Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/1ed36d8547f70bbd1909d4a3dd33ebf8ecd4cb2f.roa
File:                     1ed36d8547f70bbd1909d4a3dd33ebf8ecd4cb2f.roa (raw, json)
Hash identifier:          4eiKRfOWxH0zxF/zeiUBOyYeQwTrOBXyW+OLkgm7Hbc=
Subject key identifier:   FC:DF:A9:14:29:3A:C8:1F:9C:E0:70:F9:91:7F:3F:0D:EB:CB:1A:87
Certificate issuer:       /CN=74ceb21261d995f6744c5614710320d1ad4b79f6
Certificate serial:       0C7F88
Authority key identifier: FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/1ed36d8547f70bbd1909d4a3dd33ebf8ecd4cb2f.roa
Signing time:             Wed 24 Mar 2021 14:34:30 +0000
ROA not before:           Wed 24 Mar 2021 14:34:29 +0000
ROA not after:            Tue 24 Mar 2026 14:34:29 +0000
asID:                     266706
IP address blocks:        45.229.188.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 08 Feb 2024 00:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819080 (0xc7f88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ceb21261d995f6744c5614710320d1ad4b79f6
        Validity
            Not Before: Mar 24 14:34:29 2021 GMT
            Not After : Mar 24 14:34:29 2026 GMT
        Subject: CN=1ed36d8547f70bbd1909d4a3dd33ebf8ecd4cb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fd:7e:fd:35:f5:b2:e6:e6:72:3e:7b:56:9d:
                    a0:c3:19:fb:98:30:a7:91:ff:5a:c3:80:78:63:a9:
                    02:0a:46:5c:f3:15:2f:84:dc:6d:0c:9f:2b:50:a9:
                    f7:eb:5d:48:cb:e6:69:c9:54:19:02:90:6d:1e:99:
                    ee:b0:86:66:5c:05:b7:14:f0:03:2d:58:91:d0:80:
                    90:a6:9d:a9:41:33:d2:be:3e:45:03:e3:a8:39:ef:
                    3a:f4:67:36:af:bc:f9:e8:7d:4a:7c:66:00:0c:21:
                    31:e0:60:01:ae:af:1a:38:3c:5d:12:eb:a8:6f:65:
                    1e:e2:90:bc:58:e4:ff:18:b9:7a:64:78:ba:b5:2f:
                    28:76:97:42:68:4d:5a:6b:ba:4b:17:9b:09:7e:bb:
                    87:a5:fe:a9:77:d8:bf:57:f0:c0:3e:3e:52:0d:9f:
                    7a:a6:18:8c:5a:c6:a9:2b:d3:6d:14:79:17:0c:bf:
                    f2:ae:48:06:36:de:ee:a4:6c:f3:69:e0:d2:e9:7a:
                    0d:33:aa:46:0e:d5:46:7e:81:f4:5d:cc:0d:24:cc:
                    a8:5f:b8:77:d8:ce:59:1d:ab:c5:7c:b1:e7:94:c3:
                    c5:f7:4c:b7:a9:65:a4:df:18:f1:89:0c:51:f9:0a:
                    18:33:8d:a6:1d:a4:3a:3a:0a:3a:97:3f:ce:4e:f0:
                    b4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DF:A9:14:29:3A:C8:1F:9C:E0:70:F9:91:7F:3F:0D:EB:CB:1A:87
            X509v3 Authority Key Identifier:
                keyid:FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/1ed36d8547f70bbd1909d4a3dd33ebf8ecd4cb2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/74ceb21261d995f6744c5614710320d1ad4b79f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:4d:d8:a2:5c:f9:d4:ad:68:d4:5f:90:6a:78:a9:12:4b:7d:
