Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234362e302f32342d3234203d3e20323636383035.roa
File:                     34352e3233362e3234362e302f32342d3234203d3e20323636383035.roa (raw, json)
Hash identifier:          OMFNqvdL3Zo2ovF00lZyR5LF/ok/cXaz9NuexeaGBMs=
Subject key identifier:   0D:9C:F0:67:85:23:AD:9C:60:A4:11:2D:81:C8:1B:00:5C:A8:18:7F
Certificate issuer:       /CN=8B5877089EE5620C180446F9B30B225C6209D812
Certificate serial:       7DED54F5541A1667C5BA23E471217B5EF3981338
Authority key identifier: 8B:58:77:08:9E:E5:62:0C:18:04:46:F9:B3:0B:22:5C:62:09:D8:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234362e302f32342d3234203d3e20323636383035.roa
Signing time:             Fri 25 Oct 2024 19:15:00 +0000
ROA not before:           Fri 25 Oct 2024 19:10:00 +0000
ROA not after:            Fri 24 Oct 2025 19:15:00 +0000
asID:                     266805
IP address blocks:        45.236.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 06:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ed:54:f5:54:1a:16:67:c5:ba:23:e4:71:21:7b:5e:f3:98:13:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5877089EE5620C180446F9B30B225C6209D812
        Validity
            Not Before: Oct 25 19:10:00 2024 GMT
            Not After : Oct 24 19:15:00 2025 GMT
        Subject: CN=0D9CF0678523AD9C60A4112D81C81B005CA8187F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:55:93:f4:b7:59:8d:53:56:c7:cb:b3:65:
                    81:62:b2:22:d3:be:17:07:5a:1f:27:da:a6:ad:51:
                    5d:72:aa:1e:40:ab:02:b5:c8:11:b7:f5:d9:c0:f6:
                    1f:86:df:42:a8:77:0a:af:5b:c3:0c:42:08:4d:c2:
                    63:d9:b2:d2:df:f5:dd:b2:ba:72:c6:11:84:cd:a4:
                    dd:36:2b:17:bd:7d:20:4b:31:52:d8:bf:74:1b:94:
                    34:2f:9f:fe:08:ce:5e:36:91:9f:e8:ed:99:55:d2:
                    a7:1c:f2:b9:6a:2d:1d:8a:a3:ed:50:d0:66:d7:e6:
                    eb:04:5c:79:89:6a:36:8a:41:01:d9:c3:a7:fb:42:
                    7d:48:f3:08:fa:41:34:91:49:c8:01:3d:79:89:ef:
                    1c:9d:54:46:8e:26:8a:94:b3:03:c2:c3:a6:99:6e:
                    9d:8d:12:a4:e1:09:c5:10:a5:65:2f:22:3e:00:e3:
                    57:bc:82:09:73:df:c7:78:ba:2b:45:2d:cf:30:d6:
                    8c:b8:ca:33:e6:31:99:9a:af:9d:d7:80:ca:c1:a0:
                    db:bf:f7:2d:c7:6e:b0:9f:2d:ae:3d:b3:4b:3c:34:
                    0e:c3:b8:4c:49:d1:37:f1:a6:41:99:38:fd:10:f1:
                    fb:d6:34:64:04:8f:9f:89:e1:69:eb:77:a3:42:42:
                    18:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9C:F0:67:85:23:AD:9C:60:A4:11:2D:81:C8:1B:00:5C:A8:18:7F
            X509v3 Authority Key Identifier:
                keyid:8B:58:77:08:9E:E5:62:0C:18:04:46:F9:B3:0B:22:5C:62:09:D8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/8B5877089EE5620C180446F9B30B225C6209D812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234362e302f32342d3234203d3e20323636383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:11:14:e5:57:d3:2f:aa:cc:44:97:b1:9a:be:73:7a:ff:58:
         14:e9:aa:e0:01:35:c0:4f:d8:e2:fc:7b:b2:b9:a5:98:09:7d:
         7f:6a:76:b8:63:a4:2a:4f:37:39:2a:d6:d4:07:5c:69:1b:06:
         2a:0d:7a:8d:ee:c6:98:84:ab:06:82:9c:7d:6a:d5:ee:75:e0:
         a9:9d:41:85:75:15:6c:c3:85:5c:7a:37:c7:d6:99:7a:d5:3e:
         9e:5f:88:65:be:38:ac:86:94:01:1e:68:82:80:e5:1d:9e:a0:
         c9:dd:3b:2f:4f:a0:33:25:b6:c4:86:8e:a9:b5:b5:22:46:e7:
         83:8e:a1:3f:7d:f8:bb:69:32:9d:7e:ca:6a:0e:79:d8:db:bd:
         4c:66:85:63:2a:9a:05:2e:ab:af:04:19:85:86:d8:a6:64:19:
         77:13:c8:d9:b9:3a:37:76:ef:13:e0:31:40:3c:4f:43:12:a3:
         51:e5:aa:f7:98:da:81:b5:a0:d8:de:10:f8:1a:d3:1e:39:a7:
         66:fa:79:70:7d:68:1f:14:95:f3:c8:ef:1f:73:44:8b:49:81:
         38:b1:0c:77:64:46:fb:62:b7:51:47:8b:43:de:29:4c:4a:66:
         2f:1c:94:cd:89:c4:ae:b2:d3:72:49:c7:27:6e:23:8d:70:40:
         76:42:10:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----