Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/1151a7bbe4d5ece5c341715bd2bf93a185f06c64.roa
File:                     1151a7bbe4d5ece5c341715bd2bf93a185f06c64.roa (raw, json)
Hash identifier:          rY7Lhqx4ysc4RCzcfldltEo0aISBEMnLxbTqPzDL0CQ=
Subject key identifier:   13:FB:81:B6:C2:C1:DC:B1:B1:1B:60:E8:36:97:37:D1:82:EF:96:00
Certificate issuer:       /CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Certificate serial:       024E7A
Authority key identifier: FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/1151a7bbe4d5ece5c341715bd2bf93a185f06c64.roa
Signing time:             Wed 09 Feb 2022 20:47:45 +0000
ROA not before:           Wed 09 Feb 2022 03:00:00 +0000
ROA not after:            Fri 09 Feb 2024 03:00:00 +0000
asID:                     28047
IP address blocks:        164.77.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Feb 2024 07:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151162 (0x24e7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
        Validity
            Not Before: Feb  9 03:00:00 2022 GMT
            Not After : Feb  9 03:00:00 2024 GMT
        Subject: CN=1151a7bbe4d5ece5c341715bd2bf93a185f06c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:75:8b:15:3a:49:39:fe:25:4f:3f:15:56:df:
                    d8:28:4c:31:04:74:7f:35:fd:9d:d2:8b:e2:7e:43:
                    bb:b9:58:f8:e9:cd:07:bc:0b:cb:64:5d:fa:d3:04:
                    06:fa:a1:ca:cc:de:c3:8a:b2:22:ec:0a:88:dc:e1:
                    f2:dd:9f:39:3f:74:9a:44:5c:fc:af:91:92:f6:6a:
                    d6:99:45:07:e4:71:2f:1a:7a:95:ee:1f:be:55:75:
                    1f:5d:1d:96:85:e1:92:7e:28:a3:5a:bd:ae:6c:26:
                    1e:d1:90:81:e6:65:88:b4:20:f1:8b:82:5c:5a:19:
                    89:93:a7:4b:28:02:83:06:dd:17:3e:f7:e6:cd:f1:
                    81:d1:bc:b8:45:b0:22:f0:73:39:f0:8d:55:f5:7b:
                    eb:48:1b:97:e4:e8:70:4e:d9:4e:c2:38:c4:e3:42:
                    40:87:44:31:98:9e:ee:cf:70:a9:54:3a:c3:cf:80:
                    88:02:94:aa:d2:54:3b:bd:df:1c:60:f3:f3:b6:d3:
                    68:98:a9:12:2c:d3:76:c5:43:da:82:34:67:11:4d:
                    d2:fc:e9:85:d6:f7:45:c5:de:3c:e7:05:e7:78:f2:
                    24:57:c1:b7:da:b8:21:45:1b:68:15:59:b1:3e:01:
                    de:a5:06:9f:d8:86:83:64:d3:c5:43:b1:e9:66:20:
                    e3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FB:81:B6:C2:C1:DC:B1:B1:1B:60:E8:36:97:37:D1:82:EF:96:00
            X509v3 Authority Key Identifier:
                keyid:FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/1151a7bbe4d5ece5c341715bd2bf93a185f06c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/acba41ca66eb0e77192d2d22221e4fb662988a5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.77.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:1b:ef:69:4a:46:e5:f4:80:58:dc:9c:3d:37:87:82:4d:cf:
         13:6a:66:68:25:0e:5d:0a:03:1a:22:e8:ce:1d:04:f5:07:bf:
         ed:96:5f:e1:3c:0d:17:d7:94:39:91:be:16:ab:35:7b:9d:b7:
         f1:44:1b:e7:e9:f6:5b:ac:f4:6f:5f:37:b2:40:10:87:a3:60:
         35:65:00:92:2f:fd:53:97:5a:20:08:f8:00:c4:0b:c9:7b:08:
         81:e5:40:92:de:dd:6c:3e:04:d8:a8:fb:66:bf:0c:5c:ae:02:
         5f:2f:c2:93:20:8e:b4:05:85:d2:32:f4:82:fc:33:14:6f:2f:
         02:50:9b:c0:74:6b:c2:a0:ae:42:c4:f7:c5:3d:43:f6:9e:90:
         df:32:57:2c:10:e8:97:d7:33:63:d5:21:a2:9d:b4:c2:08:fc:
         47:46:b1:ff:83:17:bf:0f:38:5e:81:4a:fb:2b:f2:6b:1d:23:
         f8:09:ed:25:62:5e:e8:e5:1d:bf:27:f4:32:fe:71:4c:b0:a0:
         a0:8c:78:67:bd:c3:bd:5f:fe:a8:f6:1d:23:1f:87:33:66:3c:
         94:c6:6f:aa:a3:66:6b:c1:4f:a9:dc:3e:3f:09:ab:b8:45:59:
         e3:b9:5d:23:7a:0f:77:f3:72:d8:d8:4d:c0:98:86:8e:e3:a6:
         8f:ce:a8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 08:18:36 2024 by rpki-client on console-fra.rpki-client.org