Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/ae4c4d286fa860522e85feeb49f8f616c22d1105.roa
File:                     ae4c4d286fa860522e85feeb49f8f616c22d1105.roa (raw, json)
Hash identifier:          zNK9i6h47dUSgPvxn8A0L0oKw+Grb04FS3tgXBXOhWw=
Subject key identifier:   3B:C9:50:68:D5:52:55:1C:35:30:AD:B2:E4:CB:96:0B:F2:66:8B:90
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       293034
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/ae4c4d286fa860522e85feeb49f8f616c22d1105.roa
Signing time:             Mon 15 Jan 2024 13:33:57 +0000
ROA not before:           Mon 15 Jan 2024 13:33:57 +0000
ROA not after:            Thu 15 Jan 2026 13:33:57 +0000
asID:                     834
IP address blocks:        190.93.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Jan 2024 11:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2699316 (0x293034)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Jan 15 13:33:57 2024 GMT
            Not After : Jan 15 13:33:57 2026 GMT
        Subject: CN=ae4c4d286fa860522e85feeb49f8f616c22d1105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:13:03:71:06:d9:c5:12:56:ee:2a:a5:4c:
                    8a:46:35:68:0c:b1:b7:71:2f:8b:80:51:79:e8:a2:
                    36:4c:22:d4:2e:c8:a9:7a:f9:07:f3:a9:8a:49:16:
                    83:18:7e:96:16:29:2d:60:94:62:55:65:60:12:75:
                    fd:2d:96:34:b1:0e:36:cf:a1:b3:3a:27:77:dd:f8:
                    48:a0:0d:ee:92:a7:55:bc:b4:a1:46:9e:1b:bd:aa:
                    d2:e8:fa:d4:ec:ff:e0:e1:2f:e6:1b:30:53:00:5d:
                    4f:5d:23:15:f9:be:1b:06:63:11:30:de:e0:1b:f5:
                    6c:db:ac:10:d4:49:70:6f:d3:d6:d9:2e:9a:76:a0:
                    49:a4:27:b5:5a:bb:f5:fa:44:e9:47:02:7c:9e:40:
                    f1:10:37:b5:b0:b4:c0:16:ab:90:2e:cc:7d:23:05:
                    f9:1b:91:f8:67:8b:fa:9b:2a:10:ba:fc:69:c0:a4:
                    1d:70:f6:09:ba:35:cf:b6:89:3e:d1:32:27:09:b6:
                    f6:64:e8:14:2b:c7:37:2c:7c:55:68:98:69:17:1f:
                    66:2d:e2:c4:28:8a:74:f0:1e:5e:b0:97:e3:76:d2:
                    b8:de:39:da:7a:42:3f:8d:f9:0f:00:30:37:48:1c:
                    8b:c0:af:9d:9b:0e:69:35:dc:5c:2f:4d:fb:bf:c4:
                    45:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C9:50:68:D5:52:55:1C:35:30:AD:B2:E4:CB:96:0B:F2:66:8B:90
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/ae4c4d286fa860522e85feeb49f8f616c22d1105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:48:b7:71:ac:62:71:db:01:e8:9f:01:db:5f:9a:dc:d4:0c:
         0a:f8:cf:68:08:24:52:ef:c8:20:64:cc:7c:55:aa:84:53:b2:
         b3:00:a7:f7:56:f5:b4:67:a2:3f:17:d8:ea:aa:e9:76:3b:fa:
         46:50:b8:79:b0:79:e3:d2:5a:7b:50:ce:de:ab:af:f7:ea:f0:
         65:e4:68:77:80:44:1a:f5:ee:21:1f:1e:01:23:c9:9f:9d:82:
         32:83:cb:2e:4b:1d:e3:e8:ef:e1:67:55:84:a0:4c:4c:6a:22:
         9c:63:dd:3e:51:b4:4d:b8:46:58:ca:e9:f8:10:36:08:f5:d9:
         a7:5c:a5:43:38:aa:70:6e:e7:7e:27:ee:ab:28:49:4a:8b:d4:
         a1:94:2f:38:fd:bb:91:2f:69:e5:49:05:af:f3:88:27:37:28:
         31:78:d8:e4:83:d4:e6:8e:11:09:62:5b:f4:c3:e6:2e:36:10:
         e0:e6:c1:a9:f7:09:6a:a9:28:83:fd:e2:b1:a6:cd:6a:03:91:
         a1:f4:c1:d3:09:d2:d9:8d:82:f2:8a:83:45:33:15:6f:54:83:
         87:5b:60:a2:e8:91:17:4d:ad:aa:89:33:ac:44:2f:77:04:d9:
         f7:b4:7b:8e:63:b3:73:df:cd:ab:69:2e:98:50:63:d1:c5:eb:
         f8:21:1d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 15:30:17 2024 by rpki-client on console-ams.rpki-client.org