Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/23348d23ac0775241ecc7a485fa926d6c5f8ccb5.roa
File:                     23348d23ac0775241ecc7a485fa926d6c5f8ccb5.roa (raw, json)
Hash identifier:          I3r+W0Tl9hmoOVW5nON28HnhuVdD6QZmoaJy9mAHjXU=
Subject key identifier:   84:34:71:B3:96:BC:68:A0:C9:96:25:F3:64:F1:42:47:8F:AB:0D:F3
Certificate issuer:       /CN=d6c012e30dc831b6875f6cfcb5639d3f391769b7
Certificate serial:       1F2294
Authority key identifier: A2:0A:0E:B5:5E:9B:EA:B8:C3:64:EC:92:FE:56:D1:1E:5A:67:14:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6c012e30dc831b6875f6cfcb5639d3f391769b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/23348d23ac0775241ecc7a485fa926d6c5f8ccb5.roa
Signing time:             Sat 10 Jun 2023 04:13:03 +0000
ROA not before:           Fri 09 Jun 2023 04:13:03 +0000
ROA not after:            Tue 10 Jun 2025 04:13:03 +0000
asID:                     269783
IP address blocks:        45.184.108.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2040468 (0x1f2294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c012e30dc831b6875f6cfcb5639d3f391769b7
        Validity
            Not Before: Jun  9 04:13:03 2023 GMT
            Not After : Jun 10 04:13:03 2025 GMT
        Subject: CN=23348d23ac0775241ecc7a485fa926d6c5f8ccb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:60:8a:1f:f4:cd:e2:8d:4b:a2:a8:41:58:5a:
                    e1:88:19:40:75:ae:90:a2:af:26:7a:44:41:52:43:
                    2d:0d:c4:33:be:15:d6:31:d8:ef:db:3d:2e:32:c2:
                    a7:41:be:30:7f:f5:3b:70:13:b6:ab:6c:25:da:b6:
                    96:33:6d:ac:57:e5:d0:9c:46:bf:30:38:b4:ef:c0:
                    86:87:6e:0f:a9:62:f0:3b:a1:4f:fa:fd:6d:01:a8:
                    b4:00:6c:8c:be:e0:0a:83:0a:0a:9c:c0:13:27:9d:
                    9d:2a:f1:1e:6d:1e:6d:2e:2a:33:51:41:65:31:fd:
                    ce:62:cb:8f:7c:1c:75:a9:42:52:e4:83:1f:95:7d:
                    60:38:c8:99:03:d5:69:ca:52:bc:d2:4b:62:c5:f0:
                    4a:6c:56:4f:b5:8a:d0:db:e4:47:50:8f:e6:ed:bf:
                    25:39:38:fb:51:88:e1:7f:e0:e2:25:93:ec:3d:f9:
                    72:88:9b:28:19:fc:14:60:2f:fd:97:d8:40:d0:40:
                    d6:0a:01:e8:8c:5c:59:f9:c9:52:e2:28:48:d3:19:
                    51:3c:85:88:a6:10:31:81:78:43:86:ce:36:84:ef:
                    bf:1a:3e:4f:2d:90:c4:2d:d7:c5:9a:93:5b:a4:44:
                    b8:1d:2a:d9:1a:79:6e:e9:21:c6:e5:35:9f:5e:e3:
                    29:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:34:71:B3:96:BC:68:A0:C9:96:25:F3:64:F1:42:47:8F:AB:0D:F3
            X509v3 Authority Key Identifier:
                keyid:A2:0A:0E:B5:5E:9B:EA:B8:C3:64:EC:92:FE:56:D1:1E:5A:67:14:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6c012e30dc831b6875f6cfcb5639d3f391769b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/23348d23ac0775241ecc7a485fa926d6c5f8ccb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/d6c012e30dc831b6875f6cfcb5639d3f391769b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:9c:01:c3:87:d7:aa:f5:c5:7a:f5:87:1e:6f:99:90:ed:4b:
         81:da:90:91:54:1a:9e:08:dc:ce:92:61:7d:64:7a:48:95:fc:
         40:a5:94:a3:c7:38:c5:18:44:81:89:c6:70:43:7c:df:d3:66:
         c4:5a:ba:9d:46:3d:c4:3e:99:db:1e:47:fb:b6:da:74:42:bb:
         d2:36:71:bc:af:fd:c0:ad:ce:99:02:d8:29:ed:f8:b7:86:e6:
         dc:9d:1b:fd:b3:00:40:f1:65:f4:d3:31:e0:85:31:c8:fe:81:
         63:4b:78:ff:52:3e:f0:de:b9:fd:0c:e7:d5:7a:f3:fb:a0:d9:
         b0:2b:2f:9b:bc:d3:5c:16:f1:6e:4f:96:bb:fd:e2:dd:25:f9:
         a8:b6:09:08:6d:8a:02:7d:20:15:c5:b1:54:8d:f0:f6:4f:63:
         83:1b:16:f1:9b:23:84:69:22:6e:e8:a7:b0:eb:13:0b:a7:e4:
         c4:a2:3c:8f:4b:fd:10:2b:2c:4a:63:3b:84:42:ba:a5:b2:90:
         6d:7d:d5:63:77:db:85:6b:82:42:fc:41:95:1d:56:bf:84:c9:
         e6:4d:31:45:14:91:07:4b:28:f4:c0:a1:db:8c:18:53:6c:a4:
         90:53:b6:89:29:25:9f:b0:48:a8:b1:b4:1f:77:26:36:a2:b2:
         28:de:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 18:26:04 2023 by rpki-client on console-fra.rpki-client.org