Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/f3ef7b6843f09286156cab2baa97c9a10d0aa850.roa
File:                     f3ef7b6843f09286156cab2baa97c9a10d0aa850.roa (raw, json)
Hash identifier:          FMJil7IT2A4D7J0anY67REFcOaupSPpR45BoxwLcTUc=
Subject key identifier:   A4:86:37:80:F0:2D:5A:93:C8:0B:23:49:5A:17:1A:62:98:7B:B3:AF
Certificate issuer:       /CN=74ceb21261d995f6744c5614710320d1ad4b79f6
Certificate serial:       26DB54
Authority key identifier: FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/f3ef7b6843f09286156cab2baa97c9a10d0aa850.roa
Signing time:             Thu 08 Feb 2024 00:31:40 +0000
ROA not before:           Thu 08 Feb 2024 00:31:36 +0000
ROA not after:            Sun 08 Feb 2026 00:31:36 +0000
asID:                     52411
IP address blocks:        45.229.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Feb 2024 15:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2546516 (0x26db54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ceb21261d995f6744c5614710320d1ad4b79f6
        Validity
            Not Before: Feb  8 00:31:36 2024 GMT
            Not After : Feb  8 00:31:36 2026 GMT
        Subject: CN=f3ef7b6843f09286156cab2baa97c9a10d0aa850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:86:04:88:d2:2f:56:db:9d:f1:07:71:89:
                    36:45:64:08:95:8d:88:e0:ce:4f:96:f4:a0:fb:7d:
                    6c:d4:f1:b3:fc:9d:2d:7b:75:69:54:20:28:f0:ab:
                    f1:dd:8a:7c:0a:e1:35:65:8a:16:20:09:87:4d:6e:
                    e0:f2:b4:c1:20:f6:b2:52:7a:a8:be:40:44:e9:e0:
                    58:eb:8e:ec:5d:f2:b6:77:4a:16:1c:5d:fc:7b:1d:
                    35:85:94:ae:fe:df:25:b8:66:bd:16:e0:43:c3:9d:
                    54:d8:84:00:0a:56:4e:12:ea:c4:90:bd:2d:42:06:
                    4e:21:9d:89:93:03:7a:21:57:71:d5:72:8d:20:37:
                    e4:eb:c8:37:7e:e5:fc:8f:59:49:48:1e:89:02:11:
                    30:cc:b1:36:ad:2f:76:57:f5:ae:a3:fa:49:83:3a:
                    ff:64:97:d6:3b:cb:08:88:6d:7e:43:5d:e7:0a:1a:
                    2b:40:d8:b1:7a:6c:15:67:fa:bf:f8:2a:4a:1f:17:
                    a4:0b:31:6c:23:08:a1:36:54:e5:7b:d7:e5:5e:9c:
                    e9:36:2e:bb:0e:90:ee:9f:c4:96:02:d3:2d:76:45:
                    16:71:03:99:03:a5:0b:5d:44:fa:1c:df:b1:98:dd:
                    37:f8:67:30:0d:97:56:dc:fe:db:18:df:df:ba:55:
                    2f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:86:37:80:F0:2D:5A:93:C8:0B:23:49:5A:17:1A:62:98:7B:B3:AF
            X509v3 Authority Key Identifier:
                keyid:FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/f3ef7b6843f09286156cab2baa97c9a10d0aa850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/74ceb21261d995f6744c5614710320d1ad4b79f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:14:4d:7c:4c:e2:c0:01:9d:87:f4:9d:e2:2e:ca:88:dd:e8:
         ff:dc:1a:24:df:50:7e:af:be:59:82:96:23:f9:f3:f5:d4:5d:
         6d:59:fc:a1:fa:42:cd:fd:8e:03:e9:21:26:64:04:f1:34:9d:
         36:3e:29:7c:bf:ec:10:60:da:c7:13:73:64:f9:23:2a:1e:0a:
         c4:c2:ed:e3:b4:e9:87:93:29:35:8b:50:3c:f2:60:32:e5:ed:
         a9:29:3e:fc:58:a1:e2:d7:7a:00:e6:f9:ed:ba:8a:2b:30:7d:
         6d:47:b3:de:8c:b0:b6:23:ff:3e:57:a4:92:c5:93:17:ce:d9:
         eb:97:10:f3:dc:81:e0:39:30:98:74:08:ed:31:d5:74:25:9b:
         87:ba:fb:db:58:c5:3a:f6:99:00:fe:d6:9a:83:4c:ea:96:eb:
         7d:72:75:11:c8:55:76:c4:6d:ed:46:d5:f3:81:c9:83:b9:d5:
         9a:77:72:82:a2:4a:db:3d:d4:9c:c8:fd:c1:bd:81:9f:92:3c:
         94:29:0e:53:fa:24:d6:44:6e:ea:e4:b2:5e:7b:6c:16:10:55:
         9b:22:e8:6b:6f:06:82:e4:76:13:6f:c8:51:57:b8:18:b8:6e:
         8e:7e:86:c5:fe:02:2d:7a:e8:e1:6d:a5:66:08:a0:e8:fd:ef:
         0d:ee:76:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 19:56:11 2024 by rpki-client on console-fra.rpki-client.org