Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/574294b9-9293-45a1-b4f9-a05ddc931a4d/a521666dbec523b34d54acdd06764b3de6729612.roa
File:                     a521666dbec523b34d54acdd06764b3de6729612.roa (raw, json)
Hash identifier:          RjUP5crM3/WNEXHiOhQscmk9kPg0bmOcQ0h/OPoVPag=
Subject key identifier:   AF:E2:2F:C2:B0:8B:75:2A:38:B5:77:21:1A:8F:72:2D:EE:04:13:7F
Certificate issuer:       /CN=5daba39e93cb3e66a73d2628b56c529b8a5851a2
Certificate serial:       0642AE
Authority key identifier: 10:1D:C1:45:E6:45:C0:FA:68:CC:EC:CE:54:2A:1F:08:D2:30:C3:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5daba39e93cb3e66a73d2628b56c529b8a5851a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/574294b9-9293-45a1-b4f9-a05ddc931a4d/a521666dbec523b34d54acdd06764b3de6729612.roa
Signing time:             Wed 20 Sep 2023 21:04:52 +0000
ROA not before:           Tue 19 Sep 2023 21:04:52 +0000
ROA not after:            Sat 20 Sep 2025 21:04:52 +0000
asID:                     264773
IP address blocks:        177.10.184.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 20:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410286 (0x642ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5daba39e93cb3e66a73d2628b56c529b8a5851a2
        Validity
            Not Before: Sep 19 21:04:52 2023 GMT
            Not After : Sep 20 21:04:52 2025 GMT
        Subject: CN=a521666dbec523b34d54acdd06764b3de6729612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:02:b5:81:23:eb:50:d2:da:35:b1:83:71:
                    46:88:99:ed:9d:a0:c5:a3:74:bb:75:50:7b:9a:b1:
                    85:9d:04:1c:b4:d8:3f:b8:d2:7e:6d:67:85:92:93:
                    26:40:07:0c:d9:55:90:c0:81:ea:20:8e:5a:4c:54:
                    45:24:93:48:62:8d:6e:26:2f:b5:9d:7c:37:e2:c3:
                    9e:7f:a6:39:1c:c1:7b:83:b5:54:1e:e9:b3:44:8b:
                    bc:a8:08:b4:ad:97:03:b7:e9:4c:e1:e3:e4:b6:41:
                    4f:73:18:5e:e9:78:3a:dc:c0:04:da:ed:44:f7:33:
                    06:80:b5:91:67:76:1c:27:25:62:60:ab:91:54:0c:
                    9b:a9:1b:58:57:0f:ba:ce:09:1f:2f:10:88:09:77:
                    1d:0b:cc:6f:e8:8d:39:af:42:e8:18:c6:df:97:04:
                    d9:07:f6:af:96:ff:90:5b:e5:0e:02:22:52:30:98:
                    4e:04:0b:6f:45:b4:be:c6:df:ac:55:7c:f8:cc:87:
                    1c:57:b6:b2:22:b7:1d:11:ea:c7:86:0c:d9:43:f7:
                    3e:81:7f:a8:43:85:63:f6:57:6a:34:3c:ab:80:fa:
                    1a:2c:a9:64:fd:82:2f:f9:0a:9c:32:8e:c2:55:eb:
                    33:03:4a:90:d9:ff:69:be:05:4e:57:60:d6:30:a7:
                    6c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E2:2F:C2:B0:8B:75:2A:38:B5:77:21:1A:8F:72:2D:EE:04:13:7F
            X509v3 Authority Key Identifier:
                keyid:10:1D:C1:45:E6:45:C0:FA:68:CC:EC:CE:54:2A:1F:08:D2:30:C3:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5daba39e93cb3e66a73d2628b56c529b8a5851a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/574294b9-9293-45a1-b4f9-a05ddc931a4d/a521666dbec523b34d54acdd06764b3de6729612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/574294b9-9293-45a1-b4f9-a05ddc931a4d/5daba39e93cb3e66a73d2628b56c529b8a5851a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:bf:db:f7:f5:24:fb:64:be:21:03:51:6f:d7:b9:6c:9f:4e:
         14:45:36:af:f4:4e:df:dd:b7:ab:8d:57:e9:9b:00:1d:8c:b9:
         9b:b8:11:79:43:4a:52:49:d1:b8:74:dc:5f:9c:b9:b8:de:58:
         1a:b1:46:d1:58:9e:1c:2b:50:04:e3:08:e6:bf:3d:d8:86:01:
         c9:bd:7b:22:62:13:05:d9:31:ec:c1:a3:72:d0:e5:2d:cd:b6:
         f2:bb:9a:5d:2a:12:b3:1c:7b:87:5d:54:c9:45:09:5a:2e:66:
         6a:9c:a5:b7:e1:9f:9f:e3:2b:ff:75:71:37:b6:4e:80:13:78:
         7f:fd:89:4a:97:1c:0a:9c:8f:8d:ce:3b:76:67:69:b3:85:fb:
         b3:e4:d8:68:09:4c:b9:c0:89:6a:32:84:d9:11:46:49:26:d4:
         39:41:a9:6e:42:24:e5:3a:bd:40:ac:04:f9:b4:85:1a:16:99:
         f7:68:34:99:51:d7:5f:0e:61:dc:22:a8:81:63:53:cd:e1:7d:
         da:5c:d2:bf:c5:87:67:13:43:ef:38:94:9f:13:eb:5f:d5:4a:
         cd:4b:4f:a8:17:41:d9:70:0e:fb:da:a2:7b:c9:c8:d9:71:9b:
         d2:4d:bd:87:c6:23:32:42:41:ed:26:01:0c:d5:6a:d1:b9:10:
         6a:80:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 23:25:37 2024 by rpki-client on console-ams.rpki-client.org