Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/783ccd2d036dbd9dcc786cce6c7a02d6da9849d5.roa
File:                     783ccd2d036dbd9dcc786cce6c7a02d6da9849d5.roa (raw, json)
Hash identifier:          DkhSpabrEnli5F8BkBA6owiyuYMMGkg7SQ+K18WUlQE=
Subject key identifier:   05:25:E0:B4:7E:3C:2B:A7:83:E1:6B:53:9D:34:2B:3E:61:3A:24:47
Certificate issuer:       /CN=ae85768adef6d4dde1ca45bae430571e45d9370a
Certificate serial:       1F3E31
Authority key identifier: 19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/783ccd2d036dbd9dcc786cce6c7a02d6da9849d5.roa
Signing time:             Thu 11 May 2023 16:58:40 +0000
ROA not before:           Wed 10 May 2023 16:58:40 +0000
ROA not after:            Sun 11 May 2025 16:58:40 +0000
asID:                     18678
IP address blocks:        186.1.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Jan 2024 20:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2047537 (0x1f3e31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae85768adef6d4dde1ca45bae430571e45d9370a
        Validity
            Not Before: May 10 16:58:40 2023 GMT
            Not After : May 11 16:58:40 2025 GMT
        Subject: CN=783ccd2d036dbd9dcc786cce6c7a02d6da9849d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:91:ff:02:c7:97:c2:92:56:be:eb:e0:0a:2b:
                    6a:85:cd:0e:4b:06:ff:89:3d:d7:f1:4f:f1:0a:1b:
                    80:51:49:a4:d0:06:5c:a5:29:66:0b:be:c8:3c:dc:
                    ed:52:2a:e7:d0:03:72:b6:4f:7d:1e:51:dd:01:02:
                    8c:ec:c7:0a:a7:3f:09:8b:09:ec:01:c7:21:f1:b6:
                    f1:c7:fc:ec:fe:4f:61:71:e5:ae:89:2e:4e:a3:e4:
                    ca:05:a2:1c:94:de:52:19:a8:26:67:7a:14:0e:38:
                    91:b6:7b:59:a9:71:36:b0:b6:ba:fe:e3:dd:a3:27:
                    59:8e:77:fc:88:f3:37:99:6c:53:d4:7b:48:d8:5e:
                    a9:00:07:49:58:23:42:da:c3:7d:b8:4c:9c:ca:3d:
                    3a:c3:5e:c9:ce:a2:a8:38:4a:fa:46:94:0b:1d:03:
                    5a:20:78:6c:4f:5e:bd:af:5b:34:92:05:d3:27:82:
                    72:31:03:1b:76:9f:95:ae:70:96:1b:c0:13:a6:cb:
                    84:19:b3:55:0b:d7:ad:72:d0:97:d5:df:75:2c:28:
                    80:7c:b5:05:b6:e7:0c:74:fb:c5:6b:9a:77:bd:2f:
                    72:34:19:95:9e:f1:e1:c9:02:06:4c:73:4e:52:07:
                    08:c2:6c:c6:7c:b2:4a:3a:cb:f1:a6:a4:cd:40:a8:
                    34:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:25:E0:B4:7E:3C:2B:A7:83:E1:6B:53:9D:34:2B:3E:61:3A:24:47
            X509v3 Authority Key Identifier:
                keyid:19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/783ccd2d036dbd9dcc786cce6c7a02d6da9849d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/ae85768adef6d4dde1ca45bae430571e45d9370a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:8d:58:5c:c7:bf:83:68:27:b1:3d:f9:8b:8a:01:9b:10:4d:
