Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/615501fa64659f64a3934a81f3cd1a4daad9660d.roa
File:                     615501fa64659f64a3934a81f3cd1a4daad9660d.roa (raw, json)
Hash identifier:          TNrCKid8K1rbmmzjuxrmm9A9eaRSmdJjV12PcQ6WLWU=
Subject key identifier:   C6:DF:9F:0E:8B:41:C2:2D:9E:2E:A1:7E:41:4F:52:38:0D:83:F8:D0
Certificate issuer:       /CN=9882ed47a7ebae944c46595d3bea57e07895467a
Certificate serial:       0CB0C2
Authority key identifier: A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/615501fa64659f64a3934a81f3cd1a4daad9660d.roa
Signing time:             Wed 24 Mar 2021 14:32:04 +0000
ROA not before:           Wed 24 Mar 2021 14:32:04 +0000
ROA not after:            Tue 24 Mar 2026 14:32:04 +0000
asID:                     265862
IP address blocks:        45.225.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Jan 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831682 (0xcb0c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9882ed47a7ebae944c46595d3bea57e07895467a
        Validity
            Not Before: Mar 24 14:32:04 2021 GMT
            Not After : Mar 24 14:32:04 2026 GMT
        Subject: CN=615501fa64659f64a3934a81f3cd1a4daad9660d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:36:5f:f3:fe:d6:7b:85:ff:9e:28:f9:d4:
                    c1:b2:e6:6c:3f:a5:a7:0d:80:0d:b9:76:7c:7b:e2:
                    83:23:fb:32:d1:e0:c4:91:db:49:53:4a:69:bb:6a:
                    04:3c:b5:15:03:5c:99:4b:d5:1d:e7:75:07:77:35:
                    57:4a:af:99:4d:91:57:c5:6a:b3:4a:8a:33:ac:0b:
                    e0:e0:b6:7c:26:3a:49:1e:8d:04:48:fa:68:13:16:
                    17:96:24:c7:28:93:88:11:8c:5b:68:d4:b8:92:ff:
                    cc:f2:38:0c:82:ad:da:56:0c:8e:48:84:87:ee:37:
                    f0:23:5c:d3:d4:da:2d:fc:1a:6c:16:d8:00:16:5d:
                    e0:07:d4:14:cc:7d:0b:82:4e:40:4a:79:f5:30:70:
                    53:6b:51:b3:e6:89:4b:98:66:17:3c:b0:23:3e:ed:
                    d2:6b:5c:73:e4:b3:0b:62:b1:ab:6e:00:89:7a:f0:
                    ae:0b:64:6f:59:c2:c7:35:4d:73:4f:d4:39:49:c7:
                    0b:a2:e6:d0:66:07:4f:8f:e8:e4:4e:9b:72:a8:42:
                    88:47:6d:05:87:e1:47:1b:48:80:37:5b:f5:b9:cf:
                    53:c7:27:56:e8:0d:15:52:28:72:fa:bc:59:92:d6:
                    90:1c:f5:d1:50:75:6b:2d:51:7b:62:da:6e:37:83:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DF:9F:0E:8B:41:C2:2D:9E:2E:A1:7E:41:4F:52:38:0D:83:F8:D0
            X509v3 Authority Key Identifier:
                keyid:A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/615501fa64659f64a3934a81f3cd1a4daad9660d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/9882ed47a7ebae944c46595d3bea57e07895467a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:73:a8:9b:ff:b7:6b:5c:09:84:ac:91:aa:99:a6:19:9a:71:
         a6:c4:f6:44:d2:74:99:2d:f3:c6:36:0a:00:68:58:a2:85:98:
         36:3e:82:7f:a8:58:ad:ce:f3:f0:5e:5b:fe:f0:47:df:9f:fb:
         29:b3:44:8b:34:3b:72:7c:12:26:d4:21:29:4a:0b:ff:ec:d8:
         2e:2d:35:01:db:8e:1d:49:a7:1f:3f:05:3d:47:49:40:a4:c3:
         d5:d6:4c:bb:99:0b:49:16:11:98:00:81:b8:ee:cd:41:53:1f:
         56:50:db:5c:40:e9:bd:11:36:f4:3a:94:00:36:d5:25:33:42:
         78:c6:ad:8b:16:a7:9f:41:1a:59:cc:87:38:9e:b4:46:8b:68:
         90:5f:72:8c:d5:4f:bc:8f:0a:36:ef:5b:d9:76:07:a2:ef:a0:
         13:90:3e:b9:8f:29:9c:95:ec:0e:2b:88:a6:23:19:5d:d4:1e:
         3a:be:99:4e:b5:6c:a2:62:b2:5a:6b:a8:93:39:64:49:9f:ac:
         14:cd:bd:6c:fa:35:76:8a:e8:2c:3a:48:a1:77:05:1d:ca:ae:
         f3:19:05:e2:c7:ce:0a:8d:5a:6a:a8:5e:c0:b8:65:6a:6b:c1:
         42:79:27:94:ba:0f:d1:a5:44:b1:c1:6d:3d:2b:73:3c:fe:03:
         30:13:54:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 15:27:44 2024 by rpki-client on console-ams.rpki-client.org