Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/f93d453f0ab9636f2fdf56aab1893313f3f9d0ef.roa
File:                     f93d453f0ab9636f2fdf56aab1893313f3f9d0ef.roa (raw, json)
Hash identifier:          y92KL1ViQzyH78frmeVB8BKwg0JLPBErVqoS45hApjw=
Subject key identifier:   B5:31:53:2B:0E:1A:75:F6:92:3F:AC:0C:62:E7:AC:83:E3:05:EE:11
Certificate issuer:       /CN=05820a897e090cc17411129464e856f3f8c8966d
Certificate serial:       021FDE
Authority key identifier: 57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/f93d453f0ab9636f2fdf56aab1893313f3f9d0ef.roa
Signing time:             Fri 10 Jun 2022 14:30:20 +0000
ROA not before:           Thu 31 Mar 2022 03:00:00 +0000
ROA not after:            Sun 31 Mar 2024 03:00:00 +0000
asID:                     265572
IP address blocks:        45.174.57.0/24 maxlen: 26

Validation:               Failed, certificate revoked on Sat 30 Mar 2024 08:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139230 (0x21fde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820a897e090cc17411129464e856f3f8c8966d
        Validity
            Not Before: Mar 31 03:00:00 2022 GMT
            Not After : Mar 31 03:00:00 2024 GMT
        Subject: CN=f93d453f0ab9636f2fdf56aab1893313f3f9d0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2f:6a:43:fb:5f:e4:e5:68:7a:20:53:ac:38:
                    44:18:30:f6:89:e9:44:bb:74:de:e3:f5:4f:3b:d8:
                    1e:96:fb:3f:81:24:1d:f4:32:42:bf:24:6c:6f:2e:
                    ad:9d:0a:fe:5b:c5:11:e1:cc:47:ff:21:74:b6:ea:
                    ec:b8:07:4f:23:35:c4:cf:47:28:af:8a:41:04:d3:
                    dc:cc:61:39:67:04:26:0b:9b:67:af:19:d2:ec:0f:
                    f9:cb:5e:dd:67:55:54:be:20:ed:e3:c3:9f:72:d0:
                    c3:e5:e3:48:fc:71:fa:2f:e0:46:6c:b1:e3:e3:8e:
                    80:24:2f:32:d8:a6:12:f3:c0:81:83:e4:e5:87:52:
                    e1:85:b2:b9:78:f3:23:d6:bf:53:54:4d:e3:2f:87:
                    e7:b3:0b:0e:9e:0c:a4:19:2f:ee:f3:1b:e2:2e:fb:
                    2d:97:71:f0:1f:17:f9:02:2d:4b:a9:95:17:57:36:
                    4c:80:e2:4d:07:5b:6d:57:00:1f:ae:1f:8c:8c:e8:
                    27:41:c4:00:7d:c6:79:82:f0:7a:98:24:c0:ce:ef:
                    40:06:ed:ef:59:3f:f7:33:34:9e:2f:14:7e:e5:fc:
                    38:1f:35:29:14:42:75:72:fd:17:02:b6:cb:70:e5:
                    a1:98:2f:77:ca:07:a3:a6:f0:36:38:72:da:6c:85:
                    d7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:31:53:2B:0E:1A:75:F6:92:3F:AC:0C:62:E7:AC:83:E3:05:EE:11
            X509v3 Authority Key Identifier:
                keyid:57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/f93d453f0ab9636f2fdf56aab1893313f3f9d0ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:91:cf:67:06:0b:6a:38:6b:42:2a:28:6b:34:9d:b3:c6:0f:
         1f:c0:48:87:22:23:9c:ad:23:04:5e:30:17:72:5b:6e:b4:a6:
         b3:e8:7b:24:c3:6f:53:a8:4e:b5:53:36:50:6d:f1:37:d1:e4:
         31:b1:1b:6e:0f:0d:e6:29:4c:d9:bc:82:b7:91:07:0c:62:8c:
         c2:15:2e:24:83:8c:50:f1:60:be:e5:8f:17:60:d2:cd:c4:2b:
         04:7b:24:b9:65:1b:d0:1b:e9:00:2b:ab:d8:82:38:35:3f:4a:
         02:ad:60:6b:08:aa:c3:27:4e:c8:33:7c:53:66:ca:90:6d:c8:
         a8:da:45:d8:c1:95:5c:68:08:ac:51:87:90:b8:d9:17:9e:66:
         a5:dd:db:a6:36:94:24:d5:ac:5b:71:88:ed:63:4a:a6:02:62:
         15:10:01:c4:86:40:d5:c8:e8:34:c2:d5:61:c4:d5:07:a0:81:
         38:d8:fd:8d:da:a7:f3:51:15:ad:fa:09:e3:9b:93:f2:7e:26:
         ff:7c:4a:09:5e:cb:1d:83:d1:fe:c0:4f:ac:25:b5:98:d4:90:
         dd:32:3d:c3:70:63:7b:01:2f:2f:52:f6:36:61:89:d7:b1:0d:
         7c:52:fd:fe:8f:aa:ab:4e:ff:34:91:50:69:fa:5e:49:1f:1b:
         88:56:2c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 09:41:25 2024 by rpki-client on console-ams.rpki-client.org