         c3:b4:af:22:5a:3e:d5:50:57:d2:0e:41:7c:8d:b0:e1:f2:42:
         06:e8:d3:de:71:17:59:36:93:99:39:31:bd:94:53:f3:81:ea:
         47:32:07:2a:6f:fc:32:cd:0b:97:bb:b7:c4:52:18:65:b3:28:
         e1:b5:b1:f1:a1:37:2d:0c:20:ad:c1:36:f9:27:86:d7:c2:21:
         f3:bb:3f:58:1a:14:fe:91:99:7f:46:7b:6a:7a:e7:68:cb:61:
         65:a8:22:92:e3:4e:2c:96:fb:18:67:29:2a:e1:a5:67:07:05:
         3b:cd:bb:45:84:33:9d:b5:9c:ec:9d:b7:33:a1:8a:0a:a5:9d:
         bc:00:8f:d2:ec:de:73:75:5e:44:c5:83:64:e5:b5:49:95:39:
         0a:49:87:c2:d4:b2:cc:c1:a8:f2:fb:56:06:33:dc:7a:11:fe:
         fe:33:e4:c0:f1:36:42:7d:f3:4a:02:07:8f:1f:6c:55:35:5f:
         4f:d3:a8:fa:73:54:b7:2e:bf:e2:b5:b3:93:9d:e8:f6:39:75:
         d6:1e:c9:3f:40:82:f9:a9:81:55:42:28:71:a6:ff:22:44:2c:
         17:df:d9:db:6e:ad:96:b0:e5:af:b9:1d:45:33:48:17:8c:97:
         3a:b2:d1:1c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDH+IMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc0
Y2ViMjEyNjFkOTk1ZjY3NDRjNTYxNDcxMDMyMGQxYWQ0Yjc5ZjYwHhcNMjEwMzI0
MTQzNDI5WhcNMjYwMzI0MTQzNDI5WjAzMTEwLwYDVQQDEygxZWQzNmQ4NTQ3Zjcw
YmJkMTkwOWQ0YTNkZDMzZWJmOGVjZDRjYjJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlv1+/TX1submcj57Vp2gwxn7mDCnkf9aw4B4Y6kCCkZc8xUv
hNxtDJ8rUKn3611Iy+ZpyVQZApBtHpnusIZmXAW3FPADLViR0ICQpp2pQTPSvj5F
A+OoOe869Gc2r7z56H1KfGYADCEx4GABrq8aODxdEuuob2Ue4pC8WOT/GLl6ZHi6
tS8odpdCaE1aa7pLF5sJfruHpf6pd9i/V/DAPj5SDZ96phiMWsapK9NtFHkXDL/y
rkgGNt7upGzzaeDS6XoNM6pGDtVGfoH0XcwNJMyoX7h32M5ZHavFfLHnlMPF90y3
qWWk3xjxiQxR+QoYM42mHaQ6Ogo6lz/OTvC0nQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPzfqRQpOsgfnOBw+ZF/Pw3ryxqHMB8GA1UdIwQYMBaAFPrlfpHOUkcIqxCy
FoIXqJG4OMDFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzRjZWIy
MTI2MWQ5OTVmNjc0NGM1NjE0NzEwMzIwZDFhZDRiNzlmNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjQ4MTA5NDgtZDJiZS00ZmY3LWE0OWQtOTUxOGYx
NzMyYTVhLzFlZDM2ZDg1NDdmNzBiYmQxOTA5ZDRhM2RkMzNlYmY4ZWNkNGNiMmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNDgxMDk0OC1kMmJlLTRmZjctYTQ5ZC05NTE4
ZjE3MzJhNWEvNzRjZWIyMTI2MWQ5OTVmNjc0NGM1NjE0NzEwMzIwZDFhZDRiNzlm
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS3lvDANBgkqhkiG9w0BAQsFAAOCAQEAcE3Yolz51K1o1F+Q
anipEkt9w7SvIlo+1VBX0g5BfI2w4fJCBujT3nEXWTaTmTkxvZRT84HqRzIHKm/8
Ms0Ll7u3xFIYZbMo4bWx8aE3LQwgrcE2+SeG18Ih87s/WBoU/pGZf0Z7anrnaMth
ZagikuNOLJb7GGcpKuGlZwcFO827RYQznbWc7J23M6GKCqWdvACP0uzec3VeRMWD
ZOW1SZU5CkmHwtSyzMGo8vtWBjPcehH+/jPkwPE2Qn3zSgIHjx9sVTVfT9Oo+nNU
ty6/4rWzk53o9jl11h7JP0CC+amBVUIocab/IkQsF9/Z226tlrDlr7kdRTNIF4yX
OrLRHA==
-----END CERTIFICATE-----
Generated at Thu Feb 8 02:05:35 2024 by rpki-client on console-fra.rpki-client.org