Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/316cd7080c2516bf523f7b3c3bc2b256257ac8c4.roa
File:                     316cd7080c2516bf523f7b3c3bc2b256257ac8c4.roa (raw, json)
Hash identifier:          UWTKHzTIX501Saxddd1q4xh9ZoY84q3PgmR90MO3kHI=
Subject key identifier:   6C:48:1C:32:7D:BC:2E:F8:63:18:EC:4A:89:35:69:F6:FB:2E:4A:FB
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       290993
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/316cd7080c2516bf523f7b3c3bc2b256257ac8c4.roa
Signing time:             Fri 05 Apr 2024 19:44:13 +0000
ROA not before:           Fri 05 Apr 2024 19:44:13 +0000
ROA not after:            Sun 05 Apr 2026 19:44:13 +0000
asID:                     52468
IP address blocks:        190.60.112.104/30 maxlen: 30
                          190.60.113.36/30 maxlen: 30
                          190.60.113.48/29 maxlen: 29
                          190.60.116.92/30 maxlen: 30
                          190.60.193.216/30 maxlen: 30
                          190.60.200.24/29 maxlen: 29
                          190.60.203.136/29 maxlen: 29
                          190.60.243.96/28 maxlen: 28
                          190.60.243.128/28 maxlen: 28
                          190.60.243.144/29 maxlen: 29
                          200.91.204.148/30 maxlen: 30
                          200.91.204.152/29 maxlen: 29
                          200.91.204.168/29 maxlen: 29
                          200.91.204.180/30 maxlen: 30

Validation:               Failed, certificate revoked on Fri 05 Apr 2024 21:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2689427 (0x290993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Apr  5 19:44:13 2024 GMT
            Not After : Apr  5 19:44:13 2026 GMT
        Subject: CN=316cd7080c2516bf523f7b3c3bc2b256257ac8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bf:36:94:88:7a:cb:58:5c:72:5d:04:ca:4f:
                    fe:c3:93:20:67:f1:13:df:5f:5a:b8:40:92:d7:ac:
                    18:84:5c:ad:b1:cc:ae:e2:88:6a:46:f1:f6:6a:37:
                    12:99:90:43:6d:10:77:ba:15:f3:9f:a1:42:29:fb:
                    16:98:51:5a:45:5d:07:ab:4a:72:ba:a7:bf:4c:a5:
                    fe:9c:ae:ab:36:ee:19:b9:fc:6d:9f:09:6b:4a:c3:
                    c5:8b:15:24:68:f5:89:62:4a:a4:31:c1:ca:0d:17:
                    75:25:75:76:35:99:5e:21:c1:34:d9:d5:d9:74:c2:
                    91:e0:5f:40:a8:01:e7:98:7f:01:b4:7e:fb:b3:f3:
                    f4:56:34:ac:73:18:aa:56:1e:78:bf:c0:87:25:ca:
                    2c:dd:6c:cc:84:a8:ee:e0:36:68:d7:a5:d6:30:d2:
                    9f:ff:12:c0:c9:d0:8c:65:53:7d:06:05:26:59:50:
                    ae:15:ed:10:5f:8c:03:5a:e0:1e:3e:99:42:ef:d3:
                    d0:6c:43:37:89:af:02:f7:03:2d:f9:68:db:bc:81:
                    a6:2b:db:d0:74:4d:10:0e:0d:5b:3b:98:74:9f:5c:
                    da:c6:30:9d:5a:5e:c5:e3:2c:1e:8a:a0:cc:04:51:
                    19:96:c0:80:42:97:8c:5d:8c:08:33:ba:4c:c8:10:
                    a2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:48:1C:32:7D:BC:2E:F8:63:18:EC:4A:89:35:69:F6:FB:2E:4A:FB
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/316cd7080c2516bf523f7b3c3bc2b256257ac8c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.112.104/30
                  190.60.113.36/30
