Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/6d12410bfa5f8bb761d139d256a7a3abc14f8df0.roa
File:                     6d12410bfa5f8bb761d139d256a7a3abc14f8df0.roa (raw, json)
Hash identifier:          XsrjwoOzYht98P14Qxfd3idLdxx4dURqEBbut3f98Fc=
Subject key identifier:   03:F6:C1:0E:65:1E:58:7D:79:49:29:1B:C1:9E:ED:51:0C:E5:C1:EA
Certificate issuer:       /CN=ac54f49fd3334b47a73d6d08bdfa334f4d159e45
Certificate serial:       0BFA6B
Authority key identifier: 2D:6F:BC:1B:7F:32:B2:F1:36:36:7E:B1:72:DF:D2:BE:DE:7D:40:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac54f49fd3334b47a73d6d08bdfa334f4d159e45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/6d12410bfa5f8bb761d139d256a7a3abc14f8df0.roa
Signing time:             Wed 24 Mar 2021 14:32:40 +0000
ROA not before:           Wed 24 Mar 2021 14:32:39 +0000
ROA not after:            Tue 24 Mar 2026 14:32:39 +0000
asID:                     267764
IP address blocks:        45.169.104.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 30 Mar 2024 00:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785003 (0xbfa6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac54f49fd3334b47a73d6d08bdfa334f4d159e45
        Validity
            Not Before: Mar 24 14:32:39 2021 GMT
            Not After : Mar 24 14:32:39 2026 GMT
        Subject: CN=6d12410bfa5f8bb761d139d256a7a3abc14f8df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:2e:bc:a8:71:46:4a:01:ce:87:ba:ad:28:
                    f6:1a:ec:e8:67:f3:59:e7:9a:fa:4c:68:ef:28:20:
                    47:5b:da:42:08:8a:c1:89:3e:2a:8d:97:17:44:32:
                    aa:80:73:a0:9a:82:5f:9c:76:a3:85:d5:6c:fe:92:
                    0a:f9:90:3d:6e:f9:41:83:55:83:5b:b2:60:ae:b8:
                    2d:98:75:11:0b:04:c5:42:59:aa:1b:38:e2:90:38:
                    c8:7d:4c:1e:76:28:c9:0c:7b:1c:c6:0d:de:e7:87:
                    00:d0:d8:34:c0:c0:e7:5c:4a:73:75:d6:b4:ef:8b:
                    8a:82:d3:8e:ca:0e:40:0c:0c:63:80:66:93:b6:8e:
                    da:54:94:28:ce:06:90:ff:90:6f:c9:e8:7d:e8:41:
                    51:87:2c:1f:ad:18:9b:fd:e5:6c:b3:14:9e:82:4d:
                    53:a3:b8:ac:fd:59:5c:c7:b6:0a:bd:35:bf:87:ca:
                    19:95:86:c7:c7:6a:03:d6:85:ee:68:d6:8d:26:dd:
                    3d:b6:8b:b6:b8:7e:d5:3d:d4:d1:b5:f4:0b:ee:85:
                    fc:a3:b4:21:5a:15:af:ac:1b:9c:a5:9f:25:91:30:
                    63:76:69:41:b6:a8:c6:be:9b:61:73:a4:c8:9d:ff:
                    71:cb:07:af:02:bb:f2:91:68:d5:37:65:84:06:37:
                    b0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F6:C1:0E:65:1E:58:7D:79:49:29:1B:C1:9E:ED:51:0C:E5:C1:EA
            X509v3 Authority Key Identifier:
                keyid:2D:6F:BC:1B:7F:32:B2:F1:36:36:7E:B1:72:DF:D2:BE:DE:7D:40:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac54f49fd3334b47a73d6d08bdfa334f4d159e45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/6d12410bfa5f8bb761d139d256a7a3abc14f8df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/ac54f49fd3334b47a73d6d08bdfa334f4d159e45.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:5a:e3:77:14:3b:b0:1b:d2:d1:c5:fb:c6:59:9d:67:81:
         34:09:ed:bd:fd:d2:c7:2d:08:9c:ee:2c:06:d1:e6:34:78:40:
         00:f9:c0:d2:44:38:63:aa:36:39:c8:d3:28:54:c9:9a:d4:0a:
         33:2d:18:d2:ae:79:03:df:b0:36:ba:b4:de:ce:d7:c0:32:e4:
         03:65:27:2a:1a:28:bf:9d:67:55:18:09:4f:4b:b2:f9:54:04:
         f0:3d:12:52:88:e1:8b:50:ed:da:e5:de:c0:27:58:7c:15:7a:
         31:4f:c8:0b:09:71:ee:48:0a:f8:b4:bf:67:12:c3:a8:f5:96:
         d3:b1:e1:5b:ff:1a:bf:44:35:f5:09:c6:45:fc:06:4e:7b:dc:
         6d:2e:94:dc:93:44:e8:bf:3d:45:2c:01:6d:26:6c:0c:d9:76:
         40:08:6c:01:97:a8:d2:34:a0:d1:83:df:c3:35:4f:ff:4c:8e:
         5a:dc:1b:4e:69:89:b0:67:4c:1d:fb:6e:31:6c:e4:2d:d1:b1:
         92:d8:82:30:d3:ea:56:9e:8f:eb:e1:cf:0e:28:2b:3a:ce:81:
         a6:c9:c0:63:03:fe:75:ca:2b:59:19:e7:97:58:5d:a5:d1:c1:
         bf:96:23:32:48:76:a7:7b:7e:ec:c6:e3:f0:6f:88:ca:7d:25:
         a7:23:93:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 01:41:52 2024 by rpki-client on console-fra.rpki-client.org