Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/08294cf15c2969c724beb80ba05f7d76db7abf99.roa
File:                     08294cf15c2969c724beb80ba05f7d76db7abf99.roa (raw, json)
Hash identifier:          33+D6wQ7aJWfYyTUYpO9NWt8ut8zXJwOKQVjQpfs10o=
Subject key identifier:   8E:5D:0E:D8:88:4D:65:49:21:56:1A:D4:C9:54:4F:42:97:96:BB:E8
Certificate issuer:       /CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Certificate serial:       11D971
Authority key identifier: FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/08294cf15c2969c724beb80ba05f7d76db7abf99.roa
Signing time:             Fri 10 Nov 2023 07:30:06 +0000
ROA not before:           Fri 10 Nov 2023 07:30:06 +0000
ROA not after:            Sun 09 Nov 2025 07:30:06 +0000
asID:                     27651
IP address blocks:        164.77.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Mar 2024 16:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169777 (0x11d971)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
        Validity
            Not Before: Nov 10 07:30:06 2023 GMT
            Not After : Nov  9 07:30:06 2025 GMT
        Subject: CN=08294cf15c2969c724beb80ba05f7d76db7abf99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0c:fa:9e:eb:fd:df:d9:38:54:b8:d1:a7:ad:
                    e2:94:1a:2d:01:a2:9c:f8:25:5a:b4:7b:57:2b:77:
                    bb:fa:5b:55:43:4e:c5:9e:db:9b:4b:68:c7:80:a4:
                    3e:b5:a7:82:9e:a3:9f:7d:85:01:f1:05:37:6c:4a:
                    d9:2d:a5:e3:5a:b7:fc:b3:e1:e9:7d:76:3b:f0:19:
                    9e:c4:7f:b4:d5:73:bb:d9:00:b4:4e:f8:97:c4:3f:
                    95:07:c5:86:e5:9a:8d:db:e5:bc:7d:a8:03:53:94:
                    8f:54:1a:bd:d9:1c:ca:1e:a9:d1:1a:2d:f7:b0:7d:
                    86:c2:3c:ca:16:7b:bd:06:4c:be:13:ad:56:3c:b2:
                    54:19:35:4e:c4:5f:48:52:60:fa:50:95:ec:41:94:
                    ab:41:9e:58:36:c0:9c:35:8c:68:f6:a4:a7:37:ed:
                    f6:7a:5d:28:ed:37:46:20:47:62:d0:32:21:ad:8a:
                    93:df:19:69:bb:f5:21:06:48:ef:3d:4c:c2:a1:d2:
                    71:72:de:79:4a:27:48:c3:2e:00:f4:ff:fc:6c:f5:
                    83:e6:a7:43:a1:df:54:0e:94:56:9e:f0:53:48:0c:
                    ef:ea:02:2f:ce:d2:d5:17:2a:88:a2:6c:24:42:01:
                    52:12:bb:66:b2:31:2c:19:e3:25:f7:be:7c:1c:25:
                    3a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5D:0E:D8:88:4D:65:49:21:56:1A:D4:C9:54:4F:42:97:96:BB:E8
            X509v3 Authority Key Identifier:
                keyid:FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/08294cf15c2969c724beb80ba05f7d76db7abf99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/acba41ca66eb0e77192d2d22221e4fb662988a5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.77.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:bc:60:20:d9:86:74:73:fa:4d:63:24:74:d7:23:70:27:6a:
