Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/d58938c2fd37db2f463f4e8e5835bd6438736945.roa
File:                     d58938c2fd37db2f463f4e8e5835bd6438736945.roa (raw, json)
Hash identifier:          TclrZGq8+ith3B9gy3TYMv8vfM3tOXovHaJcFs/syZk=
Subject key identifier:   14:76:0A:B6:E6:BA:75:4F:98:C2:FB:0D:08:36:92:DE:7D:E9:FA:6B
Certificate issuer:       /CN=cec79d826aaec80dee0e36071922c85774502396
Certificate serial:       0D49CE
Authority key identifier: E3:47:3D:02:46:72:B4:CD:81:49:CD:70:45:B7:71:50:CA:00:8D:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cec79d826aaec80dee0e36071922c85774502396.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/d58938c2fd37db2f463f4e8e5835bd6438736945.roa
Signing time:             Wed 24 Mar 2021 14:37:22 +0000
ROA not before:           Wed 24 Mar 2021 14:37:22 +0000
ROA not after:            Tue 24 Mar 2026 14:37:22 +0000
asID:                     266907
IP address blocks:        45.224.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Feb 2024 22:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870862 (0xd49ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec79d826aaec80dee0e36071922c85774502396
        Validity
            Not Before: Mar 24 14:37:22 2021 GMT
            Not After : Mar 24 14:37:22 2026 GMT
        Subject: CN=d58938c2fd37db2f463f4e8e5835bd6438736945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:2f:14:9b:d2:ce:09:53:82:a2:c8:03:71:
                    cb:0d:07:36:66:cb:e8:e9:12:aa:c2:dc:26:92:30:
                    d3:8a:8a:3d:f7:3b:18:5a:07:b1:56:c8:57:b7:43:
                    4d:ac:af:68:a1:4b:ae:49:63:4c:ec:ca:32:f8:b9:
                    c9:47:c8:a1:a1:e7:6b:ad:1d:f9:99:3e:57:2f:3e:
                    f0:10:94:97:aa:97:c2:20:93:e9:5b:7a:fc:1c:e9:
                    c3:d4:25:e9:d0:e4:a1:76:59:e2:70:0e:a9:f6:cc:
                    22:2b:14:48:f9:b2:b1:ba:1a:9e:c0:5e:0b:4d:be:
                    17:e2:b0:c1:49:57:89:f8:a0:f1:83:c6:d0:1e:5f:
                    1e:41:79:87:69:a3:d0:0d:ec:8f:e0:95:11:be:68:
                    da:81:e6:32:8e:91:7a:aa:68:1f:e1:91:f5:5c:61:
                    b4:77:b0:e8:6d:03:f6:1e:6a:82:c3:97:fa:48:07:
                    4c:aa:56:24:74:6c:d6:3e:17:14:b0:a9:fe:df:7f:
                    38:43:96:49:37:c0:71:3f:18:d0:cf:14:a1:1b:9a:
                    b1:b5:2b:f2:e2:1c:d5:6e:24:c5:05:5e:64:19:5b:
                    9d:9b:f5:05:40:df:37:ce:26:04:a9:03:0d:73:8a:
                    4e:bd:2f:a5:08:91:49:76:21:be:82:06:9b:67:5c:
                    fe:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:76:0A:B6:E6:BA:75:4F:98:C2:FB:0D:08:36:92:DE:7D:E9:FA:6B
            X509v3 Authority Key Identifier:
                keyid:E3:47:3D:02:46:72:B4:CD:81:49:CD:70:45:B7:71:50:CA:00:8D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cec79d826aaec80dee0e36071922c85774502396.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/d58938c2fd37db2f463f4e8e5835bd6438736945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/cec79d826aaec80dee0e36071922c85774502396.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:54:33:34:91:34:6d:1d:62:f5:17:88:76:0a:b2:52:f1:51:
         56:73:2c:10:11:dc:ab:14:7e:e6:2c:56:b3:70:ba:e6:d8:ba:
         ea:7b:3f:93:3b:8e:a3:d5:64:b3:a8:0a:6c:77:2f:45:44:fc:
         8a:59:ff:e4:eb:99:2a:16:9e:3a:57:3b:69:dc:46:a3:1c:29:
         cf:93:7c:e1:d1:80:05:79:56:ad:d4:27:5f:13:38:8f:de:c5:
         02:b6:31:21:50:96:10:8a:0d:38:61:6b:b1:72:b2:5b:06:15:
         ac:05:be:50:aa:b8:10:c7:3f:8d:22:2a:a5:81:e9:ff:a6:f4:
         8c:03:1c:a1:9c:14:49:50:bb:9d:68:6d:26:ce:62:b1:cc:3e:
         21:10:e7:66:7b:c2:62:d9:89:71:9b:b5:c1:63:2e:e7:ef:75:
         47:64:0f:f1:d6:5c:4b:6b:4b:bc:0b:3b:df:32:3d:a3:4d:62:
         90:5b:48:58:63:e2:ae:63:2e:e6:60:04:f7:33:56:0d:5e:45:
         44:90:cd:a0:f8:34:05:2d:75:83:13:a9:72:46:c4:89:d8:04:
         a9:09:9d:d2:96:a7:c0:53:4b:2e:98:d3:eb:4f:f2:d2:88:4c:
         b7:93:4b:1a:96:31:7e:42:80:d1:ba:9d:07:33:fa:56:fb:fa:
         75:37:b6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 03:18:43 2024 by rpki-client on console-fra.rpki-client.org