Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136352e302f32342d3234203d3e20323731383631.roa
File:                     34352e3137312e3136352e302f32342d3234203d3e20323731383631.roa (raw, json)
Hash identifier:          IoGpWkofJOmLBBclQIch/2Y+ZsWvq3aGe68ZA1lv4kk=
Subject key identifier:   59:2F:EE:54:BD:FD:1D:D3:D7:35:99:76:3A:48:84:4D:55:3F:B6:E2
Certificate issuer:       /CN=A6E3E992F10C16F74B23F741B96CFA7F84656F28
Certificate serial:       72AFAAEC4BBE8A4A14DAE3CB890CB0AA1B677056
Authority key identifier: A6:E3:E9:92:F1:0C:16:F7:4B:23:F7:41:B9:6C:FA:7F:84:65:6F:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136352e302f32342d3234203d3e20323731383631.roa
Signing time:             Tue 12 Mar 2024 16:05:00 +0000
ROA not before:           Tue 12 Mar 2024 16:00:00 +0000
ROA not after:            Tue 11 Mar 2025 16:05:00 +0000
asID:                     271861
IP address blocks:        45.171.165.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 21:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:af:aa:ec:4b:be:8a:4a:14:da:e3:cb:89:0c:b0:aa:1b:67:70:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E3E992F10C16F74B23F741B96CFA7F84656F28
        Validity
            Not Before: Mar 12 16:00:00 2024 GMT
            Not After : Mar 11 16:05:00 2025 GMT
        Subject: CN=592FEE54BDFD1DD3D73599763A48844D553FB6E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e9:8b:1e:93:92:f0:e9:21:6b:fc:a4:ba:25:
                    b9:bf:c9:27:e1:88:68:14:54:20:4f:1c:ed:1b:c5:
                    3e:7c:33:22:51:2e:13:78:fc:f4:77:70:d9:60:3f:
                    3d:1b:41:ed:4f:4b:61:10:c3:bb:91:d5:97:48:34:
                    07:d4:e9:a5:b5:6a:ce:4e:70:a3:22:99:19:c8:bc:
                    ea:46:9d:93:03:10:0e:96:d6:f6:f3:96:e0:a4:ab:
                    13:a5:ec:48:70:a3:fb:a1:96:52:ae:e8:52:9a:1f:
                    42:19:db:12:07:47:b2:20:52:52:64:37:be:f3:38:
                    91:0c:89:b4:a0:65:d9:76:67:a6:03:ed:8a:d2:47:
                    0d:67:59:f5:7c:e2:01:ea:ab:fc:35:dc:1e:14:87:
                    ce:1f:80:49:71:07:47:ab:58:a2:92:8f:88:0a:e6:
                    20:89:82:46:4d:7e:b9:b6:28:ae:9b:e1:cc:08:46:
                    32:43:39:ac:9d:12:a5:bd:a7:50:74:6d:98:22:27:
                    ee:21:42:35:7a:6a:ef:f6:98:b3:11:3a:3a:82:3a:
                    2d:96:e6:6e:73:f3:9e:49:d2:6b:c8:17:b3:3b:85:
                    1d:c4:ef:b1:e5:86:40:88:19:fb:7c:1b:ec:53:e0:
                    fe:b6:56:de:58:4f:4f:ad:7c:c4:74:59:d8:9d:94:
                    0d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2F:EE:54:BD:FD:1D:D3:D7:35:99:76:3A:48:84:4D:55:3F:B6:E2
            X509v3 Authority Key Identifier:
