Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/8c2bc7d9f7b1b0371d31c13136ffc0d7498faaa3.roa
File:                     8c2bc7d9f7b1b0371d31c13136ffc0d7498faaa3.roa (raw, json)
Hash identifier:          SuQFaP6YCM58J4nr8HyiMhQQ+MrHZ2Tt+YMkj005JhY=
Subject key identifier:   2E:E0:83:D5:8B:0D:5D:E8:BC:6F:43:71:CD:8A:2A:C1:52:CB:B8:44
Certificate issuer:       /CN=628922650fa5a87787a3f72fc142195f570c8c4e
Certificate serial:       0E0D17
Authority key identifier: 6B:2E:CD:E6:51:56:11:2C:9B:B6:B1:CA:91:BE:86:77:52:1D:40:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/628922650fa5a87787a3f72fc142195f570c8c4e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/8c2bc7d9f7b1b0371d31c13136ffc0d7498faaa3.roa
Signing time:             Tue 22 Jun 2021 12:48:52 +0000
ROA not before:           Tue 22 Jun 2021 03:00:00 +0000
ROA not after:            Wed 31 Jan 2024 03:00:00 +0000
asID:                     267856
IP address blocks:        45.176.8.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 07:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920855 (0xe0d17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=628922650fa5a87787a3f72fc142195f570c8c4e
        Validity
            Not Before: Jun 22 03:00:00 2021 GMT
            Not After : Jan 31 03:00:00 2024 GMT
        Subject: CN=8c2bc7d9f7b1b0371d31c13136ffc0d7498faaa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a5:78:b8:b7:11:d6:0c:d2:8d:1c:2d:d7:a1:
                    a4:d2:36:7d:99:15:4d:93:23:67:43:2a:d4:50:08:
                    b0:15:5e:83:a2:ca:76:31:9f:6a:f1:fb:25:75:97:
                    d8:0f:f5:8d:f9:cb:94:23:43:73:68:34:c0:e0:05:
                    7b:d9:c2:fe:af:13:a7:f9:eb:7d:45:a4:61:2f:c5:
                    aa:f9:b1:a9:7b:22:1c:e6:05:4c:16:3c:6e:13:82:
                    33:e6:54:21:73:ad:35:c8:7c:e4:09:23:01:12:b8:
                    3c:5f:12:be:3b:48:f8:ce:da:96:6c:54:8b:08:f6:
                    50:8e:bc:3e:9c:f2:92:bf:b6:6d:76:fe:96:f5:11:
                    92:70:94:d0:a1:02:c6:6e:52:f0:f4:11:18:8e:b4:
                    86:3d:a8:9c:2f:3b:26:3d:cf:d7:34:6a:b1:98:53:
                    81:77:d2:64:2a:39:cf:32:15:b0:b1:e1:75:14:33:
                    f3:9a:a4:c8:0d:b5:53:ac:f1:cd:18:6f:06:df:15:
                    5c:13:72:96:ae:94:e0:d5:af:76:fa:f9:27:55:01:
                    16:4d:93:bc:cf:32:13:ff:bf:8c:17:73:43:cb:be:
                    28:95:c4:01:bf:fa:ae:a0:d3:2c:86:59:48:a9:eb:
                    8c:0f:ac:3f:2c:31:c1:fd:9f:5b:fe:aa:75:ab:25:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E0:83:D5:8B:0D:5D:E8:BC:6F:43:71:CD:8A:2A:C1:52:CB:B8:44
            X509v3 Authority Key Identifier:
                keyid:6B:2E:CD:E6:51:56:11:2C:9B:B6:B1:CA:91:BE:86:77:52:1D:40:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/628922650fa5a87787a3f72fc142195f570c8c4e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/8c2bc7d9f7b1b0371d31c13136ffc0d7498faaa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/628922650fa5a87787a3f72fc142195f570c8c4e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:1a:7c:4d:9c:40:64:ba:45:7f:dd:47:7b:4e:62:b6:b8:2d:
         25:d1:28:36:2b:35:dd:0b:33:15:ae:50:7c:fa:80:83:d1:6f:
         3f:db:c0:fd:d6:e6:1f:4b:67:a6:6c:4c:f6:0e:0d:b3:62:88:
         b3:7b:4d:57:6d:22:b8:1d:90:a5:86:8b:74:8a:c7:f7:55:1b:
         fc:1f:35:1b:f2:4d:e1:fb:d2:6a:66:ac:df:2d:c1:37:83:08:
         82:ed:41:48:44:e7:ad:f7:e7:b8:20:7d:82:ea:99:39:20:2b:
         6e:a4:aa:37:41:34:6d:7b:59:be:68:ab:2c:cd:78:bb:f3:15:
         5d:fc:27:77:79:24:03:6d:9f:a2:98:2d:a5:ec:50:7e:e2:40:
         cb:f2:0c:5e:a5:2b:78:6d:ce:52:ed:f3:79:f4:00:7b:09:58:
         6c:60:ae:f8:ef:d5:1b:b4:d6:07:7d:7e:02:c2:2c:ad:8e:fc:
         b6:28:54:90:27:3d:56:77:09:9b:54:c3:74:97:80:24:98:22:
         13:d1:8a:ab:0f:3a:b3:24:fe:4e:72:78:ad:16:14:a0:f5:a8:
         48:8a:d1:29:a8:e6:03:45:23:44:12:b1:36:76:e8:71:1a:79:
         cf:98:54:d6:f5:52:5b:3a:b8:2c:46:70:28:cf:f6:cf:0d:30:
         52:c5:08:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 11:05:39 2024 by rpki-client on console-fra.rpki-client.org