Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234372e302f32342d3234203d3e20323633373332.roa
File:                     34352e3233362e3234372e302f32342d3234203d3e20323633373332.roa (raw, json)
Hash identifier:          kTZYLRvMQDDmT9qZYcFFHNFsH3FzVVrQp1yQkydfCEk=
Subject key identifier:   06:C7:E5:B3:AF:1E:6E:45:28:7D:69:44:52:A3:A1:96:B2:CA:4D:45
Certificate issuer:       /CN=8B5877089EE5620C180446F9B30B225C6209D812
Certificate serial:       56429A0C2D909383A9AA2960A8D9460A86F587B2
Authority key identifier: 8B:58:77:08:9E:E5:62:0C:18:04:46:F9:B3:0B:22:5C:62:09:D8:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234372e302f32342d3234203d3e20323633373332.roa
Signing time:             Fri 25 Oct 2024 19:15:00 +0000
ROA not before:           Fri 25 Oct 2024 19:10:00 +0000
ROA not after:            Fri 24 Oct 2025 19:15:00 +0000
asID:                     263732
IP address blocks:        45.236.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 06:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:42:9a:0c:2d:90:93:83:a9:aa:29:60:a8:d9:46:0a:86:f5:87:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5877089EE5620C180446F9B30B225C6209D812
        Validity
            Not Before: Oct 25 19:10:00 2024 GMT
            Not After : Oct 24 19:15:00 2025 GMT
        Subject: CN=06C7E5B3AF1E6E45287D694452A3A196B2CA4D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:6c:3f:6d:e9:17:ce:ec:e4:00:7c:ef:36:
                    2c:38:0d:2a:65:6b:9b:95:a4:4d:0b:e3:bd:c1:5c:
                    e4:a2:55:2b:2b:f2:63:5c:9b:92:39:27:e2:34:c3:
                    39:6c:e9:f6:4a:60:72:f1:09:0f:04:d9:a9:a8:b8:
                    7d:08:e0:fe:33:60:64:7d:c7:b7:26:c2:90:f7:4d:
                    c6:c7:a3:2a:6f:4b:b5:c5:55:07:12:61:c0:d6:63:
                    74:6e:11:81:05:5e:49:7a:36:7d:a7:18:3d:48:5c:
                    19:7a:82:05:7a:1d:fe:4a:35:ad:20:17:5f:ae:49:
                    4b:8a:00:20:1e:f7:e1:c7:0a:78:9c:a5:43:34:52:
                    fe:b6:21:dd:41:74:e5:28:75:9b:6d:54:57:1d:6b:
                    b9:f2:ef:43:54:ce:fa:0b:58:25:09:7c:a0:7a:82:
                    aa:33:76:7d:49:84:85:1f:be:13:2c:58:cc:55:4b:
                    24:ab:85:eb:c0:89:1b:c1:b7:a0:57:c0:e2:53:cb:
                    08:4b:0c:a0:3b:e3:ad:24:03:7c:e3:51:df:cd:24:
                    2e:1d:5d:7e:96:fe:7b:4c:3a:45:0f:6b:24:ae:6e:
                    3e:3e:1e:5e:33:28:63:61:3b:ff:a6:6a:d7:a8:07:
                    a2:0c:29:d2:dc:94:0a:df:a6:9a:f6:a6:a0:64:b1:
                    20:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C7:E5:B3:AF:1E:6E:45:28:7D:69:44:52:A3:A1:96:B2:CA:4D:45
            X509v3 Authority Key Identifier:
                keyid:8B:58:77:08:9E:E5:62:0C:18:04:46:F9:B3:0B:22:5C:62:09:D8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/8B5877089EE5620C180446F9B30B225C6209D812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234372e302f32342d3234203d3e20323633373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:5e:31:e2:a0:2e:bb:87:96:29:6f:c2:3d:3b:86:fc:29:f4:
         b1:c7:c1:10:78:9d:85:52:d8:a6:a0:54:01:ff:2f:12:77:4f:
         5a:47:f0:07:b7:a9:bf:27:5d:cb:1b:84:44:06:5d:b8:de:88:
         04:be:19:3a:5f:98:54:37:12:06:da:68:a3:f7:eb:c8:ca:a6:
         66:c8:13:1c:59:6e:0f:e8:31:35:66:df:dc:12:00:95:4a:c1:
         8b:bf:53:1c:7f:7a:de:8b:24:36:18:f1:ac:e7:94:64:68:58:
         8f:eb:70:dd:5f:df:bb:ce:de:3b:64:f3:f7:64:af:cf:b3:34:
         51:6f:4b:e9:5b:fd:2f:aa:5a:66:8b:64:cf:cf:a2:94:78:86:
         07:40:ec:ec:a8:ff:2c:5e:56:f0:7c:26:b3:81:95:73:2d:2a:
         29:15:5d:13:50:68:40:fd:7a:64:1d:fb:aa:b1:3a:ed:13:09:
         dc:99:bc:a6:a1:fb:68:25:a1:a3:5d:c4:a5:c2:84:b0:2f:ff:
         a6:51:5e:2c:63:22:48:27:cc:32:b7:ba:ca:72:47:ff:cf:bd:
         2a:ff:85:ec:fa:0c:0d:82:a2:6a:ad:9e:ca:e5:dc:cf:95:ab:
         9d:cf:eb:8d:b8:ef:5c:e7:85:4c:49:c7:ac:5f:48:88:b6:4a:
         07:37:14:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----