Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/0dea5b89fdf33b659ad397edc18f6f4946fdc116.roa
File:                     0dea5b89fdf33b659ad397edc18f6f4946fdc116.roa (raw, json)
Hash identifier:          vWhy51Yebyodf3GPrm0khFT+VODKy+3OpG9NJbQ9ASs=
Subject key identifier:   4F:60:42:76:B1:1B:61:DD:03:C1:C1:1A:76:E7:01:B6:B4:1B:01:73
Certificate issuer:       /CN=b44cb5800e96935d03e5d14faab2003de5a3deb7
Certificate serial:       0CEF13
Authority key identifier: A2:C1:FC:16:13:33:E5:CE:7D:49:A4:36:72:11:73:EA:28:44:8D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b44cb5800e96935d03e5d14faab2003de5a3deb7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/0dea5b89fdf33b659ad397edc18f6f4946fdc116.roa
Signing time:             Thu 15 Apr 2021 17:14:44 +0000
ROA not before:           Thu 15 Apr 2021 03:00:00 +0000
ROA not after:            Sat 15 Apr 2023 03:00:00 +0000
asID:                     267766
IP address blocks:        45.170.184.0/22 maxlen: 24
                          2803:5ba0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847635 (0xcef13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b44cb5800e96935d03e5d14faab2003de5a3deb7
        Validity
            Not Before: Apr 15 03:00:00 2021 GMT
            Not After : Apr 15 03:00:00 2023 GMT
        Subject: CN=0dea5b89fdf33b659ad397edc18f6f4946fdc116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:11:d4:99:e1:65:0a:bf:57:bf:e2:31:71:07:
                    6c:44:c1:77:c3:23:85:9e:ea:59:ff:88:37:28:38:
                    60:bd:a4:6c:c2:e7:16:d1:3e:d8:a5:d8:c8:f4:4d:
                    60:55:49:22:9b:e4:48:88:24:de:ca:68:f7:69:e4:
                    64:5f:73:82:19:8f:db:4f:07:78:3c:5a:58:28:7d:
                    a4:62:34:c5:f4:12:a5:00:4a:9d:3a:29:94:cf:db:
                    dc:20:98:74:e8:75:cb:38:0a:ba:8a:c1:eb:56:20:
                    51:f1:80:a7:54:72:fe:6f:23:bd:17:40:8a:cd:d7:
                    84:08:71:3e:ff:4f:b0:c1:00:9f:a2:cc:38:44:73:
                    4a:ef:e9:37:e7:c6:f0:b6:a9:c0:c3:05:cc:02:61:
                    de:3d:59:7f:6a:ea:59:29:7c:f1:5e:4d:f0:8b:67:
                    41:6b:7c:95:6e:40:13:89:e1:a3:81:d6:97:1b:89:
                    df:48:43:b1:95:04:4d:59:4f:ed:9c:23:cc:aa:e7:
                    0a:02:ac:51:73:84:61:f9:8e:fd:8c:ee:0b:51:1a:
                    ca:3d:9b:ca:08:4a:81:45:c3:88:76:29:df:8f:29:
                    ab:8f:f4:8d:53:ee:72:f4:61:9a:48:77:60:d5:ae:
                    02:55:05:f5:d9:94:90:a5:de:cd:df:8f:09:4d:ac:
                    ee:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:60:42:76:B1:1B:61:DD:03:C1:C1:1A:76:E7:01:B6:B4:1B:01:73
            X509v3 Authority Key Identifier:
                keyid:A2:C1:FC:16:13:33:E5:CE:7D:49:A4:36:72:11:73:EA:28:44:8D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b44cb5800e96935d03e5d14faab2003de5a3deb7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/0dea5b89fdf33b659ad397edc18f6f4946fdc116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/b44cb5800e96935d03e5d14faab2003de5a3deb7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.184.0/22
                IPv6:
                  2803:5ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:7a:9e:c9:04:84:d4:fb:1e:ed:2a:49:55:30:24:6d:29:32:
         50:30:a6:72:e4:95:e4:44:ed:43:95:d4:cc:fb:ba:68:f1:56:
         48:47:ec:ea:aa:06:62:18:5e:e2:9d:74:3f:b8:f7:43:41:8b:
         c5:d2:13:5d:6a:0d:0b:6a:c7:87:18:61:6e:91:5d:65:e9:c6:
         2f:6c:81:65:be:d6:72:9f:93:a1:58:11:f2:53:10:b5:73:31:
         46:b2:92:57:3f:eb:65:3d:ca:01:61:de:30:32:9f:32:2d:a6:
         98:70:57:d4:07:26:92:ca:bd:e2:28:44:1d:62:5a:2d:fe:ce:
         56:8c:d5:38:02:f0:02:91:43:ce:5a:4b:6a:23:3e:95:3d:b1:
         69:b7:36:ee:2f:24:44:54:80:48:5d:1e:b0:84:74:c6:1a:68:
         4a:1c:78:a1:f9:04:81:d4:0d:fd:a6:0e:4d:7d:7e:d6:5b:dc:
         00:c7:59:bf:10:89:2c:a5:bc:de:fc:82:3c:5d:3c:f5:98:d1:
         f8:d8:07:46:c0:9d:c9:d3:88:3f:21:2e:1f:29:84:0f:11:32:
         ac:1c:22:bf:54:af:2b:5f:7d:bf:a8:a4:3b:46:f8:33:97:6f:
         47:92:48:a8:20:62:ab:1d:a7:38:62:f6:9e:2c:1b:75:1d:2e:
         4e:54:0a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----