Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/49ed0b1ac03b3636f3b1dc4f25b46db471e370f9.roa
File:                     49ed0b1ac03b3636f3b1dc4f25b46db471e370f9.roa (raw, json)
Hash identifier:          sqSBv6wwcCkGyWCkmwoMb22M8Nu++1rBVap36TVG1kk=
Subject key identifier:   90:84:E2:47:CE:A4:95:CA:7F:88:F0:00:9E:72:63:99:21:A8:49:D2
Certificate issuer:       /CN=9335683e4b18488db2c2495f3084999892751bfe
Certificate serial:       13D7A3
Authority key identifier: F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/49ed0b1ac03b3636f3b1dc4f25b46db471e370f9.roa
Signing time:             Wed 02 Mar 2022 15:23:49 +0000
ROA not before:           Wed 02 Mar 2022 03:00:00 +0000
ROA not after:            Sat 02 Mar 2024 03:00:00 +0000
asID:                     263793
IP address blocks:        138.117.16.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 08:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1300387 (0x13d7a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9335683e4b18488db2c2495f3084999892751bfe
        Validity
            Not Before: Mar  2 03:00:00 2022 GMT
            Not After : Mar  2 03:00:00 2024 GMT
        Subject: CN=49ed0b1ac03b3636f3b1dc4f25b46db471e370f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:d0:7e:e0:6d:95:90:93:02:e4:ce:52:d7:
                    7a:35:f2:10:40:89:b7:33:8f:3c:a8:7e:68:b8:0e:
                    66:00:d7:1e:dd:cc:cc:5e:ef:73:91:e4:06:a1:2e:
                    c5:f1:cb:86:2b:14:f5:28:91:c5:22:95:db:ba:c7:
                    ad:8c:b5:52:5e:7c:0d:2e:5a:00:30:ce:6a:c4:8b:
                    3f:5e:63:e9:50:39:64:b4:97:d9:13:27:21:09:e0:
                    76:bf:ea:f3:e4:cc:36:97:bd:96:e9:9c:92:1b:5b:
                    51:fc:dc:85:82:66:41:fd:31:39:a7:9c:0f:2f:1b:
                    07:74:00:62:37:5e:72:8b:b7:ae:6d:f9:c4:10:8f:
                    04:b4:36:89:ad:0b:36:d8:72:b7:0b:f2:29:75:d8:
                    67:45:bc:48:04:a1:0f:31:07:cd:e5:65:31:96:7c:
                    79:84:78:10:61:ac:16:7d:32:43:b4:3a:de:64:12:
                    6c:fd:0f:71:3a:e7:9f:06:cd:90:b7:a7:b4:49:ba:
                    d5:99:f2:07:4e:01:76:43:81:cd:89:94:1f:72:24:
                    ed:9e:da:ae:5c:fe:31:f8:46:65:82:a5:e3:4f:ce:
                    7e:e2:99:d5:50:88:df:e5:6d:fc:65:fb:63:8f:2a:
                    d8:57:32:fa:99:ad:3c:e0:3d:95:8e:6a:a6:d5:a9:
                    c0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:84:E2:47:CE:A4:95:CA:7F:88:F0:00:9E:72:63:99:21:A8:49:D2
            X509v3 Authority Key Identifier:
                keyid:F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/49ed0b1ac03b3636f3b1dc4f25b46db471e370f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/9335683e4b18488db2c2495f3084999892751bfe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:42:37:c6:61:8f:3c:94:b4:c8:8f:b4:43:12:c5:9c:c4:bc:
         f7:2e:2e:b2:72:12:78:32:6b:ad:8f:51:d7:c9:f5:f4:59:0d:
         28:5e:a7:00:a7:90:4e:d7:7d:63:2a:fb:8d:4a:79:71:6c:e0:
         53:0d:ac:07:03:a4:97:41:1f:e3:13:b0:3c:b8:a0:d5:74:b4:
         51:ac:ed:77:d4:b7:7a:40:b3:45:14:a0:d0:94:d7:4d:86:fc:
         d9:69:e1:8e:31:46:05:5f:d9:3f:09:94:b8:ee:f5:e9:92:ca:
         1d:75:5e:4c:d5:99:21:10:66:05:a0:f5:71:18:8f:d8:37:1a:
         19:1e:4c:81:98:f2:7a:9c:0e:56:f0:db:80:7c:fe:e4:38:cc:
         31:4a:6a:7a:10:7c:e8:e0:c9:f8:09:2d:f3:f4:44:ae:b7:4f:
         55:e2:1d:67:63:44:2e:48:ce:db:15:16:00:72:85:76:a9:63:
         ba:81:72:e7:a0:59:7c:99:fa:30:16:d7:ab:9b:a5:36:5d:f7:
         6c:af:24:42:cc:4e:cd:52:49:67:f3:6f:95:ed:7c:a6:7c:a5:
         16:59:f5:96:d1:56:3d:8f:7f:53:90:33:11:80:b8:8a:64:cc:
         cb:e6:3e:d6:d1:8e:d7:2a:b2:5d:5c:b0:54:62:06:2a:43:a5:
         c5:d6:cd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 11:05:05 2024 by rpki-client on console-fra.rpki-client.org