Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132322e302f32342d3234203d3e203531323032.roa
File:                     34352e3233342e3132322e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          uVXprRvlqUdjAU0ixjqbPMOsk8vbx8Q/VG9g5JZwqWk=
Subject key identifier:   4D:27:42:18:CF:0B:AC:29:62:40:14:3C:53:F5:0C:30:81:45:7B:B1
Certificate issuer:       /CN=E5E5F55E39001EF24D658430EB3A500D80E40348
Certificate serial:       3855611EA6198833C2E2ADD796A43D7E5C534289
Authority key identifier: E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132322e302f32342d3234203d3e203531323032.roa
Signing time:             Sat 13 Jul 2024 16:50:01 +0000
ROA not before:           Sat 13 Jul 2024 16:45:01 +0000
ROA not after:            Sat 12 Jul 2025 16:50:01 +0000
asID:                     51202
IP address blocks:        45.234.122.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:55:61:1e:a6:19:88:33:c2:e2:ad:d7:96:a4:3d:7e:5c:53:42:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5F55E39001EF24D658430EB3A500D80E40348
        Validity
            Not Before: Jul 13 16:45:01 2024 GMT
            Not After : Jul 12 16:50:01 2025 GMT
        Subject: CN=4D274218CF0BAC296240143C53F50C3081457BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:87:1a:87:98:37:a1:c2:5c:83:51:d7:0f:23:
                    09:b0:33:98:f5:b9:89:28:c3:ca:cd:d3:46:cb:3d:
                    2e:db:98:6e:8d:75:f2:9c:30:7a:32:b7:7b:ec:b1:
                    c6:27:6e:c3:d2:45:47:fc:f9:ae:78:34:4a:7c:1e:
                    eb:29:8a:12:e5:2e:bc:4c:22:f1:66:e2:8e:c5:33:
                    8f:79:bd:bd:f0:6a:1c:c5:cd:1c:df:b6:44:22:e1:
                    c0:b5:be:af:97:96:77:3b:b7:a1:fc:51:19:93:5b:
                    a7:88:ec:ac:bf:8b:ba:e1:79:96:72:fc:de:44:bb:
                    70:91:8f:dd:ec:9b:7d:07:c0:77:7c:a7:32:c8:46:
                    5b:f0:6b:74:ba:ab:ed:a4:30:ed:2d:8f:9a:83:88:
                    b5:b0:32:52:52:58:10:99:0c:2c:5b:46:27:b7:f9:
                    df:e2:0e:c0:7e:94:8b:09:91:98:00:6d:3c:48:13:
                    14:1d:85:13:46:6e:fc:89:26:fd:de:61:56:05:09:
                    98:50:79:86:6d:98:b3:b4:72:c7:93:7e:4a:c1:58:
                    58:f7:99:a1:ec:43:f5:04:e3:df:04:ad:81:82:09:
                    0c:a9:5a:7f:db:6e:a8:f8:7e:0b:5f:59:a2:9e:24:
                    9b:5b:23:31:ba:42:0f:46:18:e8:e8:ed:47:ae:05:
                    83:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:27:42:18:CF:0B:AC:29:62:40:14:3C:53:F5:0C:30:81:45:7B:B1
            X509v3 Authority Key Identifier:
                keyid:E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132322e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:11:77:14:28:f4:3a:d5:d4:4d:09:d9:dd:7a:30:a4:ac:b1:
         f9:8c:01:72:4d:3e:74:6e:bf:21:6b:24:40:2e:cb:c9:c4:f9:
         d0:fd:76:2e:71:4e:23:82:4b:c7:6a:54:c3:60:06:37:af:57:
         06:12:5e:5d:3d:cf:8d:2b:65:68:29:1e:cb:68:f8:b0:77:24:
         8a:a5:d0:29:6d:23:f6:8f:72:a0:25:4d:a7:79:2d:6e:ef:c6:
         af:e8:33:4d:db:92:10:d0:22:83:ff:29:98:14:e6:a7:79:24:
         81:f0:3e:39:96:76:5b:c0:02:06:6c:e9:fd:68:53:0a:b3:73:
         30:87:23:a4:88:92:0c:ab:8a:ce:31:c1:6f:1e:60:db:c2:41:
         aa:cf:be:66:f4:b1:81:39:c1:0f:22:4d:77:75:4f:cd:2f:77:
         75:3f:89:51:30:a8:dd:db:c3:d1:1e:3f:bb:0f:e7:33:fd:1e:
         6e:e5:1b:f5:fe:2a:10:e3:63:a5:6c:33:89:dc:b8:9a:98:14:
         32:47:81:69:71:9b:6d:7a:8a:5b:92:e4:d5:55:41:1d:e8:1c:
         a9:51:a6:55:15:33:30:6a:d8:c7:98:85:09:0a:e2:1b:92:e3:
         91:26:0e:15:20:3a:56:81:6a:a7:6b:1c:a4:be:d0:aa:02:d3:
         a0:9a:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----