         1b:a0:ce:24:f0:c1:1c:cb:6d:34:70:ec:6c:60:62:92:d1:cc:
         57:c9:7f:0d:6f:f3:12:75:59:42:14:20:a7:df:54:d7:97:cb:
         7f:dd:3a:52:7b:d4:0d:da:63:0e:1b:57:26:20:f4:49:a2:e0:
         0d:af:6c:1e:e0:95:30:70:77:14:60:3f:44:7b:87:be:32:c3:
         2c:06:98:03:0e:6c:46:0e:b1:a9:49:88:43:3a:74:68:8b:13:
         3e:6b:b9:04:66:26:b0:36:1b:62:a9:14:09:6f:34:49:cd:f0:
         48:f6:9a:f0:65:e3:e0:ab:c0:8c:d6:ad:97:04:9a:8e:3e:03:
         00:51:56:b2:df:ea:03:ba:ed:74:95:ca:a1:33:46:37:c9:07:
         c1:8b:01:91:de:df:04:f6:d3:09:44:39:58:e6:2e:fb:25:7d:
         6d:80:44:8b:1b:1c:ad:83:44:55:50:51:34:06:8d:bb:04:70:
         41:38:af:b0:09:0a:36:f0:22:8d:f2:f3:fd:24:83:07:3e:d7:
         c0:56:16:e8:7e:3a:82:44:2f:e4:df:04:f7:f4:9b:b8:6d:3e:
         32:09:7c:2c:3d:43:e8:71:9c:00:1b:f4:27:a7:04:69:cd:59:
         e8:12:70:ad
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHz4xMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFl
ODU3NjhhZGVmNmQ0ZGRlMWNhNDViYWU0MzA1NzFlNDVkOTM3MGEwHhcNMjMwNTEw
MTY1ODQwWhcNMjUwNTExMTY1ODQwWjAzMTEwLwYDVQQDEyg3ODNjY2QyZDAzNmRi
ZDlkY2M3ODZjY2U2YzdhMDJkNmRhOTg0OWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiJH/AseXwpJWvuvgCitqhc0OSwb/iT3X8U/xChuAUUmk0AZc
pSlmC77IPNztUirn0ANytk99HlHdAQKM7McKpz8JiwnsAcch8bbxx/zs/k9hceWu
iS5Oo+TKBaIclN5SGagmZ3oUDjiRtntZqXE2sLa6/uPdoydZjnf8iPM3mWxT1HtI
2F6pAAdJWCNC2sN9uEycyj06w17JzqKoOEr6RpQLHQNaIHhsT169r1s0kgXTJ4Jy
MQMbdp+VrnCWG8ATpsuEGbNVC9etctCX1d91LCiAfLUFtucMdPvFa5p3vS9yNBmV
nvHhyQIGTHNOUgcIwmzGfLJKOsvxpqTNQKg0CQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAUl4LR+PCung+FrU500Kz5hOiRHMB8GA1UdIwQYMBaAFBlsB4f4g99vpI8p
SmHQNNI974w2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWU4NTc2
OGFkZWY2ZDRkZGUxY2E0NWJhZTQzMDU3MWU0NWQ5MzcwYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjk3NjM4MGQtMmU5MC00ZTI4LWIwYTYtNGIzZGZl
MWQ4YWQ1Lzc4M2NjZDJkMDM2ZGJkOWRjYzc4NmNjZTZjN2EwMmQ2ZGE5ODQ5ZDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iOTc2MzgwZC0yZTkwLTRlMjgtYjBhNi00YjNk
ZmUxZDhhZDUvYWU4NTc2OGFkZWY2ZDRkZGUxY2E0NWJhZTQzMDU3MWU0NWQ5Mzcw
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALoBpDANBgkqhkiG9w0BAQsFAAOCAQEAro1YXMe/g2gnsT35
i4oBmxBNG6DOJPDBHMttNHDsbGBiktHMV8l/DW/zEnVZQhQgp99U15fLf906UnvU
DdpjDhtXJiD0SaLgDa9sHuCVMHB3FGA/RHuHvjLDLAaYAw5sRg6xqUmIQzp0aIsT
Pmu5BGYmsDYbYqkUCW80Sc3wSPaa8GXj4KvAjNatlwSajj4DAFFWst/qA7rtdJXK
oTNGN8kHwYsBkd7fBPbTCUQ5WOYu+yV9bYBEixscrYNEVVBRNAaNuwRwQTivsAkK
NvAijfLz/SSDBz7XwFYW6H46gkQv5N8E9/SbuG0+Mgl8LD1D6HGcABv0J6cEac1Z
6BJwrQ==
-----END CERTIFICATE-----
Generated at Sat Jan 20 00:02:54 2024 by rpki-client on console-fra.rpki-client.org