Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/938d955d3546a4fbda350c3f6b2ad32ff9619199.roa
File:                     938d955d3546a4fbda350c3f6b2ad32ff9619199.roa (raw, json)
Hash identifier:          XwDIqzYk3dIfcURxL/WhYsqSyAGTVbwkf0PC0uFhPpo=
Subject key identifier:   1F:CB:61:D7:F1:DB:05:F7:58:3E:DD:4B:32:CC:88:AB:6A:C3:40:E2
Certificate issuer:       /CN=ae85768adef6d4dde1ca45bae430571e45d9370a
Certificate serial:       1F4128
Authority key identifier: 19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/938d955d3546a4fbda350c3f6b2ad32ff9619199.roa
Signing time:             Thu 11 May 2023 16:58:40 +0000
ROA not before:           Wed 10 May 2023 16:58:40 +0000
ROA not after:            Sun 11 May 2025 16:58:40 +0000
asID:                     262589
IP address blocks:        186.1.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Jan 2024 20:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2048296 (0x1f4128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae85768adef6d4dde1ca45bae430571e45d9370a
        Validity
            Not Before: May 10 16:58:40 2023 GMT
            Not After : May 11 16:58:40 2025 GMT
        Subject: CN=938d955d3546a4fbda350c3f6b2ad32ff9619199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ed:e7:55:b4:37:5a:2e:82:a6:88:8c:df:34:
                    ae:3d:3d:14:42:b6:06:8b:e6:df:a2:bd:e7:23:e3:
                    24:07:27:90:0f:68:96:80:01:84:3d:48:6d:19:31:
                    50:18:af:77:da:47:d7:41:63:0f:e7:04:5b:c5:d1:
                    23:5a:14:db:9f:c2:1e:35:be:67:17:8f:66:65:ef:
                    46:4b:60:67:76:12:c1:7c:8d:73:fd:70:d9:57:46:
                    99:0e:8a:8b:77:06:ba:c1:e1:6d:40:3b:62:65:0f:
                    ef:0c:64:a4:9c:53:50:c2:b3:0b:16:97:f1:18:6c:
                    9a:78:0d:72:b5:7d:49:4d:75:f8:c5:bc:9b:e5:df:
                    44:9b:9b:c8:11:ba:1b:37:ad:26:b6:57:f3:a5:5e:
                    f2:1b:11:c5:9f:7f:12:a9:7c:ff:f9:5f:71:1a:74:
                    09:1f:fa:0d:87:7e:b4:1b:83:77:87:25:b3:11:5e:
                    33:68:d6:4b:57:22:0a:f5:ba:b0:ae:61:42:cd:57:
                    bc:fd:69:6c:e4:71:38:53:5c:ad:f5:13:c9:78:c6:
                    22:92:a5:8a:23:dd:24:78:c3:01:7f:62:05:b4:c4:
                    51:6d:c0:9c:4f:fd:17:ce:b0:00:22:b8:09:4c:38:
                    3f:30:c0:cd:c4:46:64:0b:8e:71:43:53:f1:f7:00:
                    1b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CB:61:D7:F1:DB:05:F7:58:3E:DD:4B:32:CC:88:AB:6A:C3:40:E2
            X509v3 Authority Key Identifier:
                keyid:19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/938d955d3546a4fbda350c3f6b2ad32ff9619199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/ae85768adef6d4dde1ca45bae430571e45d9370a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:90:ca:53:8d:10:96:d8:32:c1:d7:46:a6:09:1b:86:10:9b:
         ca:99:0b:e0:52:04:27:c5:57:c0:38:de:ee:47:58:78:22:cd:
         a6:3a:25:12:60:f3:64:3f:f4:21:16:e6:74:8a:0b:09:36:ad:
         da:7e:d0:fe:9c:ed:7c:15:f9:af:ec:be:a4:30:ae:18:ac:e8:
         54:59:7f:f9:d6:cb:04:3b:a6:ee:a9:e1:e2:83:d8:a7:9a:ad:
         8d:7b:af:16:b4:72:79:dc:aa:2e:99:68:d5:15:9a:ee:f8:cc:
         80:77:9c:1a:36:2b:d5:ac:5b:79:f3:eb:7c:c3:d8:56:79:3a:
         00:6b:b7:06:bc:f4:ea:16:68:cd:8f:3c:f4:6f:38:4d:7f:bf:
         87:cb:26:c1:12:b0:79:57:8c:4e:f5:17:36:b4:32:44:2d:e8:
         b2:1e:b3:ad:d9:ed:ef:48:10:fe:65:65:78:6a:f5:2b:f0:85:
         0f:dc:56:2a:01:55:79:1a:7d:39:04:ff:67:44:d2:03:cd:67:
         10:37:f8:09:88:8a:fd:a7:b6:df:5f:1c:5c:76:a6:6c:60:5e:
         4c:d8:90:5d:e6:1e:e8:a5:08:36:7b:85:99:71:e3:2f:95:52:
         4a:fc:f1:9d:55:fe:06:89:cb:a1:a6:de:41:59:2d:a0:3b:4d:
         ef:ff:a4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 20 00:02:54 2024 by rpki-client on console-fra.rpki-client.org