Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/9f399987748a0296121d22d027c283951203efd4.roa
File:                     9f399987748a0296121d22d027c283951203efd4.roa (raw, json)
Hash identifier:          zYPiin59cQ11npk0Sg48LosuVXUFj8cRL43nV9Ch7kA=
Subject key identifier:   DC:D8:BD:78:14:88:9D:87:DA:85:0F:F1:0F:31:9B:10:BE:86:5B:02
Certificate issuer:       /CN=51cc36a73e0bbe2b338c61fa1df595670735aa98
Certificate serial:       0E48
Authority key identifier: 9D:83:6B:D4:65:8F:74:C8:F7:10:6A:FE:03:A6:FD:62:01:88:BF:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/51cc36a73e0bbe2b338c61fa1df595670735aa98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/9f399987748a0296121d22d027c283951203efd4.roa
Signing time:             Thu 06 Oct 2022 23:27:58 +0000
ROA not before:           Thu 06 Oct 2022 23:27:23 +0000
ROA not after:            Sun 06 Oct 2024 23:27:23 +0000
asID:                     19422
IP address blocks:        200.58.128.0/19 maxlen: 19
                          200.58.128.0/20 maxlen: 20
                          200.58.128.0/21 maxlen: 21
                          200.58.136.0/21 maxlen: 21
                          200.58.144.0/20 maxlen: 20
                          200.58.144.0/21 maxlen: 21
                          200.58.152.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 10:44:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3656 (0xe48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51cc36a73e0bbe2b338c61fa1df595670735aa98
        Validity
            Not Before: Oct  6 23:27:23 2022 GMT
            Not After : Oct  6 23:27:23 2024 GMT
        Subject: CN=9f399987748a0296121d22d027c283951203efd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:be:2a:d2:08:e7:d0:ea:02:b5:55:a8:b8:
                    63:ce:2a:cc:55:72:f3:97:5c:5a:df:50:1c:80:83:
                    1e:aa:1f:8d:af:17:a6:6e:c5:2f:22:d3:5d:10:57:
                    0d:de:57:e3:2b:65:90:43:50:41:10:16:ff:92:46:
                    60:92:ad:31:02:12:34:eb:1a:89:33:2d:ff:a5:24:
                    09:16:2a:09:54:57:a8:41:d9:5c:55:f0:5b:d8:be:
                    5c:bd:5f:89:4a:13:64:f8:69:d9:b7:11:75:29:7b:
                    e0:05:bd:88:32:37:e3:8e:e0:d7:c3:5f:1c:30:8e:
                    02:c9:86:e1:b7:e8:33:c2:1b:35:78:e1:af:90:e5:
                    ca:d8:13:dd:5b:ff:e9:12:00:14:12:2d:20:e4:41:
                    2c:56:b0:8f:f6:ff:a1:2e:e1:39:30:d0:20:92:45:
                    c7:15:da:53:f5:08:88:5a:8a:d6:7b:4f:33:5f:6b:
                    cd:5f:1c:b5:00:ca:fb:06:94:4d:ee:64:ca:db:da:
                    37:6b:23:37:5c:7a:f0:e1:2f:17:53:6c:8b:e7:fd:
                    93:97:77:d9:1d:02:24:16:ef:a0:c9:8c:94:b6:85:
                    e8:e5:91:1d:1c:1d:87:9d:e5:05:3d:de:7f:0b:7a:
                    82:77:fb:f7:06:ce:56:31:18:79:3e:fd:45:0e:97:
                    ad:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D8:BD:78:14:88:9D:87:DA:85:0F:F1:0F:31:9B:10:BE:86:5B:02
            X509v3 Authority Key Identifier:
                keyid:9D:83:6B:D4:65:8F:74:C8:F7:10:6A:FE:03:A6:FD:62:01:88:BF:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/51cc36a73e0bbe2b338c61fa1df595670735aa98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/9f399987748a0296121d22d027c283951203efd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/51cc36a73e0bbe2b338c61fa1df595670735aa98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1b:08:51:c4:49:03:ba:2c:b0:87:52:06:07:0d:25:ac:0f:ea:
         84:26:9a:1a:67:92:8b:bc:2a:e8:d0:eb:c7:7c:d2:d6:c0:27:
         2f:67:10:42:3f:7d:96:4c:dd:5b:e3:bd:00:cc:c2:36:9b:25:
         07:d6:96:1b:9e:34:f7:f7:74:42:57:32:f0:fb:4d:e2:d9:e9:
         6d:d8:8d:7a:1a:ff:a2:9b:49:3c:da:b9:8e:dc:a6:12:f4:ba:
         4f:a3:f0:ea:27:c9:99:be:67:91:86:e4:3c:80:32:d8:00:d2:
         55:e5:c6:7c:de:42:25:e4:8f:a8:fa:a2:fc:45:a7:83:b1:be:
         80:ee:22:c7:92:af:05:12:72:4e:b9:4d:0d:73:73:a8:1c:46:
         d0:5a:31:c1:7d:e5:55:9b:46:c4:61:81:ef:48:ad:a3:7f:88:
         94:bb:33:28:0b:5b:eb:df:f0:d2:f9:3e:0d:ae:35:7d:4f:f9:
         7c:b8:e1:46:63:2a:e6:ec:d9:58:4c:6d:13:9c:61:79:e7:56:
         7b:2c:8c:30:71:0a:fd:29:41:df:65:48:02:52:1b:9c:a4:4c:
         35:f5:dd:4b:9b:81:8b:0f:2a:d4:52:2a:df:f8:2d:7b:05:c8:
         ee:b1:b7:ff:73:98:7f:4d:85:90:05:03:c0:73:57:2f:8b:10:
         cd:8e:dd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 14:30:31 2024 by rpki-client on console-ams.rpki-client.org