Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/0a86b2bd9eaf862a3c9a2e409439bc47df2793bf.roa
File:                     0a86b2bd9eaf862a3c9a2e409439bc47df2793bf.roa (raw, json)
Hash identifier:          A3dMyv+Jp4Xb3xTB1Po1D0w70mDbHaQnwTEoyjF53TU=
Subject key identifier:   6E:FA:65:C9:45:E3:B8:A3:E9:4C:0E:05:8A:B2:CE:A3:A9:00:66:DB
Certificate issuer:       /CN=0f6b8f2a30f1c9159e728a614b3a6695bf89016b
Certificate serial:       153DAA
Authority key identifier: 6A:A1:20:8F:EF:EB:F1:E9:B2:EF:CD:4E:61:8D:DF:E2:68:F7:3E:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f6b8f2a30f1c9159e728a614b3a6695bf89016b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/0a86b2bd9eaf862a3c9a2e409439bc47df2793bf.roa
Signing time:             Sat 19 Mar 2022 13:20:23 +0000
ROA not before:           Sat 19 Mar 2022 03:00:00 +0000
ROA not after:            Tue 19 Mar 2024 03:00:00 +0000
asID:                     52436
IP address blocks:        179.63.240.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 08:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392042 (0x153daa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f6b8f2a30f1c9159e728a614b3a6695bf89016b
        Validity
            Not Before: Mar 19 03:00:00 2022 GMT
            Not After : Mar 19 03:00:00 2024 GMT
        Subject: CN=0a86b2bd9eaf862a3c9a2e409439bc47df2793bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:1e:bb:8b:33:5b:9e:2c:52:95:d1:89:4b:
                    8b:fd:3e:52:9b:05:4c:92:57:ea:77:67:e8:29:88:
                    f7:dc:b9:c8:37:55:98:72:07:97:f0:29:8f:cf:16:
                    ce:95:1f:78:4c:c9:b2:af:54:c9:f9:13:1f:24:9e:
                    8e:33:9c:85:52:a4:9c:ab:3e:ee:41:a4:32:0c:5a:
                    af:90:f6:f0:82:81:e0:5a:c0:16:af:80:81:ee:17:
                    fc:fa:3f:f4:42:1d:2f:b6:8c:2a:9b:09:e9:0d:d0:
                    9a:50:06:91:b7:c1:92:ed:c7:d2:cd:9a:4d:6f:5b:
                    2b:4b:c7:08:a2:b8:8d:71:59:e9:20:52:e4:c6:59:
                    f8:21:f3:ed:e8:eb:2c:6d:9b:9b:d3:d0:1d:e3:11:
                    d4:4e:fe:6e:20:f2:cb:4e:2a:4b:fa:ea:5b:26:f1:
                    ac:80:49:e5:6a:04:34:5c:28:63:4e:f1:6a:06:e7:
                    bd:8e:58:85:9c:10:00:0a:79:5a:a6:c4:94:32:c1:
                    01:ce:d6:e2:4f:a9:05:f0:92:54:11:be:ee:1d:c4:
                    45:10:8a:d0:72:ab:c0:80:95:bf:2d:6e:d3:01:4f:
                    22:f2:0a:2e:2a:d1:9c:61:6c:b9:2f:f2:b2:98:e0:
                    6e:0f:72:0c:78:27:34:fb:56:31:99:c1:84:04:4b:
                    cc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FA:65:C9:45:E3:B8:A3:E9:4C:0E:05:8A:B2:CE:A3:A9:00:66:DB
            X509v3 Authority Key Identifier:
                keyid:6A:A1:20:8F:EF:EB:F1:E9:B2:EF:CD:4E:61:8D:DF:E2:68:F7:3E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f6b8f2a30f1c9159e728a614b3a6695bf89016b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/0a86b2bd9eaf862a3c9a2e409439bc47df2793bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/0f6b8f2a30f1c9159e728a614b3a6695bf89016b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:88:a6:9c:6d:03:83:79:32:1e:22:94:5d:f1:dc:6a:61:49:
         50:7b:7f:39:ac:d2:9a:62:75:9d:83:7d:66:c3:de:4e:62:aa:
         70:75:63:3c:2c:68:37:35:af:92:1f:57:63:05:62:ea:cd:0d:
         e2:b7:fa:85:7f:91:bb:bc:9b:cf:a0:1c:86:3f:06:a7:64:f7:
         5a:40:35:af:21:dd:77:cc:96:6b:46:63:0f:ad:0b:5e:3f:30:
         41:15:c1:71:06:4b:21:47:1d:72:ad:57:4b:9b:21:24:c4:30:
         9a:c6:16:49:fb:e9:58:13:dc:86:68:4e:43:e7:4f:4a:8e:e3:
         81:5b:98:87:46:df:f3:60:e2:0b:cc:ac:fe:1d:a3:50:31:d9:
         07:f8:d4:49:fc:8c:80:02:fe:31:5f:37:c5:79:1f:f2:b7:e3:
         64:53:91:ee:2b:f5:c5:5d:2e:a1:ec:ca:cf:ae:cf:42:a9:07:
         f1:a2:b1:0f:1d:c2:3d:13:66:27:ce:4c:db:cf:b9:7f:11:54:
         98:40:1f:65:b9:63:98:52:df:f8:ae:7d:6c:04:23:ea:90:8a:
         ba:23:21:d8:4d:c8:1c:7b:c5:9c:e1:04:25:b3:1d:4a:e7:8a:
         b8:87:71:32:5e:33:89:42:7a:c8:2c:ba:73:0d:3f:ed:ce:67:
         54:9b:5e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 11:46:50 2024 by rpki-client on console-ams.rpki-client.org