Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/99b8c5ea1733ec7fd9eb9a29c88d0857cde23c6d.roa
File:                     99b8c5ea1733ec7fd9eb9a29c88d0857cde23c6d.roa (raw, json)
Hash identifier:          8yLg7QbRLYmULfl3xc+dzm9yLbff0GNp6u7LXYzxq9c=
Subject key identifier:   5E:DC:D2:36:96:47:46:FF:12:0D:36:32:DF:69:3C:D7:B0:69:63:A6
Certificate issuer:       /CN=49e352d14129558da17025255f13358c2326ee25
Certificate serial:       2108B8
Authority key identifier: 4E:B4:7D:BC:51:1F:32:83:F0:43:95:DB:EC:91:DE:21:A7:A1:90:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49e352d14129558da17025255f13358c2326ee25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/99b8c5ea1733ec7fd9eb9a29c88d0857cde23c6d.roa
Signing time:             Thu 20 Jul 2023 08:30:00 +0000
ROA not before:           Wed 19 Jul 2023 08:30:00 +0000
ROA not after:            Fri 18 Jul 2025 08:30:00 +0000
asID:                     267905
IP address blocks:        45.178.48.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 26 Jan 2024 20:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2164920 (0x2108b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e352d14129558da17025255f13358c2326ee25
        Validity
            Not Before: Jul 19 08:30:00 2023 GMT
            Not After : Jul 18 08:30:00 2025 GMT
        Subject: CN=99b8c5ea1733ec7fd9eb9a29c88d0857cde23c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8b:ab:6d:d5:3b:aa:6c:34:50:c8:b4:88:43:
                    a7:51:d7:90:69:a5:e1:4a:63:2e:d1:ca:88:d6:79:
                    50:4b:19:63:ec:c2:1e:33:59:e2:f2:53:61:b8:05:
                    24:af:e4:3f:04:84:e0:cb:fa:90:48:28:7c:fa:2b:
                    88:23:24:28:53:d8:77:e5:f2:64:f2:92:c6:5b:60:
                    79:c2:21:df:e0:55:a5:52:59:c7:47:f2:4d:71:37:
                    a8:05:8c:c7:4a:42:02:f3:b7:c1:fc:d4:3f:49:04:
                    db:24:72:26:56:cd:62:a3:8d:1d:04:49:d6:10:ac:
                    f6:e2:b0:c8:2b:18:d0:17:f8:7d:75:a7:22:e6:1c:
                    23:0c:96:13:86:15:49:f2:e3:ab:bb:65:98:a0:09:
                    47:0f:a0:26:0b:50:a1:28:47:8d:a2:b2:e7:8f:1d:
                    5a:5a:fd:c3:fe:5a:53:66:ce:fb:59:27:da:ac:ed:
                    be:67:15:74:7e:e0:f4:39:98:ec:08:c3:a7:46:22:
                    99:d9:6b:1c:9d:e2:2c:9d:b1:68:0a:eb:e1:fb:e0:
                    71:7a:a5:b9:3f:8f:d6:ad:ad:b7:7d:56:8d:4a:c2:
                    8f:19:21:b2:e8:c1:e6:cf:31:e0:71:fb:4a:a1:90:
                    75:0f:ee:a0:9e:b4:28:dc:d0:7c:63:09:ee:96:be:
                    8a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DC:D2:36:96:47:46:FF:12:0D:36:32:DF:69:3C:D7:B0:69:63:A6
            X509v3 Authority Key Identifier:
                keyid:4E:B4:7D:BC:51:1F:32:83:F0:43:95:DB:EC:91:DE:21:A7:A1:90:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49e352d14129558da17025255f13358c2326ee25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/99b8c5ea1733ec7fd9eb9a29c88d0857cde23c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/49e352d14129558da17025255f13358c2326ee25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:7e:96:68:36:ae:7a:d1:95:01:41:aa:90:c6:d3:f4:d9:f9:
         e2:b3:0d:ab:cc:c3:d4:a8:21:fc:9c:d3:6c:c4:5d:c3:0d:60:
         99:63:3c:d3:4e:6b:02:b7:cf:0c:5f:21:cc:a6:5a:e4:9f:54:
         d9:06:50:11:ca:7d:3d:ad:40:64:c7:e9:d9:41:08:c2:0f:78:
         df:a4:d3:33:66:60:71:6a:27:6b:05:57:7e:02:11:9e:55:47:
         3d:f8:15:0b:74:cd:3b:8f:06:24:8e:67:c5:25:15:32:7a:55:
         32:ee:32:04:c9:b2:70:bb:cd:0f:d8:e6:12:e7:0a:a8:aa:52:
         51:db:dc:d0:87:d4:1b:98:ff:ac:5d:56:ff:a3:85:93:c2:3c:
         c3:a6:65:68:cb:6b:74:71:c4:95:0f:db:bc:d0:8b:b0:68:17:
         dd:c9:f8:63:1b:4b:dd:43:14:8e:2e:01:81:ad:17:72:87:0e:
         d4:5f:a6:de:77:78:cf:83:d0:a2:b4:a9:f9:46:bf:43:d2:f2:
         08:ad:aa:da:9a:f9:4d:0f:7f:32:2f:c8:70:69:ec:82:30:c1:
         63:33:98:ea:bd:55:d8:3b:88:f1:cd:e4:d6:46:c7:15:12:31:
         cc:30:7c:9d:45:2d:c7:d9:bd:c0:8f:29:92:64:ad:1e:1f:a3:
         6d:38:c7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 23:50:00 2024 by rpki-client on console-fra.rpki-client.org