Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/1ccba7f02881365762e08ba1c9c631fe61740c7b.roa
File:                     1ccba7f02881365762e08ba1c9c631fe61740c7b.roa (raw, json)
Hash identifier:          kbej6r9w7tCUGrr2M9HxJDQybBMQFWOe1VnJQVkkbYk=
Subject key identifier:   D8:5A:3F:51:BD:57:0E:1D:A0:8E:EF:D4:96:5C:87:D9:7F:31:04:7B
Certificate issuer:       /CN=f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb
Certificate serial:       07B963
Authority key identifier: 56:61:2E:13:6C:AF:57:C0:54:E7:1B:C5:5A:79:B9:9D:78:9E:1A:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/1ccba7f02881365762e08ba1c9c631fe61740c7b.roa
Signing time:             Fri 01 Mar 2024 13:53:18 +0000
ROA not before:           Fri 01 Mar 2024 13:53:18 +0000
ROA not after:            Sun 01 Mar 2026 13:53:18 +0000
asID:                     269836
IP address blocks:        45.176.70.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 00:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506211 (0x7b963)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb
        Validity
            Not Before: Mar  1 13:53:18 2024 GMT
            Not After : Mar  1 13:53:18 2026 GMT
        Subject: CN=1ccba7f02881365762e08ba1c9c631fe61740c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f6:bc:2f:22:5b:a7:06:95:c2:91:9a:65:19:
                    00:4b:7b:c5:29:39:15:d8:b8:2f:9d:b6:2d:8d:62:
                    28:36:fb:91:19:a1:91:4c:b8:f0:72:6f:30:db:58:
                    d8:dd:f3:51:1b:dc:4b:80:cb:a6:7c:6e:f2:41:5a:
                    88:4c:64:8d:e5:88:71:b6:97:43:f2:e0:5f:aa:5b:
                    70:dd:9d:29:ad:ce:d4:19:9c:9e:d6:55:85:00:90:
                    88:e0:91:a7:83:df:99:9d:7d:a9:c8:d1:e6:f6:a4:
                    cd:af:4f:0f:2c:0d:7a:ab:68:77:86:d5:37:02:20:
                    4c:80:1d:f4:80:4e:cd:38:e5:3b:c5:7d:8d:a7:13:
                    f2:8b:aa:e1:49:66:08:b0:cc:ca:62:b9:65:43:b5:
                    7d:58:67:66:36:d0:c7:14:2b:17:bf:a7:28:a8:80:
                    d3:d4:40:dd:f7:5d:57:a7:eb:41:1d:c2:6c:33:51:
                    a0:ed:e2:7a:13:d8:16:cb:df:d3:bf:b3:58:a0:9a:
                    66:b8:c4:90:63:18:4b:dd:1f:cd:8b:39:9e:ad:b3:
                    37:1f:af:ae:24:91:df:25:15:a2:ea:be:90:ee:00:
                    30:19:47:19:4e:19:42:13:cd:7f:6e:b2:51:23:8d:
                    6c:21:f2:e7:52:90:15:6e:23:19:ad:b8:fe:b0:68:
                    ed:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5A:3F:51:BD:57:0E:1D:A0:8E:EF:D4:96:5C:87:D9:7F:31:04:7B
            X509v3 Authority Key Identifier:
                keyid:56:61:2E:13:6C:AF:57:C0:54:E7:1B:C5:5A:79:B9:9D:78:9E:1A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/1ccba7f02881365762e08ba1c9c631fe61740c7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:a7:0d:18:4f:4d:1a:ef:20:24:c8:f4:b8:e3:14:27:6d:6e:
         64:47:8f:3d:d6:9f:01:ea:9e:bc:42:55:d2:61:f1:c9:1b:28:
         50:3a:a1:98:37:fe:d1:15:ba:24:86:50:76:fa:9f:1d:85:4a:
         9d:e4:b8:a5:40:5c:00:7e:7d:e8:75:f2:b1:4f:28:27:89:e5:
         87:2d:67:c6:39:ca:8c:b7:78:09:81:40:3b:24:b0:1a:c7:8e:
         16:c3:79:05:2f:e5:65:f1:ce:e4:b3:72:8b:02:c4:cc:b2:cb:
         ae:72:10:c9:c7:c7:47:b5:17:c7:e1:e7:2a:26:05:29:5f:53:
         49:49:1d:1b:6d:a9:16:8c:b6:8f:b2:43:41:1a:87:20:65:c8:
         59:e6:8b:fd:06:2e:26:8a:2b:88:80:f2:1b:f5:1f:95:8a:66:
         32:65:2c:40:52:9b:4c:09:98:1c:72:f2:63:2f:3a:5f:a5:0e:
         f8:e1:66:22:6a:a1:b4:c2:c4:18:2f:7a:b2:52:b5:92:76:b3:
         52:70:e3:6a:16:d2:38:a5:e4:b3:ff:1d:af:0d:d9:f4:47:35:
         c0:c0:c4:2b:82:70:c3:6d:ea:0b:db:15:ed:91:91:1c:44:44:
         d8:ea:93:7f:c3:f7:a1:aa:5e:8c:85:e0:28:af:30:44:7c:d6:
         99:cd:58:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 02:29:31 2024 by rpki-client on console-ams.rpki-client.org