Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/2fc0ef208b9303cfb0e1984e97e0bed0e2db938c.roa
File:                     2fc0ef208b9303cfb0e1984e97e0bed0e2db938c.roa (raw, json)
Hash identifier:          BLjWcCLRWRjidBRA0m5vTOpVgvJvvumlPi6hCWvSCmU=
Subject key identifier:   DC:24:D1:07:2A:8D:57:19:C5:D2:05:89:89:D7:3F:D9:CC:E9:FE:C5
Certificate issuer:       /CN=e23c20ddda6bed03066338dfd5903e3494808052
Certificate serial:       1B93
Authority key identifier: 20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/2fc0ef208b9303cfb0e1984e97e0bed0e2db938c.roa
Signing time:             Thu 10 Feb 2022 21:01:13 +0000
ROA not before:           Thu 10 Feb 2022 03:00:00 +0000
ROA not after:            Sat 10 Feb 2024 03:00:00 +0000
asID:                     270047
IP address blocks:        179.0.184.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 07:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7059 (0x1b93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23c20ddda6bed03066338dfd5903e3494808052
        Validity
            Not Before: Feb 10 03:00:00 2022 GMT
            Not After : Feb 10 03:00:00 2024 GMT
        Subject: CN=2fc0ef208b9303cfb0e1984e97e0bed0e2db938c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:18:89:06:29:7c:af:49:08:4c:36:ae:f1:af:
                    f9:a5:05:ce:b6:75:34:2c:fe:c4:1f:eb:18:2d:78:
                    6e:97:10:7f:b5:10:c1:e0:3e:ca:a5:e0:59:ea:2d:
                    45:74:f1:68:dd:35:2c:67:f3:64:e2:3d:50:4f:02:
                    7d:22:9b:fb:da:cf:d7:33:61:45:cf:ea:74:58:65:
                    ec:f2:94:1e:6e:42:62:d4:4a:10:76:81:13:4c:fb:
                    9d:38:36:18:e3:38:2e:eb:5c:fa:7b:71:e2:5c:9e:
                    c5:5c:17:e6:d3:cc:88:52:11:fb:ff:84:ef:5f:c3:
                    bb:03:f8:a1:a0:1a:ea:7d:47:ab:67:f7:2a:0c:b2:
                    87:58:b6:ed:ee:14:47:ca:65:49:73:14:08:9a:60:
                    e5:9a:45:e6:6a:3a:4d:9d:49:d7:50:2d:e3:cb:ed:
                    ef:79:34:c4:54:66:f4:66:de:12:70:2d:a4:6b:2f:
                    62:af:d9:ac:d3:0d:77:5d:63:45:7f:2f:d0:81:78:
                    15:37:e1:7c:cf:2a:78:f1:dd:31:b1:46:ef:a1:2e:
                    b2:78:62:31:63:51:f9:e8:fc:be:f9:21:39:4c:c2:
                    45:fe:c4:ba:ed:60:b1:ab:e0:85:67:eb:81:31:e3:
                    cb:99:80:d7:f6:ce:67:2d:75:54:72:2f:30:bc:5b:
                    bd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:24:D1:07:2A:8D:57:19:C5:D2:05:89:89:D7:3F:D9:CC:E9:FE:C5
            X509v3 Authority Key Identifier:
                keyid:20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/2fc0ef208b9303cfb0e1984e97e0bed0e2db938c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/e23c20ddda6bed03066338dfd5903e3494808052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:e3:a7:d9:6f:10:7b:1d:3a:26:8d:68:61:73:95:a4:2a:11:
         00:b4:5d:02:6e:a4:c9:a8:79:ba:db:ef:d5:45:3f:c6:d8:8e:
         b3:93:da:90:58:12:14:ba:68:50:57:e0:61:46:0a:bd:7c:01:
         54:18:ff:0c:be:02:cf:d6:48:68:d7:96:20:51:fa:ad:d8:33:
         2d:1f:eb:28:7e:cd:32:3c:12:9b:4b:6e:07:ac:a6:fe:eb:56:
         f8:b6:4b:91:27:ce:61:9e:69:16:32:39:e3:dd:9c:f1:e1:d9:
         3e:86:24:aa:87:d6:4f:2e:1e:c6:e5:4f:77:4a:2b:0f:4b:86:
         ba:10:8d:72:fa:5f:1d:a9:7c:84:44:a7:75:c9:77:e2:1f:2b:
         18:5c:d9:4d:f6:eb:6a:36:ff:ad:7c:0b:b4:e2:b7:23:f0:be:
         01:da:37:57:ce:e5:d0:f0:04:5f:a9:87:ec:29:0d:f1:3f:d8:
         fe:12:a3:2f:89:5d:1c:49:07:4a:7c:01:e1:7f:c1:52:e3:59:
         7b:59:c2:95:c8:74:57:e7:8f:87:8f:c5:ff:38:01:ee:a2:32:
         09:54:fc:40:7d:1b:84:8d:70:67:29:6e:0f:e0:58:0a:df:27:
         2b:62:ef:6c:0e:a2:bb:a4:65:c4:3c:04:0d:82:fd:a6:98:88:
         fb:16:2f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 12:53:13 2024 by rpki-client on console-fra.rpki-client.org