:8c:2a:be:24:
         17:34:75:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 20:55:00 2024 by rpki-client on console-ams.rpki-client.org