Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/ca3223b23aaef13520603f97362ee7e6d35bc1cc.roa
File:                     ca3223b23aaef13520603f97362ee7e6d35bc1cc.roa (raw, json)
Hash identifier:          Jz092DTYffIjTWpxdlyLDggQ0UfpBXUWlMoQxB6JDIs=
Subject key identifier:   F1:3F:D1:38:5F:A3:6D:7D:9C:CF:23:11:67:AE:3E:3D:2B:E7:59:BE
Certificate issuer:       /CN=49e352d14129558da17025255f13358c2326ee25
Certificate serial:       0F1287
Authority key identifier: 4E:B4:7D:BC:51:1F:32:83:F0:43:95:DB:EC:91:DE:21:A7:A1:90:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49e352d14129558da17025255f13358c2326ee25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/ca3223b23aaef13520603f97362ee7e6d35bc1cc.roa
Signing time:             Wed 21 Jul 2021 18:03:33 +0000
ROA not before:           Wed 21 Jul 2021 18:03:32 +0000
ROA not after:            Tue 21 Jul 2026 18:03:32 +0000
asID:                     267905
IP address blocks:        45.178.48.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 26 Jan 2024 20:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987783 (0xf1287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e352d14129558da17025255f13358c2326ee25
        Validity
            Not Before: Jul 21 18:03:32 2021 GMT
            Not After : Jul 21 18:03:32 2026 GMT
        Subject: CN=ca3223b23aaef13520603f97362ee7e6d35bc1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f2:79:d6:8f:d6:69:ca:66:7a:34:de:10:b9:
                    44:e9:70:b8:8a:92:d8:1d:f0:34:1c:f6:50:0f:dd:
                    73:c4:91:eb:ce:00:b3:d8:46:8f:ca:01:dc:2d:be:
                    40:1a:ff:31:6d:03:19:74:04:55:ee:f4:14:4e:5d:
                    5c:bd:9e:ff:d3:c4:51:c1:0f:e5:0b:2f:ec:2b:c1:
                    71:6f:76:60:ff:68:5e:91:90:b9:42:d7:34:58:9b:
                    14:b5:68:e3:97:43:44:5f:82:ad:63:d2:22:36:f7:
                    ec:48:fa:4d:aa:f5:c9:40:ab:58:93:fe:ed:eb:ed:
                    b6:7b:ae:4f:89:bc:51:f4:c6:14:33:14:6e:70:46:
                    ea:05:b8:1b:c6:a9:a0:48:19:26:3b:97:cb:69:f3:
                    03:0a:c1:90:dd:16:39:2b:cc:b2:20:58:63:fd:86:
                    a5:6a:78:ba:d9:93:90:b2:9c:3a:06:3c:56:b5:f8:
                    95:44:05:4f:95:25:4e:51:00:43:b0:76:ff:5d:92:
                    ba:b9:7f:94:8f:8f:53:1f:ab:9f:9b:70:62:f0:df:
                    fb:50:4a:7f:8b:d4:09:ea:0d:6d:0f:d2:2b:2e:d6:
                    89:97:05:0a:a9:3a:8a:27:b2:6c:23:f1:cf:0d:53:
                    43:f5:94:9b:78:b2:5f:de:e8:63:86:1f:5a:1f:ac:
                    97:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3F:D1:38:5F:A3:6D:7D:9C:CF:23:11:67:AE:3E:3D:2B:E7:59:BE
            X509v3 Authority Key Identifier:
                keyid:4E:B4:7D:BC:51:1F:32:83:F0:43:95:DB:EC:91:DE:21:A7:A1:90:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49e352d14129558da17025255f13358c2326ee25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/ca3223b23aaef13520603f97362ee7e6d35bc1cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/49e352d14129558da17025255f13358c2326ee25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:ea:3c:1a:f5:3a:4c:39:1c:11:07:50:65:7d:eb:f1:6c:f4:
         e2:cf:87:06:4c:7f:b3:19:71:1f:63:0a:ad:7d:74:42:50:83:
         2b:86:9c:6c:a4:fb:54:d7:74:f7:8e:24:02:d8:ea:fe:24:cb:
         43:ec:17:ec:df:28:97:ef:ce:54:69:fa:4f:9c:58:bd:84:5c:
         7d:c9:89:d0:ce:c4:18:1e:e9:2b:66:80:19:e6:27:4f:ff:51:
         fd:f0:8b:16:c8:2c:02:a1:2b:9c:22:fc:be:d3:6a:75:f1:66:
         6c:b4:07:d8:08:0a:8b:94:92:bb:d7:8e:8c:35:c3:4e:3b:10:
         72:b2:04:39:08:2b:5b:35:fa:b9:c8:23:06:aa:4d:aa:e0:09:
         d3:92:db:80:80:11:1e:7b:ef:d5:53:70:e5:ab:be:a6:81:88:
         ee:23:44:b7:d3:25:b6:08:74:b9:d1:f3:79:35:7a:47:cc:b2:
         45:0b:27:90:e7:18:a7:34:6a:9b:f3:5f:90:bd:fd:4e:85:76:
         ee:ec:f0:e1:1d:dc:28:1b:51:80:ba:2e:ee:4e:03:2e:e1:8d:
         8a:ed:19:7b:94:ff:d3:a2:e4:68:03:0d:98:1d:a3:9e:bf:71:
         5e:47:a9:11:4f:9b:d2:14:22:c8:cd:28:9d:7d:2d:da:13:0d:
         39:ec:8b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 23:50:00 2024 by rpki-client on console-fra.rpki-client.org