Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/f09690f25d0c3f939305e6e891dbeda59459b5d6.roa
File:                     f09690f25d0c3f939305e6e891dbeda59459b5d6.roa (raw, json)
Hash identifier:          zuEVw1zSnV0dNyDQoqvUbOvyxaU+aqn2P/HaEe6tlDU=
Subject key identifier:   EC:96:44:F4:88:0A:14:E7:7C:A7:13:39:A5:D3:6A:05:92:D4:EA:30
Certificate issuer:       /CN=f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb
Certificate serial:       081A72
Authority key identifier: 56:61:2E:13:6C:AF:57:C0:54:E7:1B:C5:5A:79:B9:9D:78:9E:1A:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/f09690f25d0c3f939305e6e891dbeda59459b5d6.roa
Signing time:             Thu 14 Mar 2024 23:52:14 +0000
ROA not before:           Thu 14 Mar 2024 23:52:14 +0000
ROA not after:            Sat 14 Mar 2026 23:52:14 +0000
asID:                     262186
IP address blocks:        45.176.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 01:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531058 (0x81a72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb
        Validity
            Not Before: Mar 14 23:52:14 2024 GMT
            Not After : Mar 14 23:52:14 2026 GMT
        Subject: CN=f09690f25d0c3f939305e6e891dbeda59459b5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:11:f2:4f:d3:81:66:5e:2c:2d:1c:c4:aa:
                    57:dd:b7:ba:37:57:96:bc:d8:b8:0c:7b:f8:62:e3:
                    58:51:4b:7f:be:c1:de:8c:32:10:27:2d:7a:5b:fa:
                    ac:bf:a4:20:ba:b6:d5:c2:6b:94:ba:99:7e:b8:15:
                    1a:9a:d5:20:99:27:c5:da:36:a8:28:29:a6:b6:28:
                    9c:85:f2:10:31:97:41:cb:a0:2a:2f:d4:74:80:e9:
                    5c:4a:c1:bb:4e:0b:f3:17:7a:d8:47:c1:a7:8b:a3:
                    a7:6f:0d:55:c0:e8:5e:c9:ff:22:77:23:24:74:f0:
                    31:c4:7d:66:d1:d4:25:76:2f:c0:34:1f:45:74:16:
                    d4:70:67:bf:ca:3a:3c:a6:ac:3c:fa:78:82:e6:7e:
                    d8:4d:34:45:75:42:29:3e:25:01:19:da:d4:78:7a:
                    c9:94:ba:ed:84:15:20:b0:b9:04:18:2d:7d:c3:0a:
                    8e:a2:19:a4:4f:d1:76:82:af:88:17:88:57:5c:55:
                    11:ae:81:f5:7c:4a:de:7b:15:8c:10:ba:7f:41:c8:
                    cb:49:6c:02:23:42:7e:65:ab:75:d4:69:2c:0b:9f:
                    7a:35:de:08:98:06:0a:5d:4d:45:6e:54:12:90:22:
                    85:d2:f2:98:c7:c1:dd:3a:09:33:f6:eb:34:26:6e:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:96:44:F4:88:0A:14:E7:7C:A7:13:39:A5:D3:6A:05:92:D4:EA:30
            X509v3 Authority Key Identifier:
                keyid:56:61:2E:13:6C:AF:57:C0:54:E7:1B:C5:5A:79:B9:9D:78:9E:1A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/f09690f25d0c3f939305e6e891dbeda59459b5d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:bd:88:6d:18:67:38:56:0d:5a:9a:b2:0c:32:f7:88:1f:66:
         a7:15:0f:d9:0a:36:ec:8d:81:f4:3d:6e:44:54:b2:2c:54:1c:
         dd:4b:9c:ff:1a:59:cc:cd:d7:0d:5c:18:91:c6:94:59:09:84:
         66:14:52:1c:16:13:97:3e:0d:ee:65:bc:13:07:6e:86:9d:df:
         6f:61:77:58:61:02:1d:b8:3b:66:9a:c3:02:8e:b8:a7:1b:07:
         f9:9f:3f:f5:7a:c3:f0:d1:cd:c6:fd:de:85:d1:58:57:49:b4:
         39:c5:82:af:a9:c4:7c:a4:36:3f:0e:eb:8f:a5:00:e3:ea:bc:
         03:60:6b:12:f9:ff:40:b2:5b:80:29:e1:c5:80:5e:b6:6a:88:
         25:ed:06:32:01:c3:5a:01:67:46:76:f2:a4:82:af:18:79:37:
         eb:42:35:11:68:83:1e:d0:e1:c7:73:99:3d:21:2c:e9:df:65:
         bc:31:74:d9:63:54:91:62:03:46:00:2f:34:d7:29:eb:bd:d8:
         ab:e4:e9:e9:16:5d:97:d5:28:df:e6:a0:69:ed:ca:4c:16:9f:
         c4:89:bd:ab:61:1e:dd:6d:d7:76:8e:70:e3:a9:41:a9:c3:8d:
         15:fb:26:53:f8:6e:82:ca:69:b3:35:c7:e8:68:f5:a0:ad:9c:
         f9:0a:15:2b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCBpyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY0
Y2MyNTI5YzI1YjZmZjcyYjY0ZjllODZmZDNjNTBkNWE0YTNjY2IwHhcNMjQwMzE0
MjM1MjE0WhcNMjYwMzE0MjM1MjE0WjAzMTEwLwYDVQQDEyhmMDk2OTBmMjVkMGMz
ZjkzOTMwNWU2ZTg5MWRiZWRhNTk0NTliNWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnkQR8k/TgWZeLC0cxKpX3be6N1eWvNi4DHv4YuNYUUt/vsHe
jDIQJy16W/qsv6QgurbVwmuUupl+uBUamtUgmSfF2jaoKCmmtiichfIQMZdBy6Aq
L9R0gOlcSsG7TgvzF3rYR8Gni6Onbw1VwOheyf8idyMkdPAxxH1m0dQldi/ANB9F
dBbUcGe/yjo8pqw8+niC5n7YTTRFdUIpPiUBGdrUeHrJlLrthBUgsLkEGC19wwqO
ohmkT9F2gq+IF4hXXFURroH1fEreexWMELp/QcjLSWwCI0J+Zat11GksC596Nd4I
mAYKXU1FblQSkCKF0vKYx8HdOgkz9us0Jm5b3wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOyWRPSIChTnfKcTOaXTagWS1OowMB8GA1UdIwQYMBaAFFZhLhNsr1fAVOcb
xVp5uZ14nhqLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjRjYzI1
MjljMjViNmZmNzJiNjRmOWU4NmZkM2M1MGQ1YTRhM2NjYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODRjMDg4NDEtNDM3Zi00YzZhLTkxZTYtMTgzNzYz
ZjU3YzUxL2YwOTY5MGYyNWQwYzNmOTM5MzA1ZTZlODkxZGJlZGE1OTQ1OWI1ZDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NGMwODg0MS00MzdmLTRjNmEtOTFlNi0xODM3
NjNmNTdjNTEvZjRjYzI1MjljMjViNmZmNzJiNjRmOWU4NmZkM2M1MGQ1YTRhM2Nj
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2wRzANBgkqhkiG9w0BAQsFAAOCAQEAXL2IbRhnOFYNWpqy
DDL3iB9mpxUP2Qo27I2B9D1uRFSyLFQc3Uuc/xpZzM3XDVwYkcaUWQmEZhRSHBYT
lz4N7mW8Ewduhp3fb2F3WGECHbg7ZprDAo64pxsH+Z8/9XrD8NHNxv3ehdFYV0m0
OcWCr6nEfKQ2Pw7rj6UA4+q8A2BrEvn/QLJbgCnhxYBetmqIJe0GMgHDWgFnRnby
pIKvGHk360I1EWiDHtDhx3OZPSEs6d9lvDF02WNUkWIDRgAvNNcp673Yq+Tp6RZd
l9Uo3+agae3KTBafxIm9q2Ee3W3Xdo5w46lBqcONFfsmU/hugsppszXH6Gj1oK2c
+QoVKw==
-----END CERTIFICATE-----
Generated at Fri Mar 15 02:49:06 2024 by rpki-client on console-fra.rpki-client.org