         83:51:c7:5f:d6:f8:d9:6c:27:68:69:fb:e1:cc:1f:e9:6d:8b:
         52:f1:d7:2d:da:e5:84:90:c0:e2:b7:76:92:35:4d:1a:c6:61:
         9d:25:50:88:8b:d1:5e:7b:79:2b:ce:69:9a:db:b3:97:7f:e5:
         cd:5f:7d:dd:2d:42:5b:36:af:2e:fb:24:77:b3:fb:5d:96:fd:
         49:fb:b6:9b:6c:65:bd:44:33:bc:2f:3e:3b:4e:1c:d5:f3:49:
         f5:99:fb:6e:10:24:5d:b5:4a:d0:b2:43:3f:39:ee:48:4d:f7:
         69:5d:dc:d7:d6:41:60:54:5f:44:87:2f:e4:53:38:44:52:ff:
         8f:f3:b2:71:8e:ca:79:0e:38:75:70:d8:71:77:11:47:07:3b:
         39:53:fa:01:2b:a7:27:c3:7f:05:39:44:82:e6:26:fd:06:28:
         8b:fe:3d:56:da:fd:a0:18:00:18:97:3e:4f:15:2e:ac:67:11:
         54:20:19:3a:43:bd:7b:6e:67:76:51:d5:5b:38:06:f3:56:84:
         2b:b7:5e:0f:33:6f:c3:b1:82:14:5c:96:c4:fa:5a:c8:ac:32:
         92:2d:d6:50:56:03:38:d0:b1:89:d9:6b:7d:e1:5f:dd:b3:a5:
         f3:71:7d:78
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDEdlxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFj
YmE0MWNhNjZlYjBlNzcxOTJkMmQyMjIyMWU0ZmI2NjI5ODhhNWQwHhcNMjMxMTEw
MDczMDA2WhcNMjUxMTA5MDczMDA2WjAzMTEwLwYDVQQDEygwODI5NGNmMTVjMjk2
OWM3MjRiZWI4MGJhMDVmN2Q3NmRiN2FiZjk5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgAz6nuv939k4VLjRp63ilBotAaKc+CVatHtXK3e7+ltVQ07F
ntubS2jHgKQ+taeCnqOffYUB8QU3bErZLaXjWrf8s+HpfXY78BmexH+01XO72QC0
TviXxD+VB8WG5ZqN2+W8fagDU5SPVBq92RzKHqnRGi33sH2GwjzKFnu9Bky+E61W
PLJUGTVOxF9IUmD6UJXsQZSrQZ5YNsCcNYxo9qSnN+32el0o7TdGIEdi0DIhrYqT
3xlpu/UhBkjvPUzCodJxct55SidIwy4A9P/8bPWD5qdDod9UDpRWnvBTSAzv6gIv
ztLVFyqIomwkQgFSErtmsjEsGeMl9758HCU6zwIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFI5dDtiITWVJIVYa1MlUT0KXlrvoMB8GA1UdIwQYMBaAFPuOYs7eNW3I9NZd
V2Uaovd80TFgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWNiYTQx
Y2E2NmViMGU3NzE5MmQyZDIyMjIxZTRmYjY2Mjk4OGE1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDg1NzYyMzEtNDdjYS00YjVlLTg3MDctZjkzYTYy
MjZiMzJmLzA4Mjk0Y2YxNWMyOTY5YzcyNGJlYjgwYmEwNWY3ZDc2ZGI3YWJmOTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ODU3NjIzMS00N2NhLTRiNWUtODcwNy1mOTNh
NjIyNmIzMmYvYWNiYTQxY2E2NmViMGU3NzE5MmQyZDIyMjIxZTRmYjY2Mjk4OGE1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAKRNMA0GCSqGSIb3DQEBCwUAA4IBAQAXvGAg2YZ0c/pNYyR0
1yNwJ2qDUcdf1vjZbCdoafvhzB/pbYtS8dct2uWEkMDit3aSNU0axmGdJVCIi9Fe
e3krzmma27OXf+XNX33dLUJbNq8u+yR3s/tdlv1J+7abbGW9RDO8Lz47ThzV80n1
mftuECRdtUrQskM/Oe5ITfdpXdzX1kFgVF9Ehy/kUzhEUv+P87Jxjsp5Djh1cNhx
dxFHBzs5U/oBK6cnw38FOUSC5ib9BiiL/j1W2v2gGAAYlz5PFS6sZxFUIBk6Q717
bmd2UdVbOAbzVoQrt14PM2/DsYIUXJbE+lrIrDKSLdZQVgM40LGJ2Wt94V/ds6Xz
cX14
-----END CERTIFICATE-----
Generated at Fri Mar 8 19:35:27 2024 by rpki-client on console-fra.rpki-client.org