Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/cee4615090b88ad4ffe4c127b8a35414a144f522.roa
File:                     cee4615090b88ad4ffe4c127b8a35414a144f522.roa (raw, json)
Hash identifier:          AA7uRXdYh8FTdZAcOhyfxPocHK1RD9zvX/vuHSNincY=
Subject key identifier:   C4:15:F9:D7:65:3C:E6:B2:09:AC:D1:0A:42:44:EC:E1:D3:1F:39:FF
Certificate issuer:       /CN=72abba6b7cd25cc52bbab3345005452793c3070a
Certificate serial:       04858C
Authority key identifier: DF:A6:D1:42:79:C2:7D:AB:84:68:F0:56:15:83:0F:3A:0C:FB:A5:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72abba6b7cd25cc52bbab3345005452793c3070a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/cee4615090b88ad4ffe4c127b8a35414a144f522.roa
Signing time:             Mon 24 Jan 2022 20:39:05 +0000
ROA not before:           Mon 24 Jan 2022 03:00:00 +0000
ROA not after:            Wed 24 Jan 2024 03:00:00 +0000
asID:                     271938
IP address blocks:        45.5.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jan 2024 07:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296332 (0x4858c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72abba6b7cd25cc52bbab3345005452793c3070a
        Validity
            Not Before: Jan 24 03:00:00 2022 GMT
            Not After : Jan 24 03:00:00 2024 GMT
        Subject: CN=cee4615090b88ad4ffe4c127b8a35414a144f522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:e5:77:f3:34:03:a2:7c:2c:d6:cf:60:4f:
                    18:39:ce:31:49:61:32:3f:3a:b9:d0:8d:8b:b9:09:
                    f6:81:2e:c6:42:27:78:13:c5:75:07:95:9d:46:88:
                    ee:21:2d:b5:03:d1:d3:88:6d:b1:56:06:04:2b:46:
                    5b:6e:cc:df:05:13:62:d9:3e:a5:d5:3c:86:08:74:
                    6d:37:d7:c1:b9:46:4e:9d:33:8a:79:df:e8:84:56:
                    f8:a3:b4:cd:94:85:f0:c6:ef:89:6a:67:f6:02:3e:
                    b9:bf:16:c8:1e:4e:e2:15:0c:f1:f3:f5:62:df:a1:
                    93:3d:73:4e:0c:4f:27:7b:30:f8:84:af:c6:5e:f5:
                    45:2b:70:eb:f9:0f:15:55:ec:0d:ef:a8:9f:cc:03:
                    7c:0e:3e:f8:cf:2f:6b:cc:bf:a1:09:83:03:4b:d7:
                    62:ab:e6:e2:ad:1e:e5:83:8a:66:76:49:85:a0:b8:
                    f9:c5:f0:b0:67:16:77:76:ee:fc:00:14:bb:dc:c5:
                    84:43:0b:43:5d:0b:e2:11:fb:94:da:ca:f7:08:71:
                    03:98:a0:b3:9b:44:75:9e:b3:3f:b2:dd:f5:71:39:
                    2e:cc:a8:09:ce:54:57:4f:31:bd:6b:6a:8c:3f:ed:
                    e1:76:75:ba:65:63:a6:e4:29:81:71:7f:65:78:4f:
                    9d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:15:F9:D7:65:3C:E6:B2:09:AC:D1:0A:42:44:EC:E1:D3:1F:39:FF
            X509v3 Authority Key Identifier:
