Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/de577c0880db03257c47a2ba37169b0353cf92d3.roa
File:                     de577c0880db03257c47a2ba37169b0353cf92d3.roa (raw, json)
Hash identifier:          k+EDT8iJ9RRb2eBbXpZ9hSsL9QwfHIY8BhIKdkiEr90=
Subject key identifier:   E2:AF:05:B7:54:D7:F9:08:82:4C:B4:5E:E9:07:A8:73:0A:A3:BB:C8
Certificate issuer:       /CN=b0aa757766600ae92f780498bacfcff9762981a2
Certificate serial:       0D86E1
Authority key identifier: 11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0aa757766600ae92f780498bacfcff9762981a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/de577c0880db03257c47a2ba37169b0353cf92d3.roa
Signing time:             Wed 24 Mar 2021 14:33:05 +0000
ROA not before:           Wed 24 Mar 2021 14:33:05 +0000
ROA not after:            Tue 24 Mar 2026 14:33:05 +0000
asID:                     262239
IP address blocks:        190.211.145.0/24 maxlen: 24
                          190.211.146.0/23 maxlen: 23
                          190.211.148.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 16:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886497 (0xd86e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0aa757766600ae92f780498bacfcff9762981a2
        Validity
            Not Before: Mar 24 14:33:05 2021 GMT
            Not After : Mar 24 14:33:05 2026 GMT
        Subject: CN=de577c0880db03257c47a2ba37169b0353cf92d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f9:ca:b7:f4:8a:47:57:71:27:4e:53:40:e6:
                    a6:58:04:ec:83:65:f3:8f:43:91:7a:a2:c7:a3:2a:
                    24:9d:ef:af:bb:cd:7b:89:f4:62:21:b7:76:cd:74:
                    41:f6:46:eb:2d:d3:fe:87:a6:06:19:8d:12:7b:20:
                    2c:c7:19:66:29:53:85:7c:35:d0:8d:d3:03:e6:75:
                    68:7b:39:b4:bd:0e:ba:89:cf:80:7e:ed:ca:e5:b4:
                    21:28:e8:08:34:f0:96:d4:3f:ec:a8:80:f9:e8:15:
                    cc:9c:2c:38:eb:f7:75:4a:bb:96:f2:aa:f4:31:1f:
                    1b:6e:20:72:33:87:84:ad:3c:51:ae:ab:ab:6d:ed:
                    88:07:d0:89:25:aa:3f:2a:f0:62:fd:30:be:33:a3:
                    76:b2:31:23:85:71:15:43:f8:27:30:86:6b:45:25:
                    56:90:6a:a1:16:b9:8a:f7:44:4c:bb:6b:36:e5:1a:
                    0e:20:db:3c:7c:70:20:dc:98:88:e2:28:de:ab:9a:
                    2e:e1:8a:b4:76:e9:f2:1a:71:60:0c:b9:a5:ab:67:
                    63:07:64:4c:77:e6:39:fc:cc:d0:82:30:1d:d9:42:
                    63:9e:b9:93:c7:e6:26:af:ba:68:6e:80:91:a6:6b:
                    28:af:cf:1e:b7:8f:21:8e:16:e3:8b:ca:64:02:a3:
                    72:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AF:05:B7:54:D7:F9:08:82:4C:B4:5E:E9:07:A8:73:0A:A3:BB:C8
            X509v3 Authority Key Identifier:
                keyid:11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0aa757766600ae92f780498bacfcff9762981a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/de577c0880db03257c47a2ba37169b0353cf92d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/b0aa757766600ae92f780498bacfcff9762981a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.145.0-190.211.148.255

