Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/94f7b20a453d653cead19bc7d3fe69d4f47aed01.roa
File:                     94f7b20a453d653cead19bc7d3fe69d4f47aed01.roa (raw, json)
Hash identifier:          UcHX+9GyyEuQFHqHwOopPnWT/AzWTr99CnW4lYLcuAw=
Subject key identifier:   B5:44:91:CC:E5:7C:D5:15:B6:E9:1C:45:15:C6:FA:4F:16:D8:7F:5A
Certificate issuer:       /CN=9882ed47a7ebae944c46595d3bea57e07895467a
Certificate serial:       0CAEE0
Authority key identifier: A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/94f7b20a453d653cead19bc7d3fe69d4f47aed01.roa
Signing time:             Wed 24 Mar 2021 14:32:04 +0000
ROA not before:           Wed 24 Mar 2021 14:32:04 +0000
ROA not after:            Tue 24 Mar 2026 14:32:04 +0000
asID:                     265853
IP address blocks:        45.225.216.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Tue 16 Jan 2024 12:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831200 (0xcaee0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9882ed47a7ebae944c46595d3bea57e07895467a
        Validity
            Not Before: Mar 24 14:32:04 2021 GMT
            Not After : Mar 24 14:32:04 2026 GMT
        Subject: CN=94f7b20a453d653cead19bc7d3fe69d4f47aed01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:e6:e1:08:69:fa:8a:b8:b4:7c:c5:aa:88:
                    0d:05:4a:19:a0:70:a9:16:ff:d4:86:23:e8:11:6f:
                    8c:cd:b2:d8:6f:85:2c:a6:21:d9:98:fb:02:78:20:
                    9d:12:d0:34:7a:22:7e:cd:1d:2e:ad:ac:f9:f1:ea:
                    87:33:ef:95:22:66:01:79:1e:80:81:9d:94:ea:eb:
                    8a:a4:6e:40:63:2e:4f:1e:59:c9:22:db:16:ac:96:
                    00:51:df:8e:44:35:17:45:3e:3a:2b:8b:ae:36:fd:
                    31:d9:21:4b:1b:31:6b:12:1b:fc:db:70:0d:a4:09:
                    b2:bc:22:2c:84:2c:c6:35:b5:31:22:09:6d:75:6f:
                    90:6e:8e:28:46:05:c1:2d:54:32:a5:b8:b2:26:c7:
                    65:e3:49:a5:a1:0f:92:76:55:b3:3a:ca:05:32:5a:
                    4e:31:8d:f2:d2:23:e5:4c:04:8b:41:11:bd:fb:23:
                    9e:a3:a8:50:32:bf:da:fa:e8:48:af:1d:d1:41:46:
                    30:91:9f:55:64:e7:1e:50:93:23:4a:22:53:11:87:
                    32:78:d2:c1:57:92:32:d9:59:b5:94:55:4a:0f:98:
                    ba:76:a9:c9:da:c4:b9:76:48:63:05:c8:06:46:c0:
                    a9:ec:c3:0c:b4:0a:ee:7e:a0:fd:43:6d:4d:a7:47:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:44:91:CC:E5:7C:D5:15:B6:E9:1C:45:15:C6:FA:4F:16:D8:7F:5A
            X509v3 Authority Key Identifier:
                keyid:A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/94f7b20a453d653cead19bc7d3fe69d4f47aed01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/9882ed47a7ebae944c46595d3bea57e07895467a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:1a:ee:17:76:d8:1d:0d:60:35:0d:6d:f6:e1:94:00:dc:23:
         36:d4:1d:5a:a7:60:3f:a7:e4:d3:71:fe:1b:87:59:e2:ba:2e:
         27:65:1f:c9:df:8e:e6:22:8e:c7:af:41:d7:c2:8e:77:07:be:
         bc:44:72:c1:64:0f:e4:17:dc:ce:ef:d2:e9:aa:c8:4c:97:37:
         60:ce:4c:44:cc:1b:9d:84:07:93:43:04:6b:dc:b2:65:60:6f:
         e2:d1:d4:77:e6:fa:03:1a:11:8f:f7:d7:cb:04:68:ac:ce:30:
         37:d1:b5:02:e8:54:ba:06:61:24:1d:65:87:60:40:15:dc:09:
         06:6a:bf:ab:c7:87:2b:06:e1:c5:25:46:c1:eb:ec:2e:75:7d:
         1b:3d:2e:e7:07:8e:4a:b3:85:59:22:e4:e7:60:09:93:bc:9c:
         a3:cd:3b:5e:14:cd:8d:76:f1:bd:c5:09:26:b9:89:b8:fa:57:
         bf:3d:99:56:96:f3:91:2e:a8:f3:4b:c7:53:ba:26:47:b9:78:
         50:08:3a:ad:43:fc:bf:69:51:01:79:3c:a2:54:24:66:f3:f2:
         a9:71:c4:7d:43:31:a6:eb:bc:ec:6c:0b:f1:25:6a:fd:19:75:
         c3:87:f2:f5:53:1e:f7:b8:72:66:5c:12:17:c2:e2:b9:52:0b:
         9e:04:22:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 16:09:53 2024 by rpki-client on console-fra.rpki-client.org