Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/a1880d7492d2ac477a5a5da5511f685d4652a72f.roa
File:                     a1880d7492d2ac477a5a5da5511f685d4652a72f.roa (raw, json)
Hash identifier:          rdac0RvmsGW1WhwyN+CJUp9cCwjAzKIHrf5wZJSg48s=
Subject key identifier:   5C:AC:B8:E9:B7:9B:4E:47:69:50:EB:CB:AA:DD:9A:5C:C5:C6:F4:17
Certificate issuer:       /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial:       11B30E
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/a1880d7492d2ac477a5a5da5511f685d4652a72f.roa
Signing time:             Fri 30 Jun 2023 17:33:39 +0000
ROA not before:           Thu 29 Jun 2023 17:33:34 +0000
ROA not after:            Fri 30 Jun 2028 17:33:34 +0000
asID:                     272110
IP address blocks:        200.26.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159950 (0x11b30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
        Validity
            Not Before: Jun 29 17:33:34 2023 GMT
            Not After : Jun 30 17:33:34 2028 GMT
        Subject: CN=a1880d7492d2ac477a5a5da5511f685d4652a72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:21:9f:2a:83:ca:6d:80:2e:a3:e7:00:28:
                    9b:4f:30:f9:d0:b9:de:7f:c2:f9:ab:e0:54:2d:54:
                    f2:26:c1:6e:d3:79:66:4f:ff:5b:e7:7b:4e:fe:bd:
                    1c:11:41:cc:8e:75:e4:f1:14:8a:6d:52:0a:76:08:
                    a7:0a:bb:fb:8d:aa:23:ec:c7:30:85:f9:4d:98:29:
                    ac:3d:0b:38:3d:d8:06:57:c1:04:43:64:ff:a0:90:
                    02:0d:53:54:4a:33:a4:37:30:17:0d:c9:f9:41:54:
                    a3:2f:6b:a1:12:f6:29:14:3d:52:cf:11:42:d0:95:
                    96:c7:60:f8:e4:11:49:0b:20:9e:21:12:75:69:7e:
                    2f:c5:d3:f4:1e:40:58:b6:57:1a:cd:27:da:4e:74:
                    c2:75:e3:ce:a7:ed:e8:09:6e:8a:e2:cd:ec:c1:0e:
                    a2:02:d0:1c:f0:f5:3e:78:d7:e0:05:b3:dc:af:a4:
                    72:65:fa:9d:a3:12:29:4d:cb:04:8c:aa:80:77:44:
                    54:32:e6:33:39:ec:c2:56:a4:92:e3:c5:aa:b0:77:
                    66:7b:97:14:20:a0:c9:20:be:a6:be:77:33:fb:25:
                    f7:5c:62:04:1e:1f:a7:47:b5:70:f9:63:81:5e:95:
                    72:a3:7f:1a:be:d8:54:bc:b6:de:26:dd:f0:4a:d3:
                    c2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AC:B8:E9:B7:9B:4E:47:69:50:EB:CB:AA:DD:9A:5C:C5:C6:F4:17
            X509v3 Authority Key Identifier:
                keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/a1880d7492d2ac477a5a5da5511f685d4652a72f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:4a:ce:54:95:a3:48:d2:11:56:48:b0:d4:c6:0f:06:77:e5:
         fc:ea:b6:bc:ee:bb:10:48:1a:c7:36:93:32:89:41:58:1f:39:
         a5:b0:55:8b:77:57:fa:66:ed:c4:5d:f2:1c:39:81:5f:4e:bc:
         86:71:8b:60:c5:90:e1:f8:18:c7:74:37:b5:df:f7:f9:22:70:
         f2:eb:2e:6d:27:ed:4a:19:b4:be:d9:1c:5f:33:cf:08:95:91:
         d1:bb:8b:b2:3b:3b:2c:f9:2a:fa:eb:3d:cf:39:0b:07:29:fb:
         ba:b5:5f:fb:5d:45:98:94:7a:b8:f2:c3:40:34:8d:2d:cb:23:
         20:72:3b:1d:c4:8f:a9:79:d6:b3:43:0b:ad:a0:08:ab:14:cb:
         d1:13:76:49:b9:46:d5:03:72:73:d7:e5:1e:06:08:ef:ce:6a:
         e3:d8:b1:c0:d1:6d:5d:a4:96:cd:9b:f1:2b:38:7a:b9:71:ba:
         c3:45:11:fd:91:10:aa:e9:a8:e7:99:33:d7:13:b8:62:8d:ce:
         ca:ab:43:1e:25:63:2b:8a:1e:02:e0:b0:6f:21:92:04:32:1d:
         18:7a:c7:2a:cf:5a:18:18:54:77:74:3b:b0:f0:34:8b:ac:97:
         8f:c5:97:01:a3:29:92:b1:f4:70:30:a5:89:69:68:a9:04:ee:
         d8:53:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 15:18:02 2024 by rpki-client on console-ams.rpki-client.org