Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/5b56e5975415df2eab30751419aa978ec8edb788.roa
File:                     5b56e5975415df2eab30751419aa978ec8edb788.roa (raw, json)
Hash identifier:          4I+VeniIeoUTsFVwCi60JJh15mwgUneyKO1+Ew3R21Q=
Subject key identifier:   4A:78:69:3A:37:E5:2A:7E:55:BC:F2:0C:3C:A9:90:F3:D6:44:A9:C7
Certificate issuer:       /CN=9882ed47a7ebae944c46595d3bea57e07895467a
Certificate serial:       0CAEB8
Authority key identifier: A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/5b56e5975415df2eab30751419aa978ec8edb788.roa
Signing time:             Wed 24 Mar 2021 14:32:04 +0000
ROA not before:           Wed 24 Mar 2021 14:32:04 +0000
ROA not after:            Tue 24 Mar 2026 14:32:04 +0000
asID:                     265853
IP address blocks:        45.225.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Jan 2024 12:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831160 (0xcaeb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9882ed47a7ebae944c46595d3bea57e07895467a
        Validity
            Not Before: Mar 24 14:32:04 2021 GMT
            Not After : Mar 24 14:32:04 2026 GMT
        Subject: CN=5b56e5975415df2eab30751419aa978ec8edb788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c7:68:b2:66:3e:fb:67:ba:f6:48:22:74:c9:
                    07:d3:32:1a:ea:7c:8b:ff:b3:81:35:91:f4:e5:4e:
                    01:03:3c:70:28:ae:19:56:29:91:97:5e:d8:3c:25:
                    b4:d7:42:e8:e7:20:02:e1:ac:45:42:ce:3e:52:d1:
                    a2:58:3c:a7:4f:6a:0a:8b:8c:5b:42:cb:86:c0:d9:
                    f6:f1:9c:ae:6e:a5:70:1a:4a:55:90:85:f7:c4:b8:
                    94:eb:57:1e:90:6a:7a:3a:79:42:11:ab:28:47:0d:
                    c5:d0:a5:99:c2:4a:f4:cd:de:67:e4:1c:c9:8c:96:
                    3e:16:c5:44:a9:78:61:99:78:04:21:82:42:db:4c:
                    9f:af:32:86:2c:ff:9f:f1:55:42:5c:ba:af:cb:d6:
                    91:6f:7c:1a:8d:43:bb:f9:8e:d8:93:dc:9d:1a:1b:
                    23:73:4c:d4:57:2b:eb:58:ca:93:0f:fc:88:5c:6e:
                    d8:8b:3b:1f:d2:b2:71:6f:72:5c:09:47:fa:0f:36:
                    21:56:57:ca:53:f0:1a:2d:43:3a:a9:db:d7:6f:9a:
                    19:4d:d2:5f:ae:6b:97:cb:7a:41:ed:de:32:5f:f0:
                    86:3c:bb:d9:b2:0b:43:19:4c:47:26:6f:aa:c8:7c:
                    e4:d1:eb:14:63:61:be:de:56:3d:36:74:23:8d:f2:
                    e9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:78:69:3A:37:E5:2A:7E:55:BC:F2:0C:3C:A9:90:F3:D6:44:A9:C7
            X509v3 Authority Key Identifier:
                keyid:A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/5b56e5975415df2eab30751419aa978ec8edb788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/9882ed47a7ebae944c46595d3bea57e07895467a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:b6:e1:a4:d8:a4:3f:b7:1a:e3:0a:87:cb:95:5c:42:0e:d1:
         6c:f4:80:62:0f:67:35:fd:b9:2e:14:ce:89:88:7e:9e:9d:2b:
         42:b4:03:81:f3:f1:cd:82:85:07:58:1f:8a:a2:bc:bd:ea:8b:
         93:15:cc:ce:f2:28:f7:3f:50:94:13:9b:78:c5:29:38:20:af:
         c5:fd:80:4d:4c:4e:8e:c9:17:47:f9:ab:b5:5a:03:1f:e3:9b:
         ef:bc:49:d8:4f:84:6e:0b:da:d7:f7:a4:37:9e:3f:30:f2:68:
         94:f4:c0:dc:09:35:f4:4f:6c:d5:92:1b:11:46:38:98:ec:ea:
         55:ef:b3:cb:4f:63:dd:12:8b:9f:d6:8c:46:a6:b1:ee:ae:e5:
         19:6f:93:ec:18:9c:f6:15:f3:20:2e:71:e8:0c:9d:b0:4d:4a:
         0b:f0:33:0d:e3:e2:d3:22:73:53:80:e0:68:17:f6:df:4f:33:
         a0:fa:d5:68:23:dd:f5:1b:c8:33:d4:da:86:84:a9:65:a3:f5:
         2d:c6:4d:c1:9b:eb:65:2c:d5:05:46:be:ef:1c:fa:d6:79:ef:
         e3:f5:c8:63:a4:be:88:d3:6a:47:40:f3:07:d6:4e:f6:15:64:
         13:07:b0:b8:a7:a6:62:57:7d:b6:f9:41:7a:f6:df:53:f2:58:
         ae:17:ad:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 15:27:44 2024 by rpki-client on console-ams.rpki-client.org