Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/c6068866a7568dd3ef2a60d4322c2d96f2fb83bd.roa
File:                     c6068866a7568dd3ef2a60d4322c2d96f2fb83bd.roa (raw, json)
Hash identifier:          815+6cxqsk9S6pldK+Wxa3YgHm+Zc7l08F31MiwVLuU=
Subject key identifier:   3F:48:D5:6E:0C:6F:05:C2:C8:58:A8:82:EF:F2:9A:3A:23:6A:56:E1
Certificate issuer:       /CN=30415e525ae2a6911d8229a69de6df7b5716b468
Certificate serial:       1E5FC0
Authority key identifier: AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/c6068866a7568dd3ef2a60d4322c2d96f2fb83bd.roa
Signing time:             Mon 16 Jan 2023 02:33:27 +0000
ROA not before:           Tue 23 Mar 2021 14:39:12 +0000
ROA not after:            Tue 24 Mar 2026 14:39:12 +0000
asID:                     265762
IP address blocks:        128.201.160.0/22 maxlen: 27

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 00:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1990592 (0x1e5fc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30415e525ae2a6911d8229a69de6df7b5716b468
        Validity
            Not Before: Mar 23 14:39:12 2021 GMT
            Not After : Mar 24 14:39:12 2026 GMT
        Subject: CN=c6068866a7568dd3ef2a60d4322c2d96f2fb83bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:ba:3b:ba:e9:9c:ef:7d:89:f2:f7:99:e1:
                    c6:a5:df:1f:78:f7:34:80:a1:a3:d7:91:d4:0d:63:
                    75:95:9f:06:c3:02:64:3f:d7:e8:7a:70:d7:13:1b:
                    46:25:9c:23:54:98:01:f6:f5:b9:59:36:b8:a3:df:
                    fe:04:75:c9:b8:52:e6:d9:b1:33:16:a0:b3:18:f9:
                    1f:d5:00:9d:37:3d:20:db:50:d8:aa:5b:37:e7:ea:
                    23:a4:14:eb:2e:16:10:98:05:a1:9e:a6:85:07:75:
                    62:b5:d5:26:a4:01:b1:f8:d3:d6:b0:08:db:45:64:
                    23:4f:83:70:d5:37:30:51:b0:11:30:f9:65:87:c4:
                    02:ff:01:0c:98:6f:c0:12:35:59:f5:1c:47:ab:e8:
                    fd:fb:87:00:9c:b2:29:37:1d:74:5c:a0:66:31:84:
                    40:21:1d:0c:63:01:f2:43:8b:56:d5:b5:61:13:6c:
                    1d:55:db:3a:dc:e7:c5:17:a6:58:a8:54:0a:cb:b7:
                    75:37:ef:4c:20:9d:16:02:36:f5:44:6c:9b:52:7f:
                    8a:09:6f:49:17:f4:29:4f:86:5a:3b:f7:a1:79:4b:
                    53:b2:6e:37:13:18:01:b5:50:c8:cf:80:50:bc:e9:
                    40:a6:44:ce:2a:2e:74:af:8e:6f:ba:b3:50:55:c7:
                    7a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:48:D5:6E:0C:6F:05:C2:C8:58:A8:82:EF:F2:9A:3A:23:6A:56:E1
            X509v3 Authority Key Identifier:
                keyid:AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/c6068866a7568dd3ef2a60d4322c2d96f2fb83bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:16:d9:66:1c:7e:aa:5b:27:48:c5:fa:4b:01:93:63:7f:2a:
         81:72:44:66:33:aa:87:67:22:69:38:dd:e1:f9:d7:7e:29:db:
         f3:e4:2f:ba:01:0f:4a:69:96:a3:8c:86:90:9c:b7:61:39:1d:
         0f:c0:9f:5d:1e:90:94:c0:42:43:67:0a:bd:2b:89:ab:ee:bb:
         00:a5:70:9e:87:61:ba:d6:df:c4:2a:97:dd:be:51:ba:f4:34:
         12:d6:55:b8:4e:8e:d0:d5:f4:5c:ea:33:1c:3f:81:9a:35:7f:
         6c:4f:85:90:86:c1:75:4c:92:75:2e:41:3f:a7:e4:4f:9c:30:
         49:a0:0b:66:fc:8e:dd:66:41:c9:36:a8:7c:f7:a5:0d:64:9e:
         70:5d:87:ec:8c:ed:28:24:fa:12:7e:a2:90:ec:45:07:9d:18:
         fe:9f:1e:c4:b8:02:d7:31:d7:4c:37:97:dc:f0:bf:0e:d3:02:
         89:c5:2c:f6:d7:65:57:2c:1c:49:06:7a:91:3d:5b:e5:eb:f6:
         20:c0:0d:91:66:be:2f:99:f7:95:22:25:6a:6e:23:aa:fd:c7:
         d9:0b:fe:86:f6:27:96:25:6e:90:eb:7f:98:a1:04:a5:af:6d:
         76:10:bc:ed:7c:85:13:59:11:75:c1:e8:63:57:f1:e6:e4:f3:
         b4:de:aa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 03:37:14 2024 by rpki-client on console-ams.rpki-client.org