Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/278906335ab61d09b8c817d2683775de42404088.roa
File:                     278906335ab61d09b8c817d2683775de42404088.roa (raw, json)
Hash identifier:          xeQ1X6QwQf7/E6WP3ULjKmFy+XC5x7uor4Cvql3+IzM=
Subject key identifier:   EC:4D:48:36:94:93:32:C7:31:C0:D6:51:70:E5:DA:E0:16:DC:72:DC
Certificate issuer:       /CN=fc3eb9c806dfd203fdb6fc49031057505a0c6f13
Certificate serial:       1E5677
Authority key identifier: 2F:9B:B8:0D:9F:F8:55:8E:F5:47:19:FF:D0:B2:4C:5C:6B:29:4B:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/278906335ab61d09b8c817d2683775de42404088.roa
Signing time:             Fri 24 Mar 2023 08:30:57 +0000
ROA not before:           Thu 23 Mar 2023 08:30:57 +0000
ROA not after:            Sat 22 Mar 2025 08:30:57 +0000
asID:                     266783
IP address blocks:        45.235.12.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 23 Feb 2024 07:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1988215 (0x1e5677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3eb9c806dfd203fdb6fc49031057505a0c6f13
        Validity
            Not Before: Mar 23 08:30:57 2023 GMT
            Not After : Mar 22 08:30:57 2025 GMT
        Subject: CN=278906335ab61d09b8c817d2683775de42404088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:6c:ac:52:23:45:76:0e:68:2e:6d:e5:1c:
                    e7:ef:7e:24:3a:92:eb:c5:40:d5:c2:c0:e8:15:15:
                    de:f2:4d:16:42:35:e2:b2:fb:12:ce:9c:7d:10:71:
                    97:79:4b:b0:09:53:fc:9a:45:25:62:6a:42:0b:e0:
                    a3:46:6e:50:eb:58:51:56:16:53:0a:b2:51:16:3c:
                    31:46:5e:7a:ea:5e:51:c1:84:09:5e:4d:31:6a:92:
                    31:72:0e:46:46:3e:d0:da:a0:9f:bc:e3:bb:d9:43:
                    e0:c3:b5:0c:79:b9:fe:c6:ec:30:95:7b:f4:3a:14:
                    09:98:b8:31:64:32:11:3f:bf:4b:cb:26:fe:4a:8e:
                    d0:ea:b9:78:ca:ad:fe:25:8c:be:2e:58:10:ae:0c:
                    16:bf:40:18:cc:b1:a3:6a:4c:5d:3d:52:f5:ed:25:
                    59:d0:19:bb:c3:49:a9:30:ef:f4:69:ff:05:0c:02:
                    56:4b:bd:71:0a:9f:a3:cb:ae:5e:3c:13:03:50:71:
                    8b:d7:16:59:1a:f3:83:f0:6b:15:ad:2c:12:0c:6f:
                    1e:5e:0f:50:af:56:0e:69:8e:76:1b:c1:8b:05:ce:
                    f1:bd:e3:48:a2:70:a6:e5:00:96:b6:98:9e:18:5a:
                    a9:69:37:b1:78:c6:8e:0b:40:75:11:b7:b2:39:52:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4D:48:36:94:93:32:C7:31:C0:D6:51:70:E5:DA:E0:16:DC:72:DC
            X509v3 Authority Key Identifier:
                keyid:2F:9B:B8:0D:9F:F8:55:8E:F5:47:19:FF:D0:B2:4C:5C:6B:29:4B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/278906335ab61d09b8c817d2683775de42404088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:ae:8b:95:ea:e0:0b:ca:c8:f8:e8:25:f2:7a:21:2b:28:fd:
         93:0c:d2:39:af:88:6b:d1:70:8c:e3:40:05:70:fa:1f:60:73:
         fd:d4:dd:10:82:ab:75:81:71:48:f9:65:9a:1d:19:66:30:12:
         d0:a0:20:99:1b:39:c7:59:21:ea:db:6d:fc:cd:ec:ec:8e:b4:
         ac:7b:82:fd:b7:31:2f:1c:92:54:13:de:d1:6a:eb:2b:28:b9:
         c7:9b:16:1f:86:95:9c:82:0c:8b:22:8e:3d:40:73:51:55:bc:
         c3:47:dc:5b:6d:f0:54:de:7f:d0:53:b8:c7:75:0a:c5:fc:63:
         07:af:62:24:43:72:c4:ce:65:27:87:da:75:a6:9e:94:0f:ca:
         80:f1:78:0a:9e:4c:c2:70:bb:ac:0c:1f:bd:b3:e4:8a:da:dc:
         fd:d4:81:bd:fa:60:69:23:ad:de:61:9c:a2:e6:bb:c0:f7:91:
         22:be:95:48:4c:f6:28:32:f8:b6:c1:a5:da:fb:f1:f3:7e:5b:
         bd:ae:f7:74:fb:be:7f:ee:2c:37:29:41:75:0e:e0:b4:a9:bd:
         14:74:de:52:25:a6:e4:31:6e:b5:76:5f:a3:b8:c2:50:de:f6:
         1a:bd:1e:0f:ac:53:5e:8d:03:4b:9e:b6:6a:c0:82:9c:42:4f:
         9f:2a:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 10:45:43 2024 by rpki-client on console-fra.rpki-client.org