Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/e2fde92f925223bcc6a8eb91373d763832134f70.roa
File:                     e2fde92f925223bcc6a8eb91373d763832134f70.roa (raw, json)
Hash identifier:          4RY7HIIFMLZzmrfrgumN66JlWknb7zTilzwb2jsNIlE=
Subject key identifier:   99:FE:21:95:F8:6F:B0:B1:12:69:20:F7:C6:C4:CE:2C:BD:E9:7C:A1
Certificate issuer:       /CN=44abde35adbcf04fb85f8b032b43e458648b74b4
Certificate serial:       231A29
Authority key identifier: 0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/e2fde92f925223bcc6a8eb91373d763832134f70.roa
Signing time:             Wed 09 Aug 2023 13:55:42 +0000
ROA not before:           Tue 08 Aug 2023 13:55:42 +0000
ROA not after:            Sat 09 Aug 2025 13:55:42 +0000
asID:                     262589
IP address blocks:        190.211.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 22 Jan 2024 20:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2300457 (0x231a29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44abde35adbcf04fb85f8b032b43e458648b74b4
        Validity
            Not Before: Aug  8 13:55:42 2023 GMT
            Not After : Aug  9 13:55:42 2025 GMT
        Subject: CN=e2fde92f925223bcc6a8eb91373d763832134f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:b2:86:08:97:f0:92:f8:a5:53:78:11:36:
                    73:73:84:58:84:72:72:91:e4:b9:0b:47:56:8e:7c:
                    e7:68:95:1d:48:5d:78:24:9e:ce:da:38:0f:55:c2:
                    07:8d:ae:9a:52:10:a2:94:d4:36:bd:45:29:ff:c2:
                    71:c1:fb:7e:6e:83:35:c8:6e:67:e5:7b:2b:2e:fa:
                    5c:bd:04:cf:d4:f8:e3:93:78:87:88:b2:44:e9:57:
                    82:42:8a:c0:76:71:40:39:7a:0f:ac:3d:2a:84:74:
                    06:cd:80:e3:ec:bc:fe:d7:f1:42:72:88:7e:c1:7f:
                    3b:f2:7d:18:9c:81:17:27:16:dd:0f:a1:53:b2:8c:
                    ee:d2:b2:73:d1:79:5e:3e:7a:6e:f2:7d:38:f6:8d:
                    30:8e:19:ea:14:17:b0:56:10:64:72:15:d1:56:66:
                    1b:09:fe:56:b9:ce:7a:b8:5b:3e:e5:c5:94:82:68:
                    2a:e1:3c:90:c4:43:c4:24:ee:22:bb:b0:c6:f3:fd:
                    54:1b:a5:fe:39:c0:50:de:29:1b:8b:a5:7f:ba:74:
                    7f:98:b4:11:d2:9b:97:e6:32:73:5d:ba:39:04:69:
                    77:bb:db:0b:22:36:97:5d:e3:b9:c7:03:91:69:04:
                    bc:b6:48:6b:3b:60:cd:80:69:d3:1e:9d:27:fd:ad:
                    37:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FE:21:95:F8:6F:B0:B1:12:69:20:F7:C6:C4:CE:2C:BD:E9:7C:A1
            X509v3 Authority Key Identifier:
                keyid:0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/e2fde92f925223bcc6a8eb91373d763832134f70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/44abde35adbcf04fb85f8b032b43e458648b74b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:b8:c3:f3:ca:2b:e4:16:eb:7c:b6:ac:92:20:09:19:fd:f1:
         04:57:b0:b9:7b:b8:a9:33:d4:93:fa:01:85:8b:7f:2c:ae:40:
         56:cb:b8:08:e8:24:68:16:e0:fb:65:1a:fb:7c:1b:cf:02:b9:
         64:15:07:b1:b8:2b:59:1f:fb:22:a5:83:af:db:c7:c9:9d:2a:
         be:cf:65:59:74:ac:bf:03:ac:bb:1d:71:fd:80:7c:08:ed:63:
         32:9f:b8:34:e1:28:20:81:be:78:2b:7c:f2:3f:f5:50:7c:d1:
         4a:4f:7b:12:98:dc:cd:5c:c5:43:08:3e:65:0a:00:73:5c:c6:
         2b:c5:52:9b:3d:9e:d2:4b:48:27:44:15:60:35:cb:bc:b5:48:
         10:98:2d:20:ab:91:e2:ff:63:64:73:c1:7c:5e:18:24:8b:eb:
         26:ac:2a:20:f8:f2:3d:ca:56:89:64:5d:3f:08:fd:0f:19:18:
         ff:57:aa:b7:3b:31:da:0a:14:6c:10:1a:74:21:93:7c:09:37:
         5a:00:76:c6:30:8b:b7:b0:59:87:73:38:91:47:b3:57:4c:90:
         28:8e:85:0c:59:da:a3:15:ff:71:2f:70:18:e5:93:31:27:4a:
         aa:16:d8:8d:46:68:e7:b1:31:b6:16:66:9b:a2:c5:2e:55:3d:
         b6:20:e9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 23:12:42 2024 by rpki-client on console-ams.rpki-client.org