                keyid:DF:A6:D1:42:79:C2:7D:AB:84:68:F0:56:15:83:0F:3A:0C:FB:A5:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72abba6b7cd25cc52bbab3345005452793c3070a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/cee4615090b88ad4ffe4c127b8a35414a144f522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/72abba6b7cd25cc52bbab3345005452793c3070a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:2e:6b:d2:1f:fe:be:02:ca:d2:d5:ae:8f:3c:4b:8e:0d:91:
         f0:66:83:96:83:cd:9b:04:04:f8:65:cd:2c:8c:82:61:f0:35:
         7d:4a:36:e2:99:d7:7d:23:f8:fc:de:a2:be:94:93:bd:90:a7:
         99:94:96:23:22:84:b5:a5:86:96:a4:6d:03:9f:e3:63:31:e6:
         86:61:21:95:22:57:59:82:56:43:c4:c0:9a:e0:da:dd:0b:73:
         04:c3:f0:5a:5b:29:c2:eb:dc:8b:33:e2:aa:86:d7:e7:a3:18:
         b4:6a:66:a2:72:35:9a:ab:cb:1b:ff:fd:25:f6:36:a9:2e:3c:
         9a:1e:8d:30:5f:b5:27:a0:92:c2:0e:b4:94:b7:f1:1b:fa:c3:
         02:dc:ce:33:1a:5b:8f:04:9b:9d:a2:8a:9d:5f:cc:3e:71:6b:
         6c:39:c0:23:35:62:68:a1:a1:d3:15:89:be:8d:45:64:cc:1e:
         a0:82:25:0b:aa:cf:35:09:cb:8c:13:c8:a0:05:6d:0f:54:53:
         31:56:c6:61:34:89:2a:c2:5d:b9:ad:54:0a:d8:96:4f:f0:4e:
         7e:ec:c2:d6:f8:7b:23:43:18:03:2a:62:ee:1c:39:04:7b:0a:
         24:5f:0c:92:df:3b:0e:98:a6:d2:6d:53:f1:8a:c0:8c:28:19:
         24:a1:c3:11
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBIWMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcy
YWJiYTZiN2NkMjVjYzUyYmJhYjMzNDUwMDU0NTI3OTNjMzA3MGEwHhcNMjIwMTI0
MDMwMDAwWhcNMjQwMTI0MDMwMDAwWjAzMTEwLwYDVQQDEyhjZWU0NjE1MDkwYjg4
YWQ0ZmZlNGMxMjdiOGEzNTQxNGExNDRmNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvuzld/M0A6J8LNbPYE8YOc4xSWEyPzq50I2LuQn2gS7GQid4
E8V1B5WdRojuIS21A9HTiG2xVgYEK0ZbbszfBRNi2T6l1TyGCHRtN9fBuUZOnTOK
ed/ohFb4o7TNlIXwxu+Jamf2Aj65vxbIHk7iFQzx8/Vi36GTPXNODE8nezD4hK/G
XvVFK3Dr+Q8VVewN76ifzAN8Dj74zy9rzL+hCYMDS9diq+birR7lg4pmdkmFoLj5
xfCwZxZ3du78ABS73MWEQwtDXQviEfuU2sr3CHEDmKCzm0R1nrM/st31cTkuzKgJ
zlRXTzG9a2qMP+3hdnW6ZWOm5CmBcX9leE+dIwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMQV+ddlPOayCazRCkJE7OHTHzn/MB8GA1UdIwQYMBaAFN+m0UJ5wn2rhGjw
VhWDDzoM+6WjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzJhYmJh
NmI3Y2QyNWNjNTJiYmFiMzM0NTAwNTQ1Mjc5M2MzMDcwYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGQyYzU5MjItYTcwMi00NDcyLWI0MjctMjU3MzFk
NTMxZjAwL2NlZTQ2MTUwOTBiODhhZDRmZmU0YzEyN2I4YTM1NDE0YTE0NGY1MjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZDJjNTkyMi1hNzAyLTQ0NzItYjQyNy0yNTcz
MWQ1MzFmMDAvNzJhYmJhNmI3Y2QyNWNjNTJiYmFiMzM0NTAwNTQ1Mjc5M2MzMDcw
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi0F2DANBgkqhkiG9w0BAQsFAAOCAQEAxy5r0h/+vgLK0tWu
jzxLjg2R8GaDloPNmwQE+GXNLIyCYfA1fUo24pnXfSP4/N6ivpSTvZCnmZSWIyKE
taWGlqRtA5/jYzHmhmEhlSJXWYJWQ8TAmuDa3QtzBMPwWlspwuvcizPiqobX56MY
tGpmonI1mqvLG//9JfY2qS48mh6NMF+1J6CSwg60lLfxG/rDAtzOMxpbjwSbnaKK
nV/MPnFrbDnAIzViaKGh0xWJvo1FZMweoIIlC6rPNQnLjBPIoAVtD1RTMVbGYTSJ
KsJdua1UCtiWT/BOfuzC1vh7I0MYAypi7hw5BHsKJF8Mkt87Dpim0m1T8YrAjCgZ
JKHDEQ==
-----END CERTIFICATE-----
Generated at Tue Jan 23 12:11:37 2024 by rpki-client on console-ams.rpki-client.org