Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/45b6a69ffa9d97090db0d0084b88f6d56bb4d0ef.roa
File:                     45b6a69ffa9d97090db0d0084b88f6d56bb4d0ef.roa (raw, json)
Hash identifier:          oTvPPruLHvzEKYGPocG/xt+cxQ3rEpo+Lb6bq8SvbHU=
Subject key identifier:   10:B3:8A:F6:07:BF:DA:CB:56:17:F5:87:2A:87:8A:0A:E3:FF:97:3C
Certificate issuer:       /CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
Certificate serial:       16F1A3
Authority key identifier: 76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/45b6a69ffa9d97090db0d0084b88f6d56bb4d0ef.roa
Signing time:             Wed 20 Apr 2022 15:54:21 +0000
ROA not before:           Mon 13 Dec 2021 03:00:00 +0000
ROA not after:            Wed 31 Dec 2025 03:00:00 +0000
asID:                     26617
IP address blocks:        186.32.99.0/24 maxlen: 24
                          186.32.100.0/24 maxlen: 24
                          186.32.101.0/24 maxlen: 24
                          186.32.102.0/24 maxlen: 24
                          186.32.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1503651 (0x16f1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
        Validity
            Not Before: Dec 13 03:00:00 2021 GMT
            Not After : Dec 31 03:00:00 2025 GMT
        Subject: CN=45b6a69ffa9d97090db0d0084b88f6d56bb4d0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:97:3d:a6:0b:04:c0:42:04:07:88:a9:aa:
                    3a:c4:3d:34:f1:a3:72:5b:b1:16:64:5c:af:d6:8c:
                    9f:d4:09:88:0b:d6:a9:1e:2c:99:6e:52:ca:18:61:
                    8e:0b:24:d0:2c:98:42:14:72:f3:95:88:27:e0:16:
                    5e:0b:34:95:05:63:9d:ca:c5:ea:57:69:95:0d:9d:
                    02:09:75:7a:8f:c8:eb:80:aa:ab:2c:60:56:2d:0e:
                    0e:d8:a3:24:12:ff:85:09:be:2b:63:fa:0f:6c:f3:
                    bc:85:3b:2f:a2:d0:f8:55:01:3d:65:09:b3:86:19:
                    d1:72:98:89:b7:b5:88:01:1d:78:e8:46:19:bc:03:
                    4b:3f:31:33:ac:86:8d:46:98:da:61:0e:5e:e6:2d:
                    05:c6:23:cf:18:e1:60:5e:28:13:c7:99:67:fc:da:
                    a8:5e:07:e8:b2:72:f4:51:3d:55:67:b5:22:2f:85:
                    c3:9b:dd:ef:e4:7b:db:aa:65:94:e9:77:a8:97:3d:
                    d1:5c:62:f2:d3:3a:ec:22:e2:a3:e6:ee:2d:a8:2a:
                    47:c8:00:00:6d:f3:c9:11:03:ec:ee:9e:fd:8a:82:
                    38:02:65:a1:67:85:70:02:61:7e:a4:0f:ff:a8:ab:
                    5c:a8:33:df:a1:8e:be:c5:14:d7:69:d7:28:c2:ad:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B3:8A:F6:07:BF:DA:CB:56:17:F5:87:2A:87:8A:0A:E3:FF:97:3C
            X509v3 Authority Key Identifier:
                keyid:76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/45b6a69ffa9d97090db0d0084b88f6d56bb4d0ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/eb6de066f1c70b82f75b54d19209c0e03f1f0279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.99.0-186.32.103.255

    Signature Algorithm: sha256WithRSAEncryption
         10:71:86:70:07:bf:25:21:26:4f:37:b8:69:54:e4:54:94:55:
         04:67:eb:ec:f8:13:4f:2a:80:d7:16:bd:ca:29:7f:23:03:b4:
         f1:9d:dc:87:8f:7a:03:4b:e6:69:15:e4:52:06:8a:a7:71:4c:
         49:7a:cd:89:86:4e:d6:c5:9c:c8:07:de:91:22:d4:57:e2:39:
         30:56:6e:9b:db:7b:af:ac:85:16:5f:41:8d:94:9d:ce:a9:ad:
         5f:02:62:ee:19:41:df:bd:40:42:c1:e5:9e:ba:fc:bc:8b:f6:
         b4:ff:d8:bb:1d:0d:1b:6c:00:7f:fb:a4:d1:f6:cf:bf:6a:e6:
         7f:2b:7f:0f:50:eb:4e:5b:ec:db:2d:7e:69:5f:a8:ac:4f:1e:
         ac:1d:86:6b:71:0e:c7:10:15:a6:73:1b:01:0a:d6:d1:69:bf:
         1a:8a:1c:4e:41:12:a8:2d:f6:69:08:f5:f3:b4:af:60:f2:80:
         1e:4c:80:5b:0d:fc:d2:33:fa:a7:24:8e:07:24:ae:76:ba:64:
         0e:22:3b:d2:43:3e:6e:4c:79:03:7b:f2:4a:1f:7c:8b:0a:5c:
         e8:ba:0b:af:2d:a5:ac:8c:b6:f1:0a:53:4d:4a:ce:e2:b0:40:
         e9:6a:37:c6:87:c2:3b:f7:24:68:40:73:73:d6:fa:15:9f:84:
         57:86:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org