Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/ba81480a5628ef00dbeb52ae783053d1254b3924.roa
File:                     ba81480a5628ef00dbeb52ae783053d1254b3924.roa (raw, json)
Hash identifier:          jgTV7hjZNilbRL9/hqYRw8yTqkPHs7kgHKPCeJZtPcg=
Subject key identifier:   AB:87:0D:C8:91:D4:FD:68:CD:A0:00:E9:3D:40:91:7E:91:1A:0A:C6
Certificate issuer:       /CN=9288132902323827f44806de3061debd517a8fd9
Certificate serial:       1E363A
Authority key identifier: AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/ba81480a5628ef00dbeb52ae783053d1254b3924.roa
Signing time:             Tue 07 Mar 2023 21:39:46 +0000
ROA not before:           Mon 06 Mar 2023 21:39:28 +0000
ROA not after:            Fri 07 Mar 2025 21:39:28 +0000
asID:                     265858
IP address blocks:        45.225.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jan 2024 17:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1979962 (0x1e363a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9288132902323827f44806de3061debd517a8fd9
        Validity
            Not Before: Mar  6 21:39:28 2023 GMT
            Not After : Mar  7 21:39:28 2025 GMT
        Subject: CN=ba81480a5628ef00dbeb52ae783053d1254b3924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:46:77:94:16:33:8f:df:dc:05:f5:91:32:
                    95:1f:68:03:69:f4:60:83:12:f6:5e:67:e3:f3:ae:
                    3e:66:85:fe:bf:73:f0:a5:54:6f:b0:9d:c9:02:96:
                    6f:37:93:fd:8e:9f:f7:48:33:08:4d:e3:de:08:e6:
                    d4:fd:20:df:6a:e6:35:3d:3a:b0:01:fc:17:9d:f8:
                    01:3c:12:bc:02:3a:49:e3:72:2e:1f:09:13:6b:c8:
                    55:a4:34:42:6f:57:a0:7d:2c:09:a0:06:c2:c4:3d:
                    b8:8d:38:52:44:a4:9a:fc:32:2e:1d:88:da:7d:f3:
                    cc:24:19:05:5c:73:18:3a:84:12:b6:5d:04:ca:0c:
                    74:e4:07:d4:93:1b:f8:eb:3b:4d:a0:5b:ff:6c:5b:
                    4f:98:18:bb:82:c3:6e:cc:ee:e9:79:c2:7e:44:15:
                    2e:90:d9:11:b1:8e:4a:3a:06:f5:d6:0e:29:04:f7:
                    04:67:53:96:b5:45:61:8a:7e:44:32:a1:33:e7:f3:
                    87:d2:55:6a:32:31:45:6a:7e:7b:35:96:aa:1b:5a:
                    a6:2f:a8:8a:85:90:57:f4:97:4c:35:43:91:73:d0:
                    7e:77:ca:12:86:75:d0:79:b9:82:a9:47:10:44:dc:
                    61:d1:cb:6b:40:d1:10:a2:ba:94:ad:68:1e:e7:c3:
                    c5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:87:0D:C8:91:D4:FD:68:CD:A0:00:E9:3D:40:91:7E:91:1A:0A:C6
            X509v3 Authority Key Identifier:
                keyid:AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/ba81480a5628ef00dbeb52ae783053d1254b3924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/9288132902323827f44806de3061debd517a8fd9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d7:54:35:4b:6f:9b:2f:f9:93:df:e2:ff:8d:e3:8c:66:92:
         4e:9a:4f:5b:4e:43:e2:75:a2:0b:2f:10:fa:09:29:31:2e:16:
         dd:2b:23:a6:38:b1:54:3c:e9:9e:d0:64:b7:ce:bc:65:24:6b:
         ae:3a:17:f1:50:96:08:4f:2c:2b:bd:db:a3:d5:94:83:48:68:
         7e:fa:02:42:5f:4a:71:0f:7a:24:60:76:8d:49:30:1f:1a:08:
         0b:6e:74:0c:b0:f6:fe:7e:9c:70:19:b0:d3:3d:18:bf:d6:fa:
         b8:ba:bc:02:98:61:01:c5:a8:11:22:1d:5e:47:c8:e1:e2:a6:
         6b:61:78:d7:38:1d:86:99:5e:9d:ea:d6:c4:9c:ed:96:bf:2c:
         78:4a:62:b4:3a:9a:8d:5b:47:f5:50:57:b2:23:99:1b:44:f0:
         b6:77:26:1c:33:91:9e:02:3c:34:36:aa:8c:27:05:26:e2:4e:
         7a:ed:95:d5:3c:ef:6d:bf:9e:30:c0:bd:07:12:a6:84:59:42:
         c2:07:25:b9:7f:cd:9f:6c:cb:52:2d:5f:6b:c6:d6:0d:de:05:
         bd:ab:62:1e:54:47:9c:4c:ff:19:55:03:5d:ca:97:4b:3e:9a:
         db:46:4e:79:4f:40:c3:f9:62:ac:9d:e6:e1:f5:3c:85:3f:a4:
         9b:84:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 22:04:32 2024 by rpki-client on console-fra.rpki-client.org