Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/4953b6f952152e20e02cb84601089c1ded8c43dc.roa
File:                     4953b6f952152e20e02cb84601089c1ded8c43dc.roa (raw, json)
Hash identifier:          dDBrRT6iHGOoLGLlB5C1+9FMHHNqHi19ZM2SoPAIjjE=
Subject key identifier:   59:DA:E6:54:FF:2C:8E:F1:A2:EF:4A:37:10:04:4F:C4:64:4B:90:7D
Certificate issuer:       /CN=3ac089c221d0dbc870f89217c46c6a8f5a357910
Certificate serial:       090571
Authority key identifier: 7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac089c221d0dbc870f89217c46c6a8f5a357910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/4953b6f952152e20e02cb84601089c1ded8c43dc.roa
Signing time:             Thu 17 Feb 2022 14:45:29 +0000
ROA not before:           Thu 17 Feb 2022 03:00:00 +0000
ROA not after:            Sat 17 Feb 2024 03:00:00 +0000
asID:                     271843
IP address blocks:        45.162.132.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 07:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591217 (0x90571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac089c221d0dbc870f89217c46c6a8f5a357910
        Validity
            Not Before: Feb 17 03:00:00 2022 GMT
            Not After : Feb 17 03:00:00 2024 GMT
        Subject: CN=4953b6f952152e20e02cb84601089c1ded8c43dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:33:b6:f6:8f:36:ac:56:48:d8:ff:7e:fe:8f:
                    1e:a2:80:61:53:a8:43:15:8c:5b:0a:e0:07:14:ad:
                    18:ba:2f:fc:e9:55:5c:3d:f8:0b:a3:8a:12:ed:a2:
                    71:4e:01:40:94:63:f2:b6:77:1e:df:a3:5b:c3:72:
                    3c:2d:02:68:9f:68:ef:fb:a0:80:b1:a8:7b:d7:ab:
                    76:b3:88:80:86:8c:22:9f:bc:44:30:03:52:cf:64:
                    54:63:ac:3c:dc:07:f6:9a:40:70:7b:6e:6d:63:1d:
                    72:82:f9:72:df:b2:a3:fc:58:0f:e1:67:02:ce:2f:
                    2a:4a:45:12:20:f5:8a:2a:73:7a:b5:fe:31:05:5a:
                    ae:ff:00:a8:06:62:37:40:9c:46:6d:88:43:4f:77:
                    3e:81:fb:a5:18:55:af:51:b6:31:79:f2:4a:43:78:
                    6e:ef:ec:8c:cd:44:d9:86:63:16:d2:84:a2:41:db:
                    1b:2c:41:42:e5:50:70:45:a1:ef:70:89:1f:ec:a4:
                    8a:26:12:30:75:14:44:e8:b3:d1:cb:ba:60:45:f1:
                    a4:35:75:cb:cc:b3:20:76:ab:81:3b:2b:e9:79:5f:
                    01:97:42:25:1c:da:dd:f5:e6:49:62:c5:91:c4:b1:
                    ce:f9:dd:2c:bc:b7:bb:63:57:fe:64:ae:b6:59:a7:
                    da:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DA:E6:54:FF:2C:8E:F1:A2:EF:4A:37:10:04:4F:C4:64:4B:90:7D
            X509v3 Authority Key Identifier:
