Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/8c5a123c0cb47b5e59b6534143955213f890eed5.roa
File:                     8c5a123c0cb47b5e59b6534143955213f890eed5.roa (raw, json)
Hash identifier:          Fx0dF+stduE0IDmUCQmZVfP91EIvFIITQ1gIDH0M83M=
Subject key identifier:   99:4C:28:A3:0C:EB:AC:62:28:74:A1:C2:FC:A0:69:A1:33:E9:C9:52
Certificate issuer:       /CN=e23c20ddda6bed03066338dfd5903e3494808052
Certificate serial:       118A
Authority key identifier: 20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/8c5a123c0cb47b5e59b6534143955213f890eed5.roa
Signing time:             Thu 10 Feb 2022 20:59:57 +0000
ROA not before:           Thu 10 Feb 2022 03:00:00 +0000
ROA not after:            Sat 10 Feb 2024 03:00:00 +0000
asID:                     270047
IP address blocks:        179.0.184.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 07:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4490 (0x118a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23c20ddda6bed03066338dfd5903e3494808052
        Validity
            Not Before: Feb 10 03:00:00 2022 GMT
            Not After : Feb 10 03:00:00 2024 GMT
        Subject: CN=8c5a123c0cb47b5e59b6534143955213f890eed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:82:c9:61:09:65:37:b9:6a:ea:95:ef:01:
                    6b:e7:a7:6b:89:ff:b9:3a:66:0a:97:7d:e6:bd:06:
                    75:06:c8:84:0b:31:8e:96:65:64:11:f0:1a:5f:ef:
                    9e:57:89:9f:c0:63:11:d9:22:72:88:48:65:68:50:
                    1a:1d:a7:df:55:c5:5b:55:96:62:d7:e5:6b:29:db:
                    9f:1f:23:38:c2:14:dd:c8:83:fd:22:29:24:a7:13:
                    8a:7b:32:e5:9e:97:64:af:59:23:0e:1a:56:77:44:
                    85:13:0e:2c:d6:aa:7a:e8:3b:53:d3:30:71:bd:8d:
                    d5:2b:0f:8b:a4:e1:cf:c1:93:79:02:fb:01:87:7f:
                    27:b3:58:e7:9c:32:88:e1:c1:eb:e0:e9:ae:50:3b:
                    5d:11:68:60:15:84:71:4e:d7:7e:18:2e:0b:d6:f1:
                    96:85:80:ac:08:94:15:6c:b7:f0:c3:9f:a7:df:17:
                    02:6c:d1:92:c3:92:07:d5:d9:1a:b5:d2:43:82:b7:
                    1b:f9:68:19:f7:ad:4e:6b:40:b8:e6:7b:d0:aa:85:
                    58:0a:9c:e7:35:3b:b3:3c:f7:5c:eb:04:32:ad:e3:
                    b8:f7:71:8f:c6:25:2e:f5:55:8c:05:49:19:f6:58:
                    b6:33:9e:a3:5a:8e:32:87:3b:55:82:14:44:ee:06:
                    4d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4C:28:A3:0C:EB:AC:62:28:74:A1:C2:FC:A0:69:A1:33:E9:C9:52
            X509v3 Authority Key Identifier:
                keyid:20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/8c5a123c0cb47b5e59b6534143955213f890eed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/e23c20ddda6bed03066338dfd5903e3494808052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:51:66:5b:95:fa:ce:53:09:f6:6e:09:39:87:73:a0:05:1d:
         c9:b7:61:9c:16:09:08:6f:0d:3b:2a:a6:e7:0b:94:76:41:0d:
         14:43:26:1a:4b:f6:f7:e3:aa:9a:78:69:c8:ae:bd:34:1d:d6:
         5a:34:e4:d2:0c:07:27:1c:14:a3:e1:9d:de:41:04:9d:9b:d0:
         78:33:62:d5:5f:c8:4b:31:bf:42:09:83:22:f4:26:0d:22:2c:
         e5:64:a3:f7:4d:f0:50:7f:7d:5a:ea:08:c7:04:32:24:0c:16:
         40:fa:5d:28:4f:b0:e6:16:a5:cb:73:64:ad:d9:d3:91:bb:b7:
         30:59:57:32:4f:e7:11:41:b3:3f:e4:db:f6:75:46:32:37:45:
         e7:7f:8f:d5:ae:0f:80:ad:2e:e7:bc:f2:90:7c:db:fe:dd:ed:
         ad:c5:a1:ae:77:7a:e3:32:2f:f4:3c:92:e9:1d:76:dd:1f:3d:
         a1:83:f6:44:51:bd:cf:c0:4f:cf:f7:37:c5:b7:8c:10:a4:dd:
         11:45:b1:a4:ac:6c:d4:16:34:c9:37:a0:d6:55:34:61:3e:59:
         28:63:74:47:05:85:89:07:6c:5b:bf:b4:a6:58:b2:02:49:04:
         f5:29:92:d9:74:c5:bb:e2:cc:68:dd:51:9b:7d:81:8e:6c:a2:
         ef:f2:86:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 12:53:13 2024 by rpki-client on console-fra.rpki-client.org