Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/e6cfc240bfb109e067af192ae325e6aa12f6f9cc.roa
File:                     e6cfc240bfb109e067af192ae325e6aa12f6f9cc.roa (raw, json)
Hash identifier:          7Rddo0H/EFLSncFOVuKuzh3md8ZLmPuZnpQIUTQGY68=
Subject key identifier:   90:35:BB:7F:A4:BF:79:6A:16:85:28:38:32:DA:24:DD:78:92:7A:1E
Certificate issuer:       /CN=f704dcc2bd05f2f811f329995911565e1ff53e09
Certificate serial:       0CDB9E
Authority key identifier: 29:50:CD:67:0B:F0:D9:8B:2F:8D:D9:F4:08:53:EE:DB:28:C8:EA:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f704dcc2bd05f2f811f329995911565e1ff53e09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/e6cfc240bfb109e067af192ae325e6aa12f6f9cc.roa
Signing time:             Wed 24 Mar 2021 14:34:02 +0000
ROA not before:           Wed 24 Mar 2021 14:34:02 +0000
ROA not after:            Tue 24 Mar 2026 14:34:02 +0000
asID:                     265554
IP address blocks:        201.219.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Jan 2024 11:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 842654 (0xcdb9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f704dcc2bd05f2f811f329995911565e1ff53e09
        Validity
            Not Before: Mar 24 14:34:02 2021 GMT
            Not After : Mar 24 14:34:02 2026 GMT
        Subject: CN=e6cfc240bfb109e067af192ae325e6aa12f6f9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c9:0c:00:ee:c4:78:13:e6:33:73:51:7e:e2:
                    8a:0a:c3:16:a8:82:8d:9e:a4:18:fb:fc:fe:2f:04:
                    a4:59:86:de:47:bf:9a:d1:34:71:75:54:5a:58:7b:
                    54:ea:57:0c:b5:c6:21:56:1f:ec:b5:dd:cc:be:08:
                    28:e9:49:f6:48:4e:f9:2b:fe:c0:43:23:f0:4a:f2:
                    eb:fe:cb:b1:64:04:77:92:6e:b7:53:37:35:3a:2d:
                    9d:eb:d8:a9:8e:a1:d5:7f:d0:2e:77:32:db:e6:f4:
                    40:fc:ca:db:d8:2d:65:7c:21:3d:7f:8e:ee:1c:45:
                    f6:3e:5d:d5:0f:87:e6:a4:6d:05:53:d1:07:35:eb:
                    e6:b6:c1:b1:a2:0f:5b:6e:1b:15:5e:5b:51:64:18:
                    16:1f:00:8f:f6:59:5a:69:be:b9:bc:4f:30:56:70:
                    bc:03:9b:2d:a2:57:ad:7a:ad:d2:fe:92:55:a6:0e:
                    99:1b:6c:94:90:63:91:30:9f:c9:d4:75:ec:e9:e1:
                    a9:05:39:00:a3:c3:23:36:85:89:74:2c:9b:db:4e:
                    29:5c:0a:c0:da:12:a5:19:66:24:b8:21:47:91:27:
                    d6:d3:c6:e9:a7:f0:0d:33:5c:33:5b:24:e0:6d:0e:
                    32:67:29:5f:d3:43:26:ad:3e:43:05:4f:2b:58:07:
                    96:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:35:BB:7F:A4:BF:79:6A:16:85:28:38:32:DA:24:DD:78:92:7A:1E
            X509v3 Authority Key Identifier:
