Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/b3d9a8d450ac8cbbc644b9e98ddc9ac0248fb6b8.roa
File:                     b3d9a8d450ac8cbbc644b9e98ddc9ac0248fb6b8.roa (raw, json)
Hash identifier:          szwsDQ6pD0YKvHbQhtFhLU1t67aw/y0ic/v5KRSrVYU=
Subject key identifier:   89:C1:F6:D8:3B:7B:FC:4E:62:D4:89:A6:4B:7F:B6:98:1F:A4:30:04
Certificate issuer:       /CN=75414d9f68146acc4abcd9997952be1300ec5196
Certificate serial:       187D
Authority key identifier: 31:DA:E8:BF:21:04:29:09:AE:C7:3D:A0:E3:2F:E4:AB:49:59:1A:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75414d9f68146acc4abcd9997952be1300ec5196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/b3d9a8d450ac8cbbc644b9e98ddc9ac0248fb6b8.roa
Signing time:             Thu 24 Feb 2022 08:30:00 +0000
ROA not before:           Thu 24 Feb 2022 08:30:00 +0000
ROA not after:            Sat 24 Feb 2024 08:30:00 +0000
asID:                     22011
IP address blocks:        201.175.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 24 Feb 2024 08:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6269 (0x187d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75414d9f68146acc4abcd9997952be1300ec5196
        Validity
            Not Before: Feb 24 08:30:00 2022 GMT
            Not After : Feb 24 08:30:00 2024 GMT
        Subject: CN=b3d9a8d450ac8cbbc644b9e98ddc9ac0248fb6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:18:5c:9c:1b:c4:8e:0c:fe:b5:47:8b:ca:
                    c3:32:2b:96:70:61:2a:51:77:d9:52:82:f8:45:05:
                    19:5f:66:23:c6:b7:87:cd:8f:7c:2c:cc:fc:7e:d3:
                    49:9e:d5:40:4b:21:63:68:7c:94:b5:a4:51:d6:77:
                    6e:93:a7:5a:66:67:f0:d4:1f:ac:c4:d6:f9:2d:1b:
                    37:48:8e:a3:5a:c9:aa:c8:5a:21:e2:5b:17:9b:aa:
                    bf:53:74:71:d6:fe:0f:ee:cb:db:36:a3:29:cf:97:
                    73:52:a7:55:f6:4e:0c:af:6f:ca:71:88:75:37:a6:
                    17:a2:bc:74:c1:73:7c:e0:82:ce:34:6d:a0:71:46:
                    1c:98:62:0a:2a:0f:7e:a7:7c:cd:0c:80:f8:c1:d9:
                    b4:31:07:a4:b3:94:5e:c7:bb:6c:26:b3:3f:10:84:
                    f1:77:de:73:b8:8b:63:84:dd:73:82:fe:be:49:8c:
                    07:6a:29:76:fe:01:3a:e1:25:8a:94:2a:40:65:d4:
                    5a:da:60:86:5c:e0:bc:95:7d:ec:b2:39:c1:94:f4:
                    ac:90:22:0d:2d:a0:fc:c5:86:4e:59:93:bd:6c:b2:
                    17:ee:09:2e:26:60:eb:75:c1:63:45:46:f5:e0:17:
                    06:36:aa:ec:e4:18:13:81:53:79:43:46:ce:ed:b9:
                    0d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C1:F6:D8:3B:7B:FC:4E:62:D4:89:A6:4B:7F:B6:98:1F:A4:30:04
            X509v3 Authority Key Identifier:
                keyid:31:DA:E8:BF:21:04:29:09:AE:C7:3D:A0:E3:2F:E4:AB:49:59:1A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75414d9f68146acc4abcd9997952be1300ec5196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/b3d9a8d450ac8cbbc644b9e98ddc9ac0248fb6b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/75414d9f68146acc4abcd9997952be1300ec5196.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.175.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:87:ff:55:64:1b:93:9e:bd:69:bb:f4:87:76:4f:be:0c:16:
         1c:8c:52:56:3c:ee:f3:14:a1:d6:f2:f5:2a:b1:62:e4:59:fd:
         80:ff:fe:ca:f0:6f:80:2b:bf:42:45:41:4b:00:7b:32:d9:63:
         86:24:20:2f:41:a3:6d:c7:14:74:ca:b0:23:d6:cf:50:9d:bc:
         3a:0d:de:d3:af:5f:2b:91:79:c5:82:6d:7c:dc:2a:ab:33:b1:
         5d:68:99:57:0e:c0:c1:2d:eb:22:5f:9a:a0:38:23:61:fd:b5:
         77:62:0b:ee:fc:8a:d8:d1:9b:d1:32:8a:ea:20:66:94:38:b5:
         81:ce:2a:14:7a:27:ff:3d:59:0d:23:f7:a5:73:36:ce:0a:d1:
         40:37:e4:ae:7c:02:04:a8:b2:c6:41:9c:22:f1:c6:ac:94:c6:
         11:cc:c0:07:86:d5:fd:6c:d3:5a:c8:3b:5c:f0:b6:38:a9:7a:
         2e:09:58:90:25:c9:98:cb:d0:7a:5d:ba:d5:81:32:fa:40:a2:
         b4:ec:e2:89:1b:ee:2b:8e:5a:ca:b8:f7:0e:55:b0:5c:7f:88:
         80:63:ab:6a:f9:53:00:ea:a4:c9:7d:80:29:89:28:0b:7c:e1:
         13:82:bb:fd:57:03:55:d3:7d:14:22:15:c2:96:9c:0f:fd:2d:
         d0:5d:e9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 12:15:36 2024 by rpki-client on console-ams.rpki-client.org