Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/7d45f09730f7c163b28ccd1401392dc064b3cd96.roa
File:                     7d45f09730f7c163b28ccd1401392dc064b3cd96.roa (raw, json)
Hash identifier:          hv4OPhk7O5ZPu0YuEVDVlP5Vb8bkh7YGSzX9zKd2Kug=
Subject key identifier:   44:84:24:DC:01:4F:F2:55:90:27:F1:BA:B1:66:91:B5:5F:38:D4:94
Certificate issuer:       /CN=addc265893644938b54a21e410f7b22c5aeab890
Certificate serial:       0B0FF0
Authority key identifier: 06:3D:B0:64:CC:63:CE:97:AF:B5:F0:3B:B6:DF:C9:FE:95:E2:38:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/addc265893644938b54a21e410f7b22c5aeab890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/7d45f09730f7c163b28ccd1401392dc064b3cd96.roa
Signing time:             Mon 02 Oct 2023 23:23:24 +0000
ROA not before:           Sun 01 Oct 2023 23:23:24 +0000
ROA not after:            Fri 03 Oct 2025 00:23:24 +0000
asID:                     266884
IP address blocks:        45.160.200.0/22 maxlen: 24
                          2803:6a0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724976 (0xb0ff0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=addc265893644938b54a21e410f7b22c5aeab890
        Validity
            Not Before: Oct  1 23:23:24 2023 GMT
            Not After : Oct  3 00:23:24 2025 GMT
        Subject: CN=7d45f09730f7c163b28ccd1401392dc064b3cd96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:34:43:31:8e:fd:94:96:f7:21:4d:16:93:
                    36:c4:52:f5:b5:21:7c:29:8b:62:bc:ca:b9:e7:e6:
                    2c:38:f6:a6:fa:a7:22:5d:8e:11:81:aa:a9:49:b3:
                    34:32:63:9b:eb:68:02:29:2b:30:4e:78:62:82:e8:
                    21:d2:a4:3d:60:0e:42:e8:dd:91:e7:55:52:51:bb:
                    b9:aa:4f:cd:7c:a8:3a:c7:f0:ee:c7:31:7e:f6:6c:
                    57:4a:88:49:fe:6f:9b:51:68:bb:80:ad:04:55:1a:
                    bd:3e:9f:41:9b:44:49:a9:87:0e:e4:28:bb:02:79:
                    96:5e:5e:64:17:54:3c:25:75:97:f4:d8:b4:73:cb:
                    89:54:5e:f4:c2:23:d4:20:b3:c8:d6:74:41:1d:dd:
                    d0:e3:1e:02:1d:d4:ac:d2:59:e1:3d:91:11:2c:2c:
                    c3:68:01:6a:eb:43:8a:3f:c4:b7:c3:a2:b1:ca:6d:
                    dc:c4:0b:7b:be:91:d5:7f:1e:9a:cd:e8:ce:1a:78:
                    f3:08:8a:20:60:c8:6c:e1:47:9a:b2:b6:37:ad:68:
                    70:09:a7:b9:9b:18:29:3f:6d:2d:e2:63:94:44:42:
                    27:59:e9:64:cf:84:67:c3:50:8b:d2:31:87:2a:42:
                    e1:8e:46:01:05:f4:48:9d:13:c8:b0:3a:7b:17:82:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:84:24:DC:01:4F:F2:55:90:27:F1:BA:B1:66:91:B5:5F:38:D4:94
            X509v3 Authority Key Identifier:
                keyid:06:3D:B0:64:CC:63:CE:97:AF:B5:F0:3B:B6:DF:C9:FE:95:E2:38:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/addc265893644938b54a21e410f7b22c5aeab890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/7d45f09730f7c163b28ccd1401392dc064b3cd96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/addc265893644938b54a21e410f7b22c5aeab890.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.200.0/22
                IPv6:
                  2803:6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:3e:b8:eb:4a:67:e5:a0:79:b8:bc:44:c2:f3:19:c7:ed:2d:
         ef:8c:11:11:79:c3:81:e1:44:c6:de:f2:45:34:f0:a3:f7:24:
         06:ff:cb:f2:af:9c:67:c7:83:36:e8:84:ec:9e:a2:e4:5f:e4:
         e4:d2:ff:43:77:69:a9:92:66:c8:e7:62:38:2c:45:80:67:60:
         36:c5:61:22:c0:31:63:9b:a3:fe:97:62:ab:53:d7:20:60:25:
         26:12:fe:02:ff:5e:7f:3a:ef:3e:34:d7:44:fc:68:8f:50:57:
         49:5b:06:38:a5:4e:26:b1:d5:d7:9b:e6:bd:22:83:5d:77:4b:
         30:72:a1:4c:e7:7d:44:b0:f3:18:53:08:1f:93:40:13:9a:6a:
         e5:63:23:2d:a3:97:45:61:10:1c:ae:2f:57:9d:60:af:86:e7:
         89:53:fe:8e:57:70:c1:61:e3:d1:39:3a:c1:ad:03:ff:0f:6a:
         12:f4:35:24:3a:ca:15:17:07:35:9d:e7:1b:58:f9:6f:bf:88:
         12:87:e5:e1:64:ff:2e:de:eb:5d:75:9a:cb:82:cc:c7:90:84:
         7c:ad:a5:dc:c8:0c:45:4e:98:1e:a7:82:97:76:aa:0a:60:7a:
         28:d5:d0:bd:9f:85:4b:4e:a1:29:2f:cd:b5:20:f4:91:9f:b6:
         f1:47:dc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 02:21:31 2023 by rpki-client on console-ams.rpki-client.org