Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/261a1c38-5c4f-45ac-bc90-727906cb4f15/9792ec835776eb9985044d59261c2bcd456f4230.roa
File:                     9792ec835776eb9985044d59261c2bcd456f4230.roa (raw, json)
Hash identifier:          633+wlB/qjrrKKidsHTLg/fjwe0V+OEwCfxHZ9C7W4A=
Subject key identifier:   14:36:71:F2:BB:BE:A8:E8:1D:6A:96:21:D7:05:42:D3:2B:6E:81:FF
Certificate issuer:       /CN=9f017755dc576b13bf12304bec79a25621b0e009
Certificate serial:       0629AF
Authority key identifier: F0:13:43:75:14:36:A1:26:E8:05:A7:25:7E:14:20:51:04:C7:EE:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f017755dc576b13bf12304bec79a25621b0e009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/261a1c38-5c4f-45ac-bc90-727906cb4f15/9792ec835776eb9985044d59261c2bcd456f4230.roa
Signing time:             Wed 24 Mar 2021 14:32:39 +0000
ROA not before:           Wed 24 Mar 2021 14:32:39 +0000
ROA not after:            Tue 24 Mar 2026 14:32:39 +0000
asID:                     262266
IP address blocks:        200.10.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Mar 2024 16:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403887 (0x629af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f017755dc576b13bf12304bec79a25621b0e009
        Validity
            Not Before: Mar 24 14:32:39 2021 GMT
            Not After : Mar 24 14:32:39 2026 GMT
        Subject: CN=9792ec835776eb9985044d59261c2bcd456f4230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8e:b0:5d:a0:f1:58:87:1d:73:3a:fd:2f:d4:
                    c1:aa:07:1a:17:bf:79:c6:14:1f:7e:37:70:bc:52:
                    e6:2d:87:7c:c8:1d:7e:b9:94:6c:e0:9e:4e:d4:51:
                    2d:35:24:1b:1c:cd:fa:ab:1c:51:3f:9e:ee:2d:79:
                    e6:d3:dc:82:d1:66:a3:e9:3a:90:85:24:4e:d0:07:
                    8b:ac:80:32:62:96:d7:90:b3:4d:05:5f:f0:fd:4b:
                    22:3c:44:0c:b6:bb:4b:f4:ab:f5:ba:d9:4c:d6:f1:
                    8b:06:2c:79:f6:93:71:cf:e9:fc:7b:d9:02:e4:c0:
                    7f:bd:27:20:41:9b:a0:89:db:d4:26:c6:fc:93:78:
                    37:77:b2:e6:4d:f7:e2:af:7f:07:d7:48:ec:cc:bd:
                    d0:8d:ba:ae:31:50:96:27:6f:01:45:26:88:9c:e9:
                    eb:92:89:b6:4e:3f:ff:34:66:8f:2a:28:6a:5f:af:
                    bd:1e:ee:e0:9b:45:9d:43:84:ff:83:04:3e:62:56:
                    cd:35:4f:2e:aa:38:31:58:ff:da:e7:8e:28:65:e8:
                    a3:dc:9d:7f:3f:26:c5:63:76:21:38:ff:5e:30:31:
                    f7:27:11:08:bb:fd:2f:8e:c6:11:02:41:0a:1d:08:
                    85:ae:2e:f4:f3:20:a9:b7:9f:9f:63:23:d5:50:17:
                    e3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:36:71:F2:BB:BE:A8:E8:1D:6A:96:21:D7:05:42:D3:2B:6E:81:FF
            X509v3 Authority Key Identifier:
                keyid:F0:13:43:75:14:36:A1:26:E8:05:A7:25:7E:14:20:51:04:C7:EE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f017755dc576b13bf12304bec79a25621b0e009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/261a1c38-5c4f-45ac-bc90-727906cb4f15/9792ec835776eb9985044d59261c2bcd456f4230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/261a1c38-5c4f-45ac-bc90-727906cb4f15/9f017755dc576b13bf12304bec79a25621b0e009.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:79:4c:c0:a8:bb:24:96:86:80:51:ba:da:0b:cb:eb:13:a7:
         ce:75:d6:a4:6e:d7:4a:fb:46:92:f8:09:80:e3:22:64:36:e4:
         24:61:b2:6b:06:35:95:3a:31:79:1f:51:1d:84:18:ea:57:8e:
         e0:b7:5d:44:30:c9:a5:41:f5:f5:96:89:f7:d0:87:39:ac:95:
         c6:b2:f8:90:88:30:bf:76:48:f0:24:ee:e5:b2:0b:4b:d4:e3:
         37:b9:c8:f1:fc:ed:e8:fe:19:8a:c5:9c:8d:ef:e7:ad:a4:ea:
         25:ef:5e:36:96:c9:db:18:12:f6:b1:2f:c2:9a:86:96:9f:5a:
         72:a4:4d:c4:0e:cd:b9:58:44:cc:13:e4:f0:19:b4:74:35:a7:
         25:f0:b5:50:01:55:ca:18:06:86:c2:16:12:2a:3f:2b:1d:b2:
         29:c3:27:1e:f5:a4:60:72:bc:9f:cb:73:d9:8b:4b:d3:a4:e9:
         be:8d:35:05:28:e2:f3:3c:1c:ca:ab:f6:b6:91:f4:9f:62:c4:
         d8:8f:9b:82:54:9d:4c:ac:2b:3a:52:f1:e9:b7:58:63:a1:0e:
         1d:0e:c9:d0:6f:13:24:92:36:f2:f0:ec:0d:26:80:c5:b6:4b:
         36:65:37:f4:aa:6f:89:07:a1:8e:44:2b:9e:6b:94:fc:4e:39:
         48:77:23:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 19:35:27 2024 by rpki-client on console-fra.rpki-client.org