Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a683ce76-7b88-4006-97d3-0e0161d2b770/d4d3f503e14a117bca02cf63094c60606296a4ac.roa
File:                     d4d3f503e14a117bca02cf63094c60606296a4ac.roa (raw, json)
Hash identifier:          2zxSSkN1uGLfBS/sRET3K4YIVZjJf/BLI7tJHkHssnU=
Subject key identifier:   F1:37:C0:A5:D0:C6:2B:E3:46:B1:D7:B6:13:F3:C8:37:63:2D:DB:6F
Certificate issuer:       /CN=d82ac6a0ecc0c89dee177ba7da0cc43a5d15ca01
Certificate serial:       0B9763
Authority key identifier: AE:AB:E0:6C:E6:4D:71:BD:6D:CC:D0:35:5F:E5:A3:3A:E5:CB:98:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d82ac6a0ecc0c89dee177ba7da0cc43a5d15ca01.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a683ce76-7b88-4006-97d3-0e0161d2b770/d4d3f503e14a117bca02cf63094c60606296a4ac.roa
Signing time:             Fri 17 Sep 2021 18:21:52 +0000
ROA not before:           Fri 17 Sep 2021 03:00:00 +0000
ROA not after:            Sat 17 Sep 2033 03:00:00 +0000
asID:                     265638
IP address blocks:        170.246.40.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 28 Feb 2024 11:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759651 (0xb9763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d82ac6a0ecc0c89dee177ba7da0cc43a5d15ca01
        Validity
            Not Before: Sep 17 03:00:00 2021 GMT
            Not After : Sep 17 03:00:00 2033 GMT
        Subject: CN=d4d3f503e14a117bca02cf63094c60606296a4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f4:6a:fe:dc:55:36:e4:f2:15:f8:58:98:df:
                    68:4b:7a:47:cd:46:b0:b0:11:c8:04:7f:0a:42:22:
                    c4:90:8d:19:d3:9b:37:8e:4b:2a:1a:3b:4c:3b:1f:
                    0c:27:a0:b7:39:ee:b5:a0:ed:71:12:4d:a5:35:1b:
                    7e:f0:84:b2:6a:a8:18:24:9c:7b:2f:36:3e:12:9e:
                    37:20:60:05:2d:00:ff:61:90:71:5b:9e:d2:f7:0b:
                    6f:3d:63:23:29:54:91:87:0e:4a:81:ab:51:d8:df:
                    bb:a5:6d:39:9c:e1:ad:2f:2d:50:cb:02:7c:75:c9:
                    0f:bb:f1:51:60:d6:fb:2a:5e:99:e8:4d:d7:bc:b6:
                    7a:79:b4:a3:5e:12:44:d5:49:a9:6a:3d:da:32:4d:
                    9e:1d:07:0e:d3:e9:e2:5b:fa:36:aa:7b:a1:7d:7d:
                    ab:94:5b:80:a9:70:de:c7:09:56:0b:a4:0e:70:e0:
                    71:fd:d8:f7:bb:ce:4b:8c:f9:4c:7e:58:c5:b1:cc:
                    c2:d7:f8:47:f7:00:30:bc:2d:2a:58:27:e8:d5:00:
                    1e:ad:33:24:d7:d0:c9:5d:1d:4e:5e:97:0a:22:aa:
                    46:dd:ef:97:dc:ef:79:46:14:47:28:4d:ea:66:6b:
                    da:99:46:d8:cc:ec:99:d8:48:1e:13:15:88:f4:f1:
                    f1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:37:C0:A5:D0:C6:2B:E3:46:B1:D7:B6:13:F3:C8:37:63:2D:DB:6F
            X509v3 Authority Key Identifier:
                keyid:AE:AB:E0:6C:E6:4D:71:BD:6D:CC:D0:35:5F:E5:A3:3A:E5:CB:98:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d82ac6a0ecc0c89dee177ba7da0cc43a5d15ca01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a683ce76-7b88-4006-97d3-0e0161d2b770/d4d3f503e14a117bca02cf63094c60606296a4ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a683ce76-7b88-4006-97d3-0e0161d2b770/d82ac6a0ecc0c89dee177ba7da0cc43a5d15ca01.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:a0:71:c3:c2:0b:7b:45:64:9d:d8:b9:0d:96:5d:9c:16:f7:
         ff:e0:a1:97:f6:4b:99:96:35:43:36:a8:55:86:56:be:56:bd:
         ed:ed:91:3a:7c:d5:b1:45:63:ab:a8:2c:8b:69:8e:01:33:28:
         f4:5c:92:4f:f2:77:f5:a7:77:39:aa:0c:65:ce:85:5b:33:c7:
         7c:25:4d:ba:a4:5a:54:74:0d:3c:01:2f:4d:24:61:5e:47:07:
         b4:8a:32:72:3c:6d:33:a7:86:d6:fb:ce:f7:1b:d2:37:d6:25:
         81:69:e4:ef:5c:8d:93:51:70:b7:3a:87:5a:02:c0:78:c8:ea:
         44:69:3a:33:7d:96:fd:78:84:60:89:7c:7d:da:f1:bf:b5:78:
         e8:1c:05:b0:e7:f3:76:7a:ed:a4:6a:28:dd:b6:29:30:a1:ba:
         db:90:a3:14:55:2e:cc:bd:d3:6e:7c:ea:36:d2:5d:65:08:f7:
         c7:58:ba:cd:ac:57:8e:01:6e:55:5b:b2:16:d1:c9:81:bb:c7:
         37:91:9e:ee:ad:71:02:65:3f:cd:29:f6:d7:a9:36:23:ad:12:
         42:c8:4e:e7:6c:00:28:9c:d2:68:85:de:e7:57:bd:34:1b:2b:
         d2:80:70:1f:81:e3:b1:7a:84:7e:3d:e1:dc:bd:f1:6b:6a:af:
         2d:83:a5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 14:31:06 2024 by rpki-client on console-fra.rpki-client.org