Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/50dbc4c7066a5f3a6f54c4334955742f4ea26cde.roa
File:                     50dbc4c7066a5f3a6f54c4334955742f4ea26cde.roa (raw, json)
Hash identifier:          1iGcYZUk3NgwDtewvcValKDMDywbA7soPc6YRDOvEls=
Subject key identifier:   27:80:0E:E9:56:44:5D:D4:63:8B:CA:F5:E8:7D:D5:67:0C:1F:06:F5
Certificate issuer:       /CN=e23c20ddda6bed03066338dfd5903e3494808052
Certificate serial:       17C2
Authority key identifier: 20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/50dbc4c7066a5f3a6f54c4334955742f4ea26cde.roa
Signing time:             Thu 10 Feb 2022 21:00:58 +0000
ROA not before:           Thu 10 Feb 2022 03:00:00 +0000
ROA not after:            Sat 10 Feb 2024 03:00:00 +0000
asID:                     270047
IP address blocks:        179.0.186.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 07:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6082 (0x17c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23c20ddda6bed03066338dfd5903e3494808052
        Validity
            Not Before: Feb 10 03:00:00 2022 GMT
            Not After : Feb 10 03:00:00 2024 GMT
        Subject: CN=50dbc4c7066a5f3a6f54c4334955742f4ea26cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:08:d8:b2:95:c6:1b:c5:e3:a2:f7:3a:72:a7:
                    cc:01:21:99:4d:16:cf:b7:5e:0e:8c:93:c7:46:b7:
                    78:a3:d7:90:07:b7:7b:6b:82:cf:f1:ab:67:2f:bd:
                    25:f2:5f:b7:2c:9d:ab:25:38:21:99:4b:11:8a:50:
                    18:a5:04:ab:6b:0c:18:41:06:08:d6:6b:b3:9d:f9:
                    cd:43:1b:a6:18:43:24:06:ce:2f:16:82:40:01:51:
                    91:16:9d:d9:89:c0:93:4a:44:7e:2d:f4:41:ad:52:
                    dd:27:b7:92:8c:99:81:4b:e3:83:ab:c7:dd:52:35:
                    23:28:cb:dc:a2:85:cf:86:f3:c5:98:d6:87:d3:2e:
                    07:bf:79:f8:53:e3:97:47:42:3d:13:c0:48:ab:1d:
                    e8:53:3c:53:e0:5c:4c:c5:9c:49:12:e6:de:4e:13:
                    3f:1b:3b:48:9b:a9:7c:fa:ab:a1:e5:7a:2b:02:86:
                    82:e9:88:65:22:cf:96:6f:b7:ca:7f:f8:36:50:e8:
                    29:53:54:ef:e9:e2:37:3f:9a:06:c5:96:fe:14:df:
                    a4:73:ac:b9:33:b6:30:0e:e9:88:2d:87:17:aa:bf:
                    c5:5b:56:e5:02:4b:9f:43:27:ed:c8:94:3f:29:c5:
                    72:75:8e:58:5a:cf:e1:cc:97:74:72:33:90:23:9f:
                    4a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:80:0E:E9:56:44:5D:D4:63:8B:CA:F5:E8:7D:D5:67:0C:1F:06:F5
            X509v3 Authority Key Identifier:
                keyid:20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/50dbc4c7066a5f3a6f54c4334955742f4ea26cde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/e23c20ddda6bed03066338dfd5903e3494808052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:ca:4e:b0:d2:c4:fa:3f:d9:db:9a:9a:59:ec:22:3c:fc:44:
         16:e4:88:23:63:14:6c:66:09:05:a7:d0:31:c1:9e:ca:3f:ed:
         67:7e:8e:61:c1:e8:35:60:1f:b4:35:5c:c9:3f:5d:0f:49:87:
         fb:b5:dd:1b:3a:fa:1d:33:8f:e8:1c:d3:fc:ed:49:82:da:cc:
         eb:a7:10:29:37:cc:97:05:bf:53:4e:85:5e:5f:1b:bb:9d:68:
         15:7a:b7:da:c6:cd:f8:56:cb:93:e1:b8:23:fa:2c:ca:82:c0:
         2a:b4:22:42:88:aa:a0:ef:1e:2d:5e:36:ad:ba:75:39:1a:49:
         91:fc:a2:40:1a:0d:44:9b:aa:99:63:00:4e:32:1d:52:9d:43:
         97:27:f0:1e:d3:2b:e4:10:92:e5:d8:de:ae:1f:d7:f9:5a:25:
         c5:93:62:a0:0c:1f:11:01:d3:ed:c0:df:67:bf:5e:18:a8:15:
         1d:6d:33:bd:51:ea:b0:9f:35:a0:36:2f:7d:d0:ca:a0:d6:eb:
         19:27:8b:f6:79:d8:81:33:59:c7:c1:6c:aa:b0:e6:d5:4d:89:
         31:32:82:29:74:4f:c4:12:ab:00:69:85:0f:30:35:e8:96:ff:
         df:bb:ee:89:5b:5d:a9:be:5d:79:b7:eb:75:a3:71:13:6a:39:
         b7:77:8a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 12:20:37 2024 by rpki-client on console-ams.rpki-client.org