                keyid:A6:E3:E9:92:F1:0C:16:F7:4B:23:F7:41:B9:6C:FA:7F:84:65:6F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136352e302f32342d3234203d3e20323731383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:15:fd:03:e1:f7:66:05:6b:11:7a:6c:3b:a8:05:8c:a4:62:
         50:da:d1:f1:1c:b4:4e:20:26:3c:d6:3e:92:87:7a:fc:66:c5:
         3c:00:bc:79:90:39:33:cd:cc:aa:f5:20:58:07:20:8f:95:9b:
         e6:07:32:9f:49:e0:01:cf:44:da:4b:44:bc:6d:01:22:ac:0d:
         e5:37:bb:09:e4:5a:4c:3d:13:ee:fe:80:13:6c:d1:f0:d3:93:
         95:04:af:7c:3d:e3:a0:8a:0f:9d:da:cb:3e:3a:82:a0:33:d9:
         f9:a3:61:17:36:2b:69:be:6b:b9:90:ef:15:8b:02:e9:a6:24:
         ef:de:61:41:36:b1:34:b6:6f:66:3e:68:ab:bd:1d:41:3c:8c:
         1b:a7:2f:5b:1a:75:13:47:1b:1a:fd:9d:43:7c:70:ef:5b:0f:
         a7:57:c6:5b:17:9c:e8:6a:e2:c8:49:a9:2f:e1:04:44:1d:cd:
         83:98:d1:d7:b7:63:b9:d5:5d:ea:8e:4f:be:5a:a4:34:fe:5e:
         89:d2:4a:89:48:21:9e:bd:18:01:b9:2f:af:6a:9c:a5:b3:69:
         2b:1b:bc:c7:47:77:3f:5d:a6:b1:67:ac:55:dd:5a:22:57:ed:
         19:2f:3a:b6:01:50:47:d1:83:0e:54:90:ad:88:e1:69:ae:81:
         d4:c0:3a:04
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcq+q7Eu+ikoU2uPLiQywqhtncFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTZFM0U5OTJGMTBDMTZGNzRCMjNGNzQxQjk2Q0ZBN0Y4
NDY1NkYyODAeFw0yNDAzMTIxNjAwMDBaFw0yNTAzMTExNjA1MDBaMDMxMTAvBgNV
BAMTKDU5MkZFRTU0QkRGRDFERDNENzM1OTk3NjNBNDg4NDRENTUzRkI2RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa6Ysek5Lw6SFr/KS6Jbm/ySfh
iGgUVCBPHO0bxT58MyJRLhN4/PR3cNlgPz0bQe1PS2EQw7uR1ZdINAfU6aW1as5O
cKMimRnIvOpGnZMDEA6W1vbzluCkqxOl7Ehwo/uhllKu6FKaH0IZ2xIHR7IgUlJk
N77zOJEMibSgZdl2Z6YD7YrSRw1nWfV84gHqq/w13B4Uh84fgElxB0erWKKSj4gK
5iCJgkZNfrm2KK6b4cwIRjJDOaydEqW9p1B0bZgiJ+4hQjV6au/2mLMROjqCOi2W
5m5z855J0mvIF7M7hR3E77HlhkCIGft8G+xT4P62Vt5YT0+tfMR0WdidlA0jAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUWS/uVL39HdPXNZl2OkiETVU/tuIwHwYDVR0j
BBgwFoAUpuPpkvEMFvdLI/dBuWz6f4RlbygwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xODQ1QTU0NkQ1QjBDQUUzNzM0NjczRDI5NDc0NzdBMUI5
N0U1OEUyRUExOTE0Q0FFOUQ5NTRCNkFENzdGM0Y0LzAvQTZFM0U5OTJGMTBDMTZG
NzRCMjNGNzQxQjk2Q0ZBN0Y4NDY1NkYyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNkUzRTk5MkYxMEMxNkY3NEIy
M0Y3NDFCOTZDRkE3Rjg0NjU2RjI4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTg0NUE1NDZENUIwQ0FFMzczNDY3M0QyOTQ3NDc3QTFCOTdFNThFMkVB
MTkxNENBRTlEOTU0QjZBRDc3RjNGNC8wLzM0MzUyZTMxMzczMTJlMzEzNjM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzgzNjMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaul
MA0GCSqGSIb3DQEBCwUAA4IBAQBQFf0D4fdmBWsRemw7qAWMpGJQ2tHxHLROICY8
1j6Sh3r8ZsU8ALx5kDkzzcyq9SBYByCPlZvmBzKfSeABz0TaS0S8bQEirA3lN7sJ
5FpMPRPu/oATbNHw05OVBK98PeOgig+d2ss+OoKgM9n5o2EXNitpvmu5kO8ViwLp
piTv3mFBNrE0tm9mPmirvR1BPIwbpy9bGnUTRxsa/Z1DfHDvWw+nV8ZbF5zoauLI
Sakv4QREHc2DmNHXt2O51V3qjk++WqQ0/l6J0kqJSCGevRgBuS+vapyls2krG7zH
R3c/XaaxZ6xV3VoiV+0ZLzq2AVBH0YMOVJCtiOFproHUwDoE
-----END CERTIFICATE-----