                  190.60.113.48/29
                  190.60.116.92/30
                  190.60.193.216/30
                  190.60.200.24/29
                  190.60.203.136/29
                  190.60.243.96/28
                  190.60.243.128-190.60.243.151
                  200.91.204.148-200.91.204.159
                  200.91.204.168/29
                  200.91.204.180/30

    Signature Algorithm: sha256WithRSAEncryption
         e0:f5:74:f1:f5:3e:31:ee:0d:71:c2:c5:3d:43:2d:5b:63:da:
         91:6f:6a:50:35:c4:5f:4b:79:17:85:d3:16:59:be:9d:9d:2b:
         d8:c6:31:ab:ea:96:5f:7b:ce:50:0e:1f:49:6b:8b:70:73:6b:
         cf:b0:e8:4a:df:f3:01:f1:13:3a:4a:c6:23:30:f7:e6:bb:f8:
         45:f1:59:26:7e:29:56:21:ed:bf:9b:62:48:e0:bc:79:d7:16:
         6a:71:4f:84:ac:01:09:53:99:c6:af:66:86:4e:1f:6b:fe:af:
         ac:e2:8b:80:22:f3:ed:fd:40:ab:5c:bb:8e:4e:08:17:f5:30:
         1e:ca:f6:ae:35:29:56:cc:a6:16:4c:d4:99:ba:ea:ba:4f:31:
         02:7f:54:b8:c4:a4:a0:27:49:e5:6d:ab:e3:ce:09:bf:aa:60:
         d4:5b:4e:15:d2:b6:e6:84:0f:33:cb:06:1b:0e:0b:49:79:32:
         60:4c:68:e0:bf:95:40:0c:08:6a:27:72:ba:c9:83:6d:14:2c:
         3f:39:60:41:91:2d:67:f4:c0:15:42:ee:af:3b:16:77:3e:69:
         a9:94:ec:16:65:ec:92:4f:b2:5c:55:fb:72:6a:79:41:2a:f0:
         78:fe:03:07:d7:62:60:d5:18:fb:08:4f:ba:c6:85:89:97:67:
         f0:e4:02:7a
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDKQmTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMz
NzZjZTk3MzJhN2Y4NDM4YTg3Mjg4NjNkNDI2MjQwNThlMTgzOTAwHhcNMjQwNDA1
MTk0NDEzWhcNMjYwNDA1MTk0NDEzWjAzMTEwLwYDVQQDEygzMTZjZDcwODBjMjUx
NmJmNTIzZjdiM2MzYmMyYjI1NjI1N2FjOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlr82lIh6y1hccl0Eyk/+w5MgZ/ET319auECS16wYhFytscyu
4ohqRvH2ajcSmZBDbRB3uhXzn6FCKfsWmFFaRV0Hq0pyuqe/TKX+nK6rNu4Zufxt
nwlrSsPFixUkaPWJYkqkMcHKDRd1JXV2NZleIcE02dXZdMKR4F9AqAHnmH8BtH77
s/P0VjSscxiqVh54v8CHJcos3WzMhKju4DZo16XWMNKf/xLAydCMZVN9BgUmWVCu
Fe0QX4wDWuAePplC79PQbEM3ia8C9wMt+WjbvIGmK9vQdE0QDg1bO5h0n1zaxjCd
Wl7F4yweiqDMBFEZlsCAQpeMXYwIM7pMyBCiPwIDAQABo4ICuzCCArcwHQYDVR0O
BBYEFGxIHDJ9vC74YxjsSok1afb7Lkr7MB8GA1UdIwQYMBaAFNGmIukxGok3TvdC
nrbrLNQWolSSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzM3NmNl
OTczMmE3Zjg0MzhhODcyODg2M2Q0MjYyNDA1OGUxODM5MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjdlMmNiY2ItNGUxZS00NDUxLWJhOWYtYjgzOWFj
YjVhNzVmLzMxNmNkNzA4MGMyNTE2YmY1MjNmN2IzYzNiYzJiMjU2MjU3YWM4YzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iN2UyY2JjYi00ZTFlLTQ0NTEtYmE5Zi1iODM5
YWNiNWE3NWYvYzM3NmNlOTczMmE3Zjg0MzhhODcyODg2M2Q0MjYyNDA1OGUxODM5
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB/BggrBgEFBQcBBwEB/wRw
MG4wbAQCAAEwZgMFAr48cGgDBQK+PHEkAwUDvjxxMAMFAr48dFwDBQK+PMHYAwUD
vjzIGAMFA748y4gDBQS+PPNgMA4DBQe+PPOAAwUDvjzzkDAOAwUCyFvMlAMFBchb
zIADBQPIW8yoAwUCyFvMtDANBgkqhkiG9w0BAQsFAAOCAQEA4PV08fU+Me4NccLF
PUMtW2PakW9qUDXEX0t5F4XTFlm+nZ0r2MYxq+qWX3vOUA4fSWuLcHNrz7DoSt/z
AfETOkrGIzD35rv4RfFZJn4pViHtv5tiSOC8edcWanFPhKwBCVOZxq9mhk4fa/6v
rOKLgCLz7f1Aq1y7jk4IF/UwHsr2rjUpVsymFkzUmbrquk8xAn9UuMSkoCdJ5W2r
484Jv6pg1FtOFdK25oQPM8sGGw4LSXkyYExo4L+VQAwIaidyusmDbRQsPzlgQZEt
Z/TAFULurzsWdz5pqZTsFmXskk+yXFX7cmp5QSrweP4DB9diYNUY+whPusaFiZdn
8OQCeg==
-----END CERTIFICATE-----
Generated at Sat Apr 6 06:04:25 2024 by rpki-client on console.sobornost.net