Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93fc7048-6005-4494-9d5f-08c026a9fc9c/f4cccab7598cbb9d92cbd3b01a8b42a19e36f9d2.roa
File:                     f4cccab7598cbb9d92cbd3b01a8b42a19e36f9d2.roa (raw, json)
Hash identifier:          ICjvFyCk3b/1WZI0lFhwwDrkQWLRRWIdWLveSJK8DPw=
Subject key identifier:   6D:E5:0A:B1:5E:60:A9:F4:38:83:EF:86:5F:E1:8A:C8:E6:76:50:DE
Certificate issuer:       /CN=fbb725da2eefb2563dff5aa4b39678675020bce6
Certificate serial:       0D4BBD
Authority key identifier: 2E:4D:5C:20:16:58:92:DE:B0:02:4C:A0:E4:D8:A5:AD:FD:68:35:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbb725da2eefb2563dff5aa4b39678675020bce6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93fc7048-6005-4494-9d5f-08c026a9fc9c/f4cccab7598cbb9d92cbd3b01a8b42a19e36f9d2.roa
Signing time:             Wed 24 Mar 2021 14:42:01 +0000
ROA not before:           Wed 24 Mar 2021 14:42:01 +0000
ROA not after:            Tue 24 Mar 2026 14:42:01 +0000
asID:                     265684
IP address blocks:        45.5.116.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 00:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871357 (0xd4bbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb725da2eefb2563dff5aa4b39678675020bce6
        Validity
            Not Before: Mar 24 14:42:01 2021 GMT
            Not After : Mar 24 14:42:01 2026 GMT
        Subject: CN=f4cccab7598cbb9d92cbd3b01a8b42a19e36f9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4b:f7:8b:65:7b:96:48:56:f4:20:97:fd:f2:
                    0e:c2:b9:e7:18:c2:d9:a8:77:dd:e2:00:56:bc:92:
                    af:72:6f:35:ab:cc:e2:60:bb:17:9d:77:8c:10:b3:
                    26:5c:b6:c8:7f:93:c5:c9:71:bf:d6:dd:61:b0:00:
                    58:df:7e:77:93:45:f0:2c:2c:b0:f0:ed:87:2f:2e:
                    42:61:ab:62:f5:a0:f9:7d:f7:f2:60:d7:6a:d9:bf:
                    e4:28:f7:0d:ef:58:5a:d8:29:4c:35:3e:1f:95:81:
                    d3:87:53:58:b7:c6:f7:6a:cb:cb:88:7c:f6:81:05:
                    a5:09:de:dc:cf:b1:44:26:ae:42:5b:75:96:60:1b:
                    2d:75:95:49:d8:a4:7e:ff:5a:68:92:04:f5:39:fd:
                    00:0e:39:c5:c8:15:4c:15:c8:51:b6:c6:fe:ad:53:
                    fc:40:c0:dd:27:d7:10:0c:fb:d3:9b:85:31:e9:6c:
                    f4:e4:33:dd:6b:75:f8:9c:f3:e2:d2:db:ad:97:4d:
                    6a:95:ab:75:d9:2e:35:6e:98:2c:9d:df:4f:6c:71:
                    83:bb:28:4c:f8:fc:df:02:35:5a:ba:78:e6:fe:ac:
                    63:50:e5:8f:67:57:f2:40:54:87:29:dc:c4:52:57:
                    b9:fe:2c:48:02:1e:0b:2b:cc:72:4f:14:ca:77:8d:
                    30:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E5:0A:B1:5E:60:A9:F4:38:83:EF:86:5F:E1:8A:C8:E6:76:50:DE
            X509v3 Authority Key Identifier:
                keyid:2E:4D:5C:20:16:58:92:DE:B0:02:4C:A0:E4:D8:A5:AD:FD:68:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbb725da2eefb2563dff5aa4b39678675020bce6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93fc7048-6005-4494-9d5f-08c026a9fc9c/f4cccab7598cbb9d92cbd3b01a8b42a19e36f9d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93fc7048-6005-4494-9d5f-08c026a9fc9c/fbb725da2eefb2563dff5aa4b39678675020bce6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:e3:13:3d:7e:fb:7b:82:61:08:f6:42:dd:fe:5b:2e:e3:16:
         0b:82:67:91:44:4e:82:19:ab:f9:2e:30:b9:91:aa:ee:00:2a:
         1a:c8:a2:61:52:25:7e:b4:d4:e3:49:a8:2a:94:ae:57:33:1f:
         70:06:18:09:9f:ab:81:3b:70:48:ba:bf:11:e2:33:f6:40:e2:
         91:d2:9b:99:a4:f6:38:a9:14:d7:a7:81:f0:a0:9a:7b:bf:d4:
         b8:2f:bc:b3:14:09:64:ec:3d:cc:51:79:94:f9:e4:5c:a4:bb:
         2d:79:b3:84:5f:6f:48:45:a6:5f:a7:cf:38:a4:33:9b:ad:16:
         9c:f9:ad:5c:4d:27:ff:ce:56:2c:b8:84:91:90:6b:1d:24:9e:
         d2:c6:11:8f:49:e1:75:f2:d7:24:58:b6:bb:fb:5a:d7:32:78:
         58:0d:28:56:29:94:d7:df:c3:29:36:6d:32:f0:00:4b:dd:9a:
         d8:4a:0f:1e:5e:ae:62:e9:58:87:92:0c:24:34:a8:8b:ff:47:
         21:25:1e:11:c5:31:62:c5:14:a1:ff:40:52:4a:fc:52:76:52:
         77:b9:19:a7:a4:78:ad:7f:aa:72:ec:38:0a:65:69:55:84:e3:
         76:b8:5d:78:9d:d7:ea:3c:8a:3d:2e:e0:74:5d:51:68:ba:66:
         5d:35:db:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 04:44:17 2024 by rpki-client on console-ams.rpki-client.org