                keyid:7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac089c221d0dbc870f89217c46c6a8f5a357910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/4953b6f952152e20e02cb84601089c1ded8c43dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/3ac089c221d0dbc870f89217c46c6a8f5a357910.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:2a:6a:63:50:fb:33:9b:46:65:b4:b6:f3:21:f3:c5:18:1b:
         dc:72:89:e2:6d:88:df:38:f3:3d:6d:06:8e:56:92:87:5e:44:
         65:36:ba:02:9a:20:6f:d1:e2:c0:be:6a:a4:69:35:6c:aa:0a:
         de:43:10:71:c5:89:3d:ea:aa:3a:52:4a:c7:26:f6:a2:38:ed:
         75:43:86:1b:a5:91:c6:ae:9f:1e:dc:4f:83:11:92:a8:88:ad:
         96:ca:b9:c6:bc:c2:f5:6b:1c:ad:9d:fb:28:0c:a5:90:39:f0:
         13:ce:a5:b9:d3:28:78:99:d1:cb:7e:39:62:11:a7:1d:e7:84:
         b9:7e:9a:5c:6e:a4:44:52:64:9f:ee:bb:ae:eb:57:ce:b9:41:
         b2:5e:c7:34:e5:b2:f5:d1:52:53:78:6e:aa:18:d9:0a:ef:50:
         19:88:39:79:fe:a3:59:ad:c3:e9:d1:43:9a:94:a6:fd:1e:f8:
         fd:1a:38:5e:79:93:5b:79:51:72:b5:aa:08:06:5f:b0:69:e5:
         17:38:3b:49:4a:7f:ac:06:ed:fc:bb:97:61:2f:a8:6a:7b:e3:
         e3:17:fb:d0:d5:84:ac:ec:c9:b1:4d:0e:b3:b1:f8:f1:05:dd:
         6d:92:89:f7:5c:37:e3:97:7d:57:bd:47:d4:7c:be:fd:8a:ae:
         07:00:ae:76
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCQVxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNh
YzA4OWMyMjFkMGRiYzg3MGY4OTIxN2M0NmM2YThmNWEzNTc5MTAwHhcNMjIwMjE3
MDMwMDAwWhcNMjQwMjE3MDMwMDAwWjAzMTEwLwYDVQQDEyg0OTUzYjZmOTUyMTUy
ZTIwZTAyY2I4NDYwMTA4OWMxZGVkOGM0M2RjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlDO29o82rFZI2P9+/o8eooBhU6hDFYxbCuAHFK0Yui/86VVc
PfgLo4oS7aJxTgFAlGPytnce36Nbw3I8LQJon2jv+6CAsah716t2s4iAhowin7xE
MANSz2RUY6w83Af2mkBwe25tYx1ygvly37Kj/FgP4WcCzi8qSkUSIPWKKnN6tf4x
BVqu/wCoBmI3QJxGbYhDT3c+gfulGFWvUbYxefJKQ3hu7+yMzUTZhmMW0oSiQdsb
LEFC5VBwRaHvcIkf7KSKJhIwdRRE6LPRy7pgRfGkNXXLzLMgdquBOyvpeV8Bl0Il
HNrd9eZJYsWRxLHO+d0svLe7Y1f+ZK62WafaDQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFna5lT/LI7xou9KNxAET8RkS5B9MB8GA1UdIwQYMBaAFH5Jecan8oje7Cev
+/uhKFqPfhsRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2FjMDg5
YzIyMWQwZGJjODcwZjg5MjE3YzQ2YzZhOGY1YTM1NzkxMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODA2OGZhMTMtODg2MC00OTczLThhMmMtYmE4YTZh
NWNkYzg0LzQ5NTNiNmY5NTIxNTJlMjBlMDJjYjg0NjAxMDg5YzFkZWQ4YzQzZGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MDY4ZmExMy04ODYwLTQ5NzMtOGEyYy1iYThh
NmE1Y2RjODQvM2FjMDg5YzIyMWQwZGJjODcwZjg5MjE3YzQ2YzZhOGY1YTM1Nzkx
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS2ihDANBgkqhkiG9w0BAQsFAAOCAQEAaypqY1D7M5tGZbS2
8yHzxRgb3HKJ4m2I3zjzPW0GjlaSh15EZTa6Apogb9HiwL5qpGk1bKoK3kMQccWJ
PeqqOlJKxyb2ojjtdUOGG6WRxq6fHtxPgxGSqIitlsq5xrzC9WscrZ37KAylkDnw
E86ludMoeJnRy345YhGnHeeEuX6aXG6kRFJkn+67rutXzrlBsl7HNOWy9dFSU3hu
qhjZCu9QGYg5ef6jWa3D6dFDmpSm/R74/Ro4XnmTW3lRcrWqCAZfsGnlFzg7SUp/
rAbt/LuXYS+oanvj4xf70NWErOzJsU0Os7H48QXdbZKJ91w345d9V71H1Hy+/Yqu
BwCudg==
-----END CERTIFICATE-----
Generated at Fri Feb 16 11:58:06 2024 by rpki-client on console-fra.rpki-client.org