Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/6f44e467e26f8bd4d514b3051fa499d9959d038d.roa
File:                     6f44e467e26f8bd4d514b3051fa499d9959d038d.roa (raw, json)
Hash identifier:          whNKKu1aAOMIVdIx0AUX+AYCc4z7LvU8/MTCIzE0GPs=
Subject key identifier:   44:FC:3F:44:50:DF:87:74:3E:FE:20:FF:D7:83:3F:4A:9B:4E:3C:EB
Certificate issuer:       /CN=7f0c6ca567a621ac3630c71d89a326071ce724c8
Certificate serial:       14DF32
Authority key identifier: F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f0c6ca567a621ac3630c71d89a326071ce724c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/6f44e467e26f8bd4d514b3051fa499d9959d038d.roa
Signing time:             Tue 25 Jan 2022 17:42:42 +0000
ROA not before:           Tue 25 Jan 2022 03:00:00 +0000
ROA not after:            Thu 25 Jan 2024 03:00:00 +0000
asID:                     266698
IP address blocks:        45.229.73.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Jan 2024 07:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1367858 (0x14df32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f0c6ca567a621ac3630c71d89a326071ce724c8
        Validity
            Not Before: Jan 25 03:00:00 2022 GMT
            Not After : Jan 25 03:00:00 2024 GMT
        Subject: CN=6f44e467e26f8bd4d514b3051fa499d9959d038d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:f7:2d:46:ff:99:9d:28:88:62:8d:1c:6b:
                    37:7e:67:0e:ed:94:06:87:5d:5a:bc:59:54:93:eb:
                    d7:cf:46:48:9d:bf:a8:b1:37:a5:aa:7c:d2:8b:d1:
                    b4:82:68:e5:dd:0f:22:2d:38:55:5a:d9:9a:f8:42:
                    f2:5b:ef:f5:2d:e3:85:f9:6f:09:26:ea:ef:1c:3b:
                    c3:ab:fa:6a:05:f5:5b:8a:d4:99:c5:41:9e:2c:58:
                    62:99:64:66:67:6e:5d:a8:be:7e:01:3d:2c:78:16:
                    54:c2:4f:ea:3f:a6:47:66:1f:68:1d:a0:65:ae:d1:
                    f3:23:69:25:be:63:f3:53:7f:96:01:96:cf:2e:71:
                    35:0d:5a:12:a4:44:ca:50:5a:9e:05:ad:03:43:88:
                    30:d2:0f:f1:52:2f:75:e9:dc:a8:28:2a:bf:fd:51:
                    6e:7a:a0:6b:06:60:1b:3d:d7:4c:1e:15:01:75:e8:
                    87:65:1c:be:a0:bb:e5:1e:36:61:4f:28:bb:e8:f3:
                    05:99:03:86:ba:9c:c7:da:c5:55:34:24:11:8f:84:
                    90:2f:54:8b:26:53:b8:6e:e3:40:c7:ad:76:7d:ce:
                    61:42:d6:6e:2a:4d:0a:30:dc:7c:54:92:3b:59:43:
                    cd:cd:47:21:5e:29:bd:b1:5e:40:da:ae:25:cf:1f:
                    eb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FC:3F:44:50:DF:87:74:3E:FE:20:FF:D7:83:3F:4A:9B:4E:3C:EB
            X509v3 Authority Key Identifier:
                keyid:F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f0c6ca567a621ac3630c71d89a326071ce724c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/6f44e467e26f8bd4d514b3051fa499d9959d038d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/7f0c6ca567a621ac3630c71d89a326071ce724c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:c6:38:01:aa:82:f3:32:66:aa:f8:59:a4:a6:7c:a4:e2:35:
         8c:02:8e:ee:49:01:13:20:dd:7f:40:fd:8c:6e:f1:83:35:21:
         ff:4b:2e:44:5c:a9:ca:c6:3a:07:10:fb:dc:2b:1b:0e:16:23:
         7e:97:81:1d:64:23:d0:3c:27:bd:43:24:d0:4d:ba:e1:76:73:
         74:9d:1d:fe:64:7d:1e:f2:7e:1b:26:7c:34:33:a0:59:01:c5:
         d9:59:37:ce:ba:17:75:d6:c0:e5:0a:93:e0:00:78:2d:bb:3d:
         9c:ee:a0:56:4f:38:af:a9:d6:6f:cf:a2:81:6c:f2:fe:ad:b8:
         96:ae:7b:bf:7f:02:46:1e:7f:85:d0:bb:c4:a5:66:65:c3:be:
         df:74:b9:7b:88:f7:4f:47:39:b3:82:81:bf:d2:78:85:8c:29:
         b8:9f:05:ff:6b:de:11:d4:7a:33:e0:a5:0e:7b:21:cf:d9:bd:
         79:b3:e3:80:e3:13:28:91:41:52:5d:75:6d:a3:9f:2c:49:7e:
         26:f1:52:e5:06:24:ab:42:61:43:cf:01:bc:55:e9:18:e8:9e:
         b9:c7:8a:2d:2e:b9:6f:ec:cd:99:74:b8:4c:31:d4:e4:a2:83:
         1a:9e:78:2b:a4:63:47:55:a0:98:53:8f:e0:ad:f9:ee:93:2b:
         f3:d8:14:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 24 08:29:58 2024 by rpki-client on console-ams.rpki-client.org