    Signature Algorithm: sha256WithRSAEncryption
         1f:c7:af:7c:62:c7:c5:eb:74:6d:40:ec:a5:09:ba:f6:5c:03:
         39:3d:e5:bd:2d:0c:11:a9:85:3d:1f:8b:cd:d1:cf:e8:3c:ad:
         97:98:6f:2a:a2:8e:50:92:82:35:53:ce:8b:b3:3e:f8:fa:25:
         13:66:76:d4:5b:38:c8:5e:df:0a:42:f8:7b:93:51:a9:71:3e:
         a5:82:94:62:f4:b5:f0:f3:6a:18:fb:3f:f7:4b:2d:44:c9:33:
         f4:57:b0:3d:9c:12:83:82:9f:b8:9d:ef:d8:19:a2:8d:dd:2b:
         a4:4c:ee:da:6a:3f:1b:da:0a:dc:f6:0b:28:14:03:81:71:0e:
         a8:22:b1:96:53:f9:cd:67:e9:08:3a:15:40:e9:a8:a8:67:2c:
         89:e2:7b:07:a2:47:fd:ab:a8:a4:14:d7:2a:79:18:eb:c5:26:
         da:22:7b:7e:e7:bc:1c:7a:33:78:51:48:86:bc:3e:5e:19:e6:
         15:e7:56:bc:6d:c8:5c:4a:5e:b5:c1:9d:cf:af:a9:bd:9e:42:
         cb:50:bc:43:d3:07:91:7c:89:12:51:b8:6b:56:e9:9c:9a:9d:
         46:23:65:e5:05:40:9f:31:d2:02:a7:95:51:34:8d:23:b6:08:
         5e:c7:2a:99:db:07:dc:5b:68:5b:d6:3a:02:83:be:e6:52:38:
         64:f0:3a:f7
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDDYbhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
YWE3NTc3NjY2MDBhZTkyZjc4MDQ5OGJhY2ZjZmY5NzYyOTgxYTIwHhcNMjEwMzI0
MTQzMzA1WhcNMjYwMzI0MTQzMzA1WjAzMTEwLwYDVQQDEyhkZTU3N2MwODgwZGIw
MzI1N2M0N2EyYmEzNzE2OWIwMzUzY2Y5MmQzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjPnKt/SKR1dxJ05TQOamWATsg2Xzj0OReqLHoyokne+vu817
ifRiIbd2zXRB9kbrLdP+h6YGGY0SeyAsxxlmKVOFfDXQjdMD5nVoezm0vQ66ic+A
fu3K5bQhKOgINPCW1D/sqID56BXMnCw46/d1SruW8qr0MR8bbiByM4eErTxRrqur
be2IB9CJJao/KvBi/TC+M6N2sjEjhXEVQ/gnMIZrRSVWkGqhFrmK90RMu2s25RoO
INs8fHAg3JiI4ijeq5ou4Yq0dunyGnFgDLmlq2djB2RMd+Y5/MzQgjAd2UJjnrmT
x+Ymr7poboCRpmsor88et48hjhbji8pkAqNyZwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFOKvBbdU1/kIgky0XukHqHMKo7vIMB8GA1UdIwQYMBaAFBGyxuyxwuDK7vIn
BaE1O4X/sOkjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjBhYTc1
Nzc2NjYwMGFlOTJmNzgwNDk4YmFjZmNmZjk3NjI5ODFhMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTY3ZGY4YzItZmNkNi00MTU4LWEwNmMtYWQyMDk2
MGVhMjA3L2RlNTc3YzA4ODBkYjAzMjU3YzQ3YTJiYTM3MTY5YjAzNTNjZjkyZDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NjdkZjhjMi1mY2Q2LTQxNTgtYTA2Yy1hZDIw
OTYwZWEyMDcvYjBhYTc1Nzc2NjYwMGFlOTJmNzgwNDk4YmFjZmNmZjk3NjI5ODFh
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAvtORAwQAvtOUMA0GCSqGSIb3DQEBCwUAA4IBAQAfx698
YsfF63RtQOylCbr2XAM5PeW9LQwRqYU9H4vN0c/oPK2XmG8qoo5QkoI1U86Lsz74
+iUTZnbUWzjIXt8KQvh7k1GpcT6lgpRi9LXw82oY+z/3Sy1EyTP0V7A9nBKDgp+4
ne/YGaKN3SukTO7aaj8b2grc9gsoFAOBcQ6oIrGWU/nNZ+kIOhVA6aioZyyJ4nsH
okf9q6ikFNcqeRjrxSbaInt+57wcejN4UUiGvD5eGeYV51a8bchcSl61wZ3Pr6m9
nkLLULxD0weRfIkSUbhrVumcmp1GI2XlBUCfMdICp5VRNI0jtghexyqZ2wfcW2hb
1joCg77mUjhk8Dr3
-----END CERTIFICATE-----
Generated at Wed Jan 31 20:20:24 2024 by rpki-client on console-fra.rpki-client.org