Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/63feb477bdcc88a9837c00dbcbd7143953e646fc.roa
File:                     63feb477bdcc88a9837c00dbcbd7143953e646fc.roa (raw, json)
Hash identifier:          bCEZmFcPMGYKn1uL6rissV5ssLZCSRnUFPCKU5lbXeg=
Subject key identifier:   46:A4:9C:B4:07:2E:B9:FD:FC:3A:EF:85:A9:C4:D3:B1:64:F6:67:01
Certificate issuer:       /CN=3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d
Certificate serial:       08BBC9
Authority key identifier: F2:F1:2A:57:7E:1C:1E:E1:95:2E:70:F8:99:6B:B7:EB:89:C7:BD:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/63feb477bdcc88a9837c00dbcbd7143953e646fc.roa
Signing time:             Tue 20 Feb 2024 05:57:51 +0000
ROA not before:           Tue 20 Feb 2024 05:57:51 +0000
ROA not after:            Fri 20 Feb 2026 05:57:51 +0000
asID:                     264646
IP address blocks:        45.181.205.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 14:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572361 (0x8bbc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d
        Validity
            Not Before: Feb 20 05:57:51 2024 GMT
            Not After : Feb 20 05:57:51 2026 GMT
        Subject: CN=63feb477bdcc88a9837c00dbcbd7143953e646fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:e6:db:ce:3b:5a:16:ce:6f:8e:8e:2c:9c:
                    a5:39:27:a4:7e:88:81:0a:79:e0:4f:a6:21:b3:b5:
                    64:2c:16:5d:60:7f:d8:6b:7b:fb:09:3a:ac:87:74:
                    0f:85:fd:e1:46:92:5d:15:1c:de:94:66:8c:fb:9c:
                    2b:94:0c:3f:99:bf:3e:c7:32:5b:27:ec:90:0b:e4:
                    d7:c5:39:5e:9b:05:0a:07:4d:19:d8:c7:44:ae:ae:
                    77:6a:cd:2d:b2:0f:23:e2:44:b4:2d:56:ef:0c:ee:
                    cf:78:4b:2b:86:a3:cf:4f:c8:f6:58:78:38:d5:7b:
                    29:ea:b7:0b:00:a3:5e:96:c9:d6:a9:cd:f6:e4:f1:
                    0a:9b:b3:5d:83:35:ff:a1:d3:53:b8:46:4c:8e:45:
                    86:f0:1f:3a:5b:2e:03:4a:c8:a0:31:52:4c:ec:ba:
                    0c:06:cd:b8:03:a5:b7:52:47:b2:46:c4:4b:4e:8f:
                    0e:9d:cf:1c:d8:01:5c:e5:45:81:15:34:32:86:b7:
                    fd:66:03:ff:6f:15:28:6a:cc:a4:3e:a6:38:3f:eb:
                    4e:84:97:0a:f4:30:5b:7f:c9:7d:5a:9a:33:05:d8:
                    36:30:25:56:af:b0:d9:72:9a:07:a6:9d:b5:c1:5d:
                    43:47:57:d9:51:aa:7e:17:b6:6b:ef:c5:35:ec:13:
                    3c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A4:9C:B4:07:2E:B9:FD:FC:3A:EF:85:A9:C4:D3:B1:64:F6:67:01
            X509v3 Authority Key Identifier:
                keyid:F2:F1:2A:57:7E:1C:1E:E1:95:2E:70:F8:99:6B:B7:EB:89:C7:BD:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/63feb477bdcc88a9837c00dbcbd7143953e646fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:20:81:72:bf:5c:a6:8f:a9:3f:22:b7:ae:11:df:27:f6:e0:
         bd:99:6f:a5:68:46:50:fd:19:ff:3b:5c:96:d0:c1:e7:a5:f3:
         dc:02:6d:98:f6:c4:6d:0b:59:0d:e2:a2:68:a1:05:cf:8e:8d:
         b5:61:5c:ce:ac:6f:c7:4e:f4:c5:20:f1:4f:62:3d:df:e7:a1:
         bd:d0:ad:61:e1:5c:46:77:61:5a:a9:02:12:bf:cb:79:3a:05:
         dc:05:5f:6c:b0:d4:fc:02:71:5a:4f:59:c4:a6:60:bd:c1:44:
         76:0c:b8:73:67:9a:d7:e1:5f:a4:48:30:9f:73:3e:fb:65:d4:
         e8:a7:8a:fe:f1:73:c5:6b:0a:e5:fa:0f:31:a5:03:3b:4d:53:
         8c:4d:0c:f9:b5:33:9e:f2:d0:91:b4:87:9f:7d:66:34:bc:bd:
         55:57:00:4e:12:8b:cc:c4:45:b2:2d:2b:2d:6b:12:f2:e7:e2:
         f6:45:e5:de:e1:fb:20:73:a2:3b:00:d7:da:a7:83:41:20:ec:
         7c:2b:0d:df:ed:7b:65:3d:6a:b9:75:4d:08:e0:da:6b:89:07:
         42:59:2f:91:bb:95:5b:a4:d1:f2:1b:5e:98:cf:34:3e:ca:b4:
         3b:e8:03:8e:54:c0:c0:0c:c3:26:b7:ac:13:8d:f4:81:aa:13:
         d2:51:78:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 18:05:45 2024 by rpki-client on console-fra.rpki-client.org