Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/d06efaaac42ac7756805ffe0d263f4825195671a.roa
File:                     d06efaaac42ac7756805ffe0d263f4825195671a.roa (raw, json)
Hash identifier:          ssfvdtA7MV0vM1/4AKwyQx2+jkIa9cWllhIXLbSygOI=
Subject key identifier:   5A:3F:7A:B1:BE:C5:9E:E3:96:96:82:06:6D:B4:91:79:59:D4:D5:F7
Certificate issuer:       /CN=74ceb21261d995f6744c5614710320d1ad4b79f6
Certificate serial:       0C7FA1
Authority key identifier: FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/d06efaaac42ac7756805ffe0d263f4825195671a.roa
Signing time:             Wed 24 Mar 2021 14:34:30 +0000
ROA not before:           Wed 24 Mar 2021 14:34:29 +0000
ROA not after:            Tue 24 Mar 2026 14:34:29 +0000
asID:                     266706
IP address blocks:        45.229.188.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 08 Feb 2024 00:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819105 (0xc7fa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ceb21261d995f6744c5614710320d1ad4b79f6
        Validity
            Not Before: Mar 24 14:34:29 2021 GMT
            Not After : Mar 24 14:34:29 2026 GMT
        Subject: CN=d06efaaac42ac7756805ffe0d263f4825195671a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f8:6e:c9:73:00:3a:a2:f0:65:a8:b0:59:88:
                    46:d6:64:c5:b8:c5:04:19:e2:67:8f:50:07:40:09:
                    d2:9a:1e:e1:1c:09:f2:d3:cb:82:6d:31:1c:18:c0:
                    87:8e:40:a4:c1:37:81:92:89:69:6e:0e:42:18:74:
                    c8:96:59:f8:d8:46:ff:2c:9e:53:06:d3:32:b2:70:
                    ca:71:50:f2:8e:3d:b9:9d:cc:49:a9:e8:c4:ec:29:
                    ef:78:d2:13:5d:dc:b9:a4:d1:73:25:10:7a:c4:04:
                    18:91:5a:75:50:4a:55:cc:92:8f:14:e0:ed:6a:8f:
                    a5:dd:cb:f8:bd:31:05:e8:10:80:e3:2f:54:f0:61:
                    cc:59:5c:32:52:23:9b:03:85:5c:5a:24:d6:40:e1:
                    f2:97:8c:f7:f7:39:06:58:66:06:4a:cb:7d:5d:76:
                    d4:30:47:47:15:6c:1b:ba:67:d2:87:1e:54:60:a9:
                    90:64:b2:4d:9d:ec:e1:18:74:ff:df:cb:63:97:59:
                    d5:3e:f0:da:3d:a9:5d:5c:48:b1:58:0a:4d:5f:02:
                    ef:a1:95:b4:80:22:b7:ef:42:58:62:a0:89:20:5c:
                    db:a6:26:a6:85:fc:d5:31:ad:2f:d6:f1:1e:de:0b:
                    01:d3:49:b8:2a:a2:54:e3:e6:40:51:5f:f0:dc:59:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3F:7A:B1:BE:C5:9E:E3:96:96:82:06:6D:B4:91:79:59:D4:D5:F7
            X509v3 Authority Key Identifier:
                keyid:FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/d06efaaac42ac7756805ffe0d263f4825195671a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/74ceb21261d995f6744c5614710320d1ad4b79f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:6c:ac:7a:82:0b:5b:76:76:6d:d2:ab:61:9c:7d:53:d2:01:
