Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/e98448eab25c9551edbfd28be4c9e3b745a403a2.roa
File:                     e98448eab25c9551edbfd28be4c9e3b745a403a2.roa (raw, json)
Hash identifier:          G3cH02XUdi53fFEBc1jGWF/IVYPoW5San6d6pvZJGME=
Subject key identifier:   14:E7:7E:E2:54:27:C8:8E:4A:96:C8:50:FA:06:85:5C:4C:DC:63:5F
Certificate issuer:       /CN=145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8
Certificate serial:       12D720
Authority key identifier: AB:5B:47:C3:F1:02:51:0A:B1:09:C5:03:CA:A3:E9:AD:7D:61:47:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/e98448eab25c9551edbfd28be4c9e3b745a403a2.roa
Signing time:             Mon 08 Nov 2021 16:17:31 +0000
ROA not before:           Mon 08 Nov 2021 03:00:00 +0000
ROA not after:            Sat 08 Nov 2025 03:00:00 +0000
asID:                     52345
IP address blocks:        200.115.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 16:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1234720 (0x12d720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8
        Validity
            Not Before: Nov  8 03:00:00 2021 GMT
            Not After : Nov  8 03:00:00 2025 GMT
        Subject: CN=e98448eab25c9551edbfd28be4c9e3b745a403a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4b:19:d8:37:cf:ec:05:af:29:5a:a6:5d:7e:
                    04:cb:47:80:f0:a0:3d:0e:08:80:5b:e5:c2:a0:0c:
                    d9:ed:74:30:97:9f:b3:55:13:42:0f:3f:af:2a:56:
                    c4:fa:f6:2a:6f:65:74:ba:e4:32:2d:eb:6c:8f:2f:
                    b1:8f:cd:39:51:ef:5e:f8:ff:31:fc:90:b9:2a:ff:
                    d3:24:1d:22:58:92:54:1b:e6:9a:ed:3a:a7:ad:26:
                    96:0d:72:6f:04:22:38:33:50:78:a5:90:31:e3:a9:
                    fc:4c:3a:59:fd:c9:dc:e4:d6:51:27:ba:19:e1:85:
                    3a:f2:f0:0f:6a:32:1f:4f:94:87:8f:c4:fd:ea:e7:
                    54:44:12:d1:2a:cc:c6:a4:44:d5:08:03:ad:21:be:
                    e2:4b:1c:d8:d7:be:05:17:09:c4:55:f6:49:16:2c:
                    03:22:c0:88:ff:ea:ac:3a:72:cc:44:6c:3a:d4:37:
                    3c:2e:73:d3:27:b1:a4:11:89:96:de:c0:0e:0c:61:
                    6b:83:2a:6b:69:8c:d7:3d:16:0f:af:13:9f:4e:c7:
                    04:f6:1d:0c:f8:29:44:04:9e:bb:c6:c8:44:a5:61:
                    45:ad:62:9d:d8:3f:8c:55:6b:4b:ae:3a:20:28:af:
                    bd:49:7d:48:35:6d:94:67:8e:fc:20:b7:70:bc:ee:
                    51:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E7:7E:E2:54:27:C8:8E:4A:96:C8:50:FA:06:85:5C:4C:DC:63:5F
            X509v3 Authority Key Identifier:
                keyid:AB:5B:47:C3:F1:02:51:0A:B1:09:C5:03:CA:A3:E9:AD:7D:61:47:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/e98448eab25c9551edbfd28be4c9e3b745a403a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:b3:3e:be:df:38:f7:4a:92:65:5a:d1:22:e5:f0:16:60:
         0a:e0:fc:c3:7b:0e:d1:c1:75:55:04:8a:95:c7:49:5c:27:77:
         db:2b:f8:50:47:1a:d3:0c:2d:bb:d6:6e:de:1e:35:a9:06:4f:
         2e:59:d9:95:a1:a6:f3:d0:dd:33:cc:4d:83:1c:36:fe:f2:d2:
         5a:c9:56:0b:25:3b:22:36:be:8b:ef:88:85:6f:eb:aa:f0:95:
         6c:d9:08:1b:30:ad:f2:b8:48:99:0c:7c:9a:fc:3f:fd:b2:ff:
         16:e0:a6:ec:0a:c6:11:6d:27:d0:7b:b9:57:b9:10:aa:3b:48:
         0e:40:18:12:3e:74:70:b3:ff:0b:9a:ae:a1:29:f4:45:eb:13:
         7d:ea:eb:a9:8f:63:c8:73:2b:a8:8b:78:38:9a:27:81:3a:03:
         29:88:c9:ee:c1:d1:07:88:4a:05:12:13:30:54:00:00:61:52:
         c4:d9:c9:8d:b7:71:d1:e3:16:33:37:36:62:e0:fb:fd:a1:b1:
         9b:04:57:6b:82:08:2b:a0:d0:e2:fe:87:6e:8f:b7:19:4a:f1:
         f6:6c:58:8b:a1:55:9e:f6:2e:d0:6c:13:82:9e:9d:8e:0c:5c:
         22:d9:fc:7f:3c:8d:cf:a7:54:e7:d6:4e:d1:18:ca:08:74:56:
         a5:b1:a5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 20:53:05 2024 by rpki-client on console-ams.rpki-client.org