                keyid:29:50:CD:67:0B:F0:D9:8B:2F:8D:D9:F4:08:53:EE:DB:28:C8:EA:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f704dcc2bd05f2f811f329995911565e1ff53e09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/e6cfc240bfb109e067af192ae325e6aa12f6f9cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/f704dcc2bd05f2f811f329995911565e1ff53e09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:a3:ef:35:6d:a8:3b:a2:9f:e5:a8:18:38:89:c7:99:74:0e:
         28:ba:eb:82:dd:d8:93:35:a9:3e:56:4c:1c:54:cf:e6:28:e3:
         01:49:44:aa:7a:46:e1:9a:e6:07:51:25:f2:26:f4:22:d5:b8:
         be:75:98:7b:c1:25:7f:d0:42:f1:40:90:e0:ad:ce:d3:7e:62:
         5a:07:af:a6:38:b6:02:c5:2d:45:e3:d0:87:19:de:dc:c5:23:
         8e:d2:d4:1d:c5:ac:65:31:a2:1a:de:e0:b3:3b:2e:1e:d4:c1:
         ef:34:13:1a:dd:ee:c5:7e:75:70:56:6f:2b:2d:32:e8:b3:93:
         20:b9:c4:a8:55:65:ef:02:0c:56:70:86:d5:cc:c7:7f:84:46:
         92:58:a1:51:d3:17:37:ce:8e:cf:5d:32:b0:87:de:8a:91:68:
         91:88:c1:fd:93:0a:c6:8b:6e:e7:4a:1e:2e:68:67:91:c9:5a:
         58:2e:32:8e:f0:16:8c:86:1f:79:98:1b:2c:ff:dc:94:18:1b:
         86:be:0f:a0:89:8c:fd:e4:6d:18:32:33:82:51:83:67:d6:e0:
         96:d6:e3:9a:49:2f:40:42:c9:76:c9:e0:f9:6c:4d:14:3a:c4:
         3c:62:a9:69:e9:1b:ce:63:15:e6:19:64:04:f1:9f:76:b5:68:
         f8:b5:3d:e8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDNueMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY3
MDRkY2MyYmQwNWYyZjgxMWYzMjk5OTU5MTE1NjVlMWZmNTNlMDkwHhcNMjEwMzI0
MTQzNDAyWhcNMjYwMzI0MTQzNDAyWjAzMTEwLwYDVQQDEyhlNmNmYzI0MGJmYjEw
OWUwNjdhZjE5MmFlMzI1ZTZhYTEyZjZmOWNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmMkMAO7EeBPmM3NRfuKKCsMWqIKNnqQY+/z+LwSkWYbeR7+a
0TRxdVRaWHtU6lcMtcYhVh/std3Mvggo6Un2SE75K/7AQyPwSvLr/suxZAR3km63
Uzc1Oi2d69ipjqHVf9AudzLb5vRA/Mrb2C1lfCE9f47uHEX2Pl3VD4fmpG0FU9EH
NevmtsGxog9bbhsVXltRZBgWHwCP9llaab65vE8wVnC8A5stoleteq3S/pJVpg6Z
G2yUkGORMJ/J1HXs6eGpBTkAo8MjNoWJdCyb204pXArA2hKlGWYkuCFHkSfW08bp
p/ANM1wzWyTgbQ4yZylf00MmrT5DBU8rWAeWowIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJA1u3+kv3lqFoUoODLaJN14knoeMB8GA1UdIwQYMBaAFClQzWcL8NmLL43Z
9AhT7tsoyOq3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjcwNGRj
YzJiZDA1ZjJmODExZjMyOTk5NTkxMTU2NWUxZmY1M2UwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODIyZGUxNjctNDZmMi00OWFmLWIxNWMtZDViMzg2
ZTYwY2MyL2U2Y2ZjMjQwYmZiMTA5ZTA2N2FmMTkyYWUzMjVlNmFhMTJmNmY5Y2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MjJkZTE2Ny00NmYyLTQ5YWYtYjE1Yy1kNWIz
ODZlNjBjYzIvZjcwNGRjYzJiZDA1ZjJmODExZjMyOTk5NTkxMTU2NWUxZmY1M2Uw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnbgTANBgkqhkiG9w0BAQsFAAOCAQEAI6PvNW2oO6Kf5agY
OInHmXQOKLrrgt3YkzWpPlZMHFTP5ijjAUlEqnpG4ZrmB1El8ib0ItW4vnWYe8El
f9BC8UCQ4K3O035iWgevpji2AsUtRePQhxne3MUjjtLUHcWsZTGiGt7gszsuHtTB
7zQTGt3uxX51cFZvKy0y6LOTILnEqFVl7wIMVnCG1czHf4RGklihUdMXN86Oz10y
sIfeipFokYjB/ZMKxotu50oeLmhnkclaWC4yjvAWjIYfeZgbLP/clBgbhr4PoImM
/eRtGDIzglGDZ9bgltbjmkkvQELJdsng+WxNFDrEPGKpaekbzmMV5hlkBPGfdrVo
+LU96A==
-----END CERTIFICATE-----
Generated at Wed Jan 10 16:13:21 2024 by rpki-client on console-fra.rpki-client.org