         76:13:f3:df:6a:50:8c:2d:e7:a0:10:d4:63:11:e4:30:0c:17:
         cd:2e:6a:83:41:f8:0e:eb:cf:16:e1:cc:9b:c7:79:7a:76:b4:
         95:62:0d:a2:01:36:97:4a:fe:b7:ad:34:26:ac:de:a4:f3:44:
         66:db:52:e0:0e:e7:9f:39:e4:86:bc:d5:65:ea:b6:f5:32:58:
         91:8d:8e:13:df:02:ed:01:8a:0a:55:ce:2e:28:ae:a5:90:3e:
         34:79:da:be:c8:ac:c0:42:78:9e:3d:6e:9f:d4:e5:4d:e2:61:
         e5:44:1f:1a:2f:af:f9:c8:84:72:96:c1:65:43:d1:9f:26:51:
         2a:6f:5f:ce:bc:81:87:a0:c6:ba:22:44:7b:9e:e6:28:79:c3:
         dd:46:35:dd:5c:1c:24:77:47:4b:c3:6a:ef:6f:77:91:76:1b:
         af:a6:92:f6:5d:ac:a8:d7:06:63:ee:4e:6e:39:d2:68:62:48:
         0c:6d:94:83:a4:d7:e2:98:db:3f:6a:21:00:b3:71:43:d7:7d:
         9d:a4:54:48:b5:d2:00:44:7d:27:e4:eb:d0:2a:de:8e:2f:4c:
         f0:61:6f:42:ab:88:3d:b1:5c:d5:21:8b:e7:85:4f:ee:46:ff:
         4f:9e:6b:7b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDH+hMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc0
Y2ViMjEyNjFkOTk1ZjY3NDRjNTYxNDcxMDMyMGQxYWQ0Yjc5ZjYwHhcNMjEwMzI0
MTQzNDI5WhcNMjYwMzI0MTQzNDI5WjAzMTEwLwYDVQQDEyhkMDZlZmFhYWM0MmFj
Nzc1NjgwNWZmZTBkMjYzZjQ4MjUxOTU2NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6fhuyXMAOqLwZaiwWYhG1mTFuMUEGeJnj1AHQAnSmh7hHAny
08uCbTEcGMCHjkCkwTeBkolpbg5CGHTIlln42Eb/LJ5TBtMysnDKcVDyjj25ncxJ
qejE7CnveNITXdy5pNFzJRB6xAQYkVp1UEpVzJKPFODtao+l3cv4vTEF6BCA4y9U
8GHMWVwyUiObA4VcWiTWQOHyl4z39zkGWGYGSst9XXbUMEdHFWwbumfShx5UYKmQ
ZLJNnezhGHT/38tjl1nVPvDaPaldXEixWApNXwLvoZW0gCK370JYYqCJIFzbpiam
hfzVMa0v1vEe3gsB00m4KqJU4+ZAUV/w3Fk1rwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFo/erG+xZ7jlpaCBm20kXlZ1NX3MB8GA1UdIwQYMBaAFPrlfpHOUkcIqxCy
FoIXqJG4OMDFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzRjZWIy
MTI2MWQ5OTVmNjc0NGM1NjE0NzEwMzIwZDFhZDRiNzlmNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjQ4MTA5NDgtZDJiZS00ZmY3LWE0OWQtOTUxOGYx
NzMyYTVhL2QwNmVmYWFhYzQyYWM3NzU2ODA1ZmZlMGQyNjNmNDgyNTE5NTY3MWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNDgxMDk0OC1kMmJlLTRmZjctYTQ5ZC05NTE4
ZjE3MzJhNWEvNzRjZWIyMTI2MWQ5OTVmNjc0NGM1NjE0NzEwMzIwZDFhZDRiNzlm
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS3lvDANBgkqhkiG9w0BAQsFAAOCAQEAGWyseoILW3Z2bdKr
YZx9U9IBdhPz32pQjC3noBDUYxHkMAwXzS5qg0H4DuvPFuHMm8d5ena0lWINogE2
l0r+t600JqzepPNEZttS4A7nnznkhrzVZeq29TJYkY2OE98C7QGKClXOLiiupZA+
NHnavsiswEJ4nj1un9TlTeJh5UQfGi+v+ciEcpbBZUPRnyZRKm9fzryBh6DGuiJE
e57mKHnD3UY13VwcJHdHS8Nq7293kXYbr6aS9l2sqNcGY+5ObjnSaGJIDG2Ug6TX
4pjbP2ohALNxQ9d9naRUSLXSAER9J+Tr0Creji9M8GFvQquIPbFc1SGL54VP7kb/
T55rew==
-----END CERTIFICATE-----
Generated at Thu Feb 8 02:05:37 2024 by rpki-client on console-fra.rpki-client.org