Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/d741775f457a9a1b312a9062a9cfac93989da7eb.roa
File:                     d741775f457a9a1b312a9062a9cfac93989da7eb.roa (raw, json)
Hash identifier:          If26jzb4IRjDDqyo9lqvqwt+Ouub9zcbaLuKwqa7U58=
Subject key identifier:   F3:C3:8C:D7:6E:CC:75:02:94:00:2B:C5:01:56:A0:8A:15:2E:AD:87
Certificate issuer:       /CN=992fc30e4ae72d0bf9ff0f801bf4718ce1867356
Certificate serial:       16E85A
Authority key identifier: 42:FE:70:36:F9:4C:D2:6F:3D:77:69:DB:F5:0D:EF:C0:51:DC:0E:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/992fc30e4ae72d0bf9ff0f801bf4718ce1867356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/d741775f457a9a1b312a9062a9cfac93989da7eb.roa
Signing time:             Wed 06 Apr 2022 13:10:11 +0000
ROA not before:           Wed 06 Apr 2022 03:00:00 +0000
ROA not after:            Sat 06 Apr 2024 03:00:00 +0000
asID:                     265722
IP address blocks:        45.7.84.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 19:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501274 (0x16e85a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992fc30e4ae72d0bf9ff0f801bf4718ce1867356
        Validity
            Not Before: Apr  6 03:00:00 2022 GMT
            Not After : Apr  6 03:00:00 2024 GMT
        Subject: CN=d741775f457a9a1b312a9062a9cfac93989da7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:81:66:57:ed:5e:00:3c:aa:1d:da:d5:51:24:
                    16:88:21:31:b4:7c:c2:cc:74:95:ca:9c:e8:03:3b:
                    af:7e:21:9c:0c:f8:05:03:55:39:24:b5:da:83:0f:
                    36:95:fe:86:fb:5e:fc:c3:39:92:09:74:97:14:ea:
                    22:39:42:3d:99:d1:a6:c6:f4:f0:e9:97:6e:13:c1:
                    67:d4:0b:7e:36:9f:0e:0d:41:81:df:d2:0c:ae:b2:
                    06:72:c1:f8:2c:6d:98:31:c0:a8:f7:28:be:44:da:
                    3c:4f:8e:69:f8:b9:8a:dc:04:75:51:fb:28:21:bf:
                    24:5b:96:ff:e9:d1:50:e4:01:e7:e6:4b:7e:1f:3c:
                    1a:43:ab:0f:83:21:cf:7b:37:d6:93:aa:0a:13:5b:
                    99:0b:6f:0d:0a:76:71:a0:e1:2e:8d:8e:f7:72:36:
                    10:2d:65:b0:ef:6b:91:3b:0a:3e:9e:bb:a0:a4:b3:
                    eb:9e:92:b6:b1:27:72:d3:8e:41:ce:26:d7:ce:89:
                    d8:74:11:dc:97:85:3d:70:47:eb:28:0a:ea:6d:ff:
                    4d:a7:80:82:27:a8:76:fb:80:8d:4a:35:f0:94:c8:
                    c7:d5:6f:5a:34:7a:5c:6c:72:b8:10:84:21:34:c8:
                    b0:0f:ae:b6:5a:17:9e:7c:38:62:14:d2:b4:d6:18:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C3:8C:D7:6E:CC:75:02:94:00:2B:C5:01:56:A0:8A:15:2E:AD:87
            X509v3 Authority Key Identifier:
                keyid:42:FE:70:36:F9:4C:D2:6F:3D:77:69:DB:F5:0D:EF:C0:51:DC:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/992fc30e4ae72d0bf9ff0f801bf4718ce1867356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/d741775f457a9a1b312a9062a9cfac93989da7eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/992fc30e4ae72d0bf9ff0f801bf4718ce1867356.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:d4:06:5f:2a:1c:6f:48:55:12:70:57:c4:e3:c1:da:ee:70:
         ed:29:a0:37:ba:db:f8:17:cf:56:3b:1c:b3:d5:05:47:24:70:
         10:13:3f:a1:74:cf:79:0f:86:37:1d:61:d7:1e:1e:fd:e1:da:
         6a:79:98:73:95:19:64:c5:6a:b4:33:e3:3e:0e:4b:ea:84:29:
         f2:5a:01:a8:33:58:46:11:52:b2:78:56:4d:ff:cb:9d:e0:5e:
         86:fa:7a:f4:be:11:d1:4d:5a:66:19:65:c8:02:0d:94:ae:80:
         1d:c2:b0:a6:6a:cc:45:a4:96:fd:e2:82:f0:f0:05:50:6f:91:
         b1:20:bc:1d:2b:ff:1f:dc:1c:30:b5:f8:bb:b1:65:36:54:46:
         9b:4d:29:f6:09:3d:b3:f5:4a:08:45:3f:f0:a7:4f:ce:04:c9:
         a9:15:eb:55:58:d1:e3:74:71:b2:88:b6:db:20:a4:23:cb:81:
         6e:19:9b:36:cb:68:be:65:e0:de:b5:0d:76:9d:b0:29:ef:64:
         00:94:9f:47:35:49:f2:15:df:e1:82:8f:1b:fa:9d:9f:2f:aa:
         67:35:8d:55:80:d3:4a:75:e6:c1:23:0d:e4:91:3e:f9:51:86:
         06:54:4f:71:12:26:48:3f:d8:c3:2c:f6:d9:43:dd:e3:ad:ec:
         9e:ef:65:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 22:01:01 2024 by rpki-client on console-fra.rpki-client.org