Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c33f474d-ec58-47ad-a296-188be0bebe86/2e8b55d749e79465034869200ede32b53bdf20a1.roa
File:                     2e8b55d749e79465034869200ede32b53bdf20a1.roa (raw, json)
Hash identifier:          ldL9c2Nv5mJ+dehuc2N5oVTp6DGMhrY2eiluLt9YGWs=
Subject key identifier:   22:FE:BC:B8:6A:94:F9:39:6F:28:3A:BE:3C:A6:25:65:75:12:92:86
Certificate issuer:       /CN=2bc54a732b1e35772dfd48ba0704665447b560ae
Certificate serial:       11FB07
Authority key identifier: 6F:08:13:8E:CE:A7:37:20:6B:A3:64:A0:B3:3D:D5:C1:AA:CD:3E:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bc54a732b1e35772dfd48ba0704665447b560ae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c33f474d-ec58-47ad-a296-188be0bebe86/2e8b55d749e79465034869200ede32b53bdf20a1.roa
Signing time:             Wed 09 Mar 2022 10:33:23 +0000
ROA not before:           Wed 09 Mar 2022 03:00:00 +0000
ROA not after:            Sat 09 Mar 2024 03:00:00 +0000
asID:                     271823
IP address blocks:        190.83.72.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Mar 2024 08:33:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178375 (0x11fb07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc54a732b1e35772dfd48ba0704665447b560ae
        Validity
            Not Before: Mar  9 03:00:00 2022 GMT
            Not After : Mar  9 03:00:00 2024 GMT
        Subject: CN=2e8b55d749e79465034869200ede32b53bdf20a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:6f:d2:22:98:cc:09:08:4b:25:1b:2c:b7:
                    1e:fe:c0:6c:4d:54:8e:80:0b:d8:02:eb:a0:c7:a8:
                    20:e0:7b:9e:d6:93:87:92:b5:82:ec:22:6b:ce:53:
                    c4:95:68:59:15:72:14:ce:64:63:6d:e3:83:4e:69:
                    3d:12:1e:b4:7f:d2:8b:56:04:94:b2:ce:3d:70:8f:
                    9a:74:31:75:43:99:09:a0:27:d4:13:eb:f1:12:3c:
                    44:22:d9:ad:c1:a5:de:87:c6:11:69:c1:d2:ce:f4:
                    dc:fd:65:0e:55:be:2f:83:0e:9d:17:d9:07:f2:19:
                    3d:0c:9b:a0:0e:a5:ca:1a:bf:ac:c1:6b:57:8c:f1:
                    dd:94:b1:71:59:6c:cf:da:51:cf:23:5c:b0:ef:5c:
                    24:32:66:83:fa:ea:d7:b2:da:76:69:8d:72:78:59:
                    2b:e5:6d:49:6f:66:38:97:03:02:68:00:f5:bb:ae:
                    5d:80:99:73:31:6d:ed:5c:a9:5c:3c:a7:23:4a:7f:
                    b6:e7:4a:19:98:15:8e:60:7f:b1:a6:62:d9:54:2d:
                    23:c1:c0:b5:fa:5d:92:9d:21:c8:47:62:af:c1:e1:
                    ea:a4:e6:78:2b:ca:c3:94:35:bc:1a:5c:ee:46:f3:
                    40:d8:82:d2:4b:f8:65:0f:a0:4c:98:41:cc:86:dc:
                    37:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FE:BC:B8:6A:94:F9:39:6F:28:3A:BE:3C:A6:25:65:75:12:92:86
            X509v3 Authority Key Identifier:
                keyid:6F:08:13:8E:CE:A7:37:20:6B:A3:64:A0:B3:3D:D5:C1:AA:CD:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bc54a732b1e35772dfd48ba0704665447b560ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c33f474d-ec58-47ad-a296-188be0bebe86/2e8b55d749e79465034869200ede32b53bdf20a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c33f474d-ec58-47ad-a296-188be0bebe86/2bc54a732b1e35772dfd48ba0704665447b560ae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:1d:b0:c3:23:1f:19:55:5b:47:d1:55:18:e2:55:58:ca:4b:
         cb:0b:29:0f:2b:29:85:8b:3e:9a:19:88:74:fa:a8:c9:09:cd:
         23:fd:eb:9f:7f:d1:70:b9:b6:1b:03:42:da:a6:22:53:a5:05:
         e9:58:07:07:96:91:07:f2:30:85:00:12:e3:56:b0:47:08:0d:
         b9:64:b5:80:bd:52:35:a0:91:ed:d5:4c:6b:07:d7:7e:dc:cd:
         5e:56:f4:2c:f3:3e:3c:5f:29:97:7b:f3:fb:36:4e:c4:61:74:
         63:ca:71:7f:0f:c0:12:cf:f8:99:96:37:5d:aa:85:f8:90:f2:
         e0:c7:99:8b:f8:08:38:99:26:a5:b9:5b:eb:e7:ca:ef:a7:29:
         8c:0d:76:63:fd:fc:72:49:64:85:a2:d3:e5:83:07:ac:72:72:
         42:e9:47:ca:10:fb:6f:8d:74:65:bb:ac:d8:6c:3f:8f:65:d1:
         7b:2f:0a:91:2a:87:5e:d1:c9:19:83:82:38:62:e1:a9:6c:a7:
         0b:dd:d7:2d:5f:6b:46:f5:bc:4b:98:15:c6:9b:18:32:d4:8b:
         dc:50:2e:94:87:1f:b3:63:5d:fc:08:38:a4:ee:bd:e2:1c:29:
         d3:1c:84:f5:b4:01:06:11:12:20:08:8b:5e:de:66:95:fd:ee:
         58:e6:86:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 11:11:53 2024 by rpki-client on console-fra.rpki-client.org