Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/479814c973b269729f5991f2eeff75bcf9b78a31.roa
File:                     479814c973b269729f5991f2eeff75bcf9b78a31.roa (raw, json)
Hash identifier:          oi47Feq+X6ESe+bR/i7Wi1VuSBwu63lFgs4Wdalil/c=
Subject key identifier:   0E:DB:45:D5:FF:20:3F:F1:05:EB:CF:22:E7:E7:49:17:74:E1:93:30
Certificate issuer:       /CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
Certificate serial:       2518F4
Authority key identifier: F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/479814c973b269729f5991f2eeff75bcf9b78a31.roa
Signing time:             Tue 17 Oct 2023 19:52:50 +0000
ROA not before:           Mon 16 Oct 2023 19:52:50 +0000
ROA not after:            Fri 17 Oct 2025 19:52:50 +0000
asID:                     52468
IP address blocks:        45.70.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 01:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2431220 (0x2518f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
        Validity
            Not Before: Oct 16 19:52:50 2023 GMT
            Not After : Oct 17 19:52:50 2025 GMT
        Subject: CN=479814c973b269729f5991f2eeff75bcf9b78a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:df:b1:e4:9f:d0:66:df:ff:d1:b2:50:14:12:
                    0c:da:ac:af:20:0b:35:46:f3:97:a7:cd:cc:67:c9:
                    de:da:db:ce:75:84:65:f2:44:41:ba:87:24:c0:64:
                    4f:77:5f:62:3d:9b:41:2c:f7:6d:21:c7:17:6a:39:
                    57:f4:31:2c:9e:b9:d5:de:d3:f3:d4:4d:ea:d3:6c:
                    ea:01:5f:f2:90:b3:3b:56:69:c0:e0:36:63:11:fb:
                    e8:10:88:0c:ab:c8:38:fd:a4:1c:0a:e8:29:0a:51:
                    00:b4:72:58:b6:35:37:27:cc:03:2f:ef:d9:d9:2e:
                    25:91:b0:01:1a:a3:f8:17:c5:7f:97:8b:f8:1a:3d:
                    51:db:22:ae:07:95:ea:17:fe:bc:f5:bd:dc:ae:ba:
                    a4:cc:77:0a:33:14:22:03:52:3f:d0:17:d9:f7:dd:
                    8c:29:80:8a:4f:18:34:ac:2b:7a:9f:c0:35:94:04:
                    35:dc:36:f0:b4:54:d1:bd:38:4a:1b:f5:76:f7:88:
                    ec:82:da:a9:e0:34:67:d0:b5:6b:21:20:5b:06:3f:
                    f3:de:49:fd:8f:74:49:6c:bd:00:b2:12:76:56:78:
                    2e:e9:01:60:dc:67:1e:30:4f:55:d2:29:0b:dd:b1:
                    f4:6f:08:84:e2:df:3a:52:f6:c9:3c:b5:d6:eb:a1:
                    ac:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DB:45:D5:FF:20:3F:F1:05:EB:CF:22:E7:E7:49:17:74:E1:93:30
            X509v3 Authority Key Identifier:
                keyid:F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/479814c973b269729f5991f2eeff75bcf9b78a31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/19bdf7eba9512ec4f3179e720563bd1d6965a593.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:b0:b5:3e:42:3e:81:41:b7:d2:bd:2a:1b:05:d3:2b:ca:d3:
         76:e2:c1:a9:01:1a:01:b1:9e:ea:bd:fa:fa:01:eb:09:34:65:
         6f:64:0a:db:97:a5:b6:ec:53:e9:53:c2:cc:8d:c0:13:13:01:
         27:4b:89:65:eb:9f:65:a2:fc:d0:60:f6:70:58:02:06:fd:ed:
         d6:4e:22:c7:9a:09:27:f7:e6:b9:07:1c:67:fe:80:f4:74:34:
         f7:48:d7:a5:2f:5b:39:58:a3:74:94:19:8a:a2:ac:a8:40:2e:
         d8:7c:59:0f:9a:83:72:a6:c2:51:e3:ae:6f:61:13:53:f7:1a:
         d6:88:89:0f:c4:c2:48:10:b4:e7:f0:1f:fc:00:ab:78:f9:4c:
         fa:c9:2c:a5:91:ad:8c:39:05:91:f2:48:ca:bf:7e:7f:9a:a2:
         29:9e:82:21:d9:76:3a:7f:67:98:8d:67:89:18:e8:ce:3b:b0:
         66:6c:b9:b9:6a:d0:b2:af:87:22:bb:97:6f:11:97:3d:99:a1:
         b0:03:be:21:94:ee:a9:ef:c9:87:ad:ac:19:69:56:a2:1d:37:
         f5:09:9d:30:73:2b:97:48:71:22:94:7a:81:86:93:69:2d:2f:
         b3:c5:b4:c7:c8:d9:9a:31:5b:06:95:23:6d:32:99:c5:64:62:
         ac:2f:3e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 04:51:19 2024 by rpki-client on console-fra.rpki-client.org