Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/34352e3139302e3139302e302f32332d3234203d3e20323633373530.roa
File:                     34352e3139302e3139302e302f32332d3234203d3e20323633373530.roa (raw, json)
Hash identifier:          Jt3d0cCJ3XYYo6JjY/cIIet5wqdWrypXdGXGZ42erJg=
Subject key identifier:   CF:CC:B3:80:70:0C:69:75:77:27:58:DC:64:83:76:56:79:8F:FD:F9
Certificate issuer:       /CN=66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698
Certificate serial:       0853083E4793D2750B889C393F5F261D61C316C1
Authority key identifier: 66:FF:CE:89:2A:47:04:0F:2D:AB:7D:4D:1A:0B:1B:0B:3C:07:B6:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/34352e3139302e3139302e302f32332d3234203d3e20323633373530.roa
Signing time:             Tue 05 Mar 2024 18:07:15 +0000
ROA not before:           Tue 05 Mar 2024 18:02:15 +0000
ROA not after:            Tue 04 Mar 2025 18:07:15 +0000
asID:                     263750
IP address blocks:        45.190.190.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 20:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:53:08:3e:47:93:d2:75:0b:88:9c:39:3f:5f:26:1d:61:c3:16:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698
        Validity
            Not Before: Mar  5 18:02:15 2024 GMT
            Not After : Mar  4 18:07:15 2025 GMT
        Subject: CN=CFCCB380700C6975772758DC64837656798FFDF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2c:a6:bc:fd:c3:e7:9d:2f:4d:dc:9a:d8:ea:
                    ae:9b:9a:6b:85:de:e3:8b:ee:95:2f:fa:e9:90:47:
                    84:e7:58:4f:bb:61:7a:5f:18:11:24:67:24:51:95:
                    b2:58:16:90:96:33:9d:f4:c9:af:08:85:e8:1b:95:
                    5f:d7:6e:86:ac:3d:4b:a6:91:12:d2:82:5b:39:f8:
                    a9:be:26:f4:ed:39:c7:c6:d1:1c:ca:7c:9c:00:f4:
                    ce:19:28:91:6b:e8:3f:a2:21:be:08:9b:fe:2c:66:
                    d9:90:9f:2a:1a:9e:fc:1b:f4:fc:a7:f4:35:68:99:
                    d8:7c:e9:c7:36:9d:94:f3:f6:a2:1b:b2:91:ef:0c:
                    c7:ea:d5:ae:d2:da:ed:31:b0:33:99:98:19:7d:56:
                    54:d0:df:9f:e5:16:42:8b:84:e3:f3:17:40:5f:1c:
                    0c:87:c0:e7:39:4f:0f:33:d3:c7:36:f0:44:55:b8:
                    33:7f:07:dc:45:28:5d:97:2a:9b:8e:9c:77:a3:a5:
                    47:52:e2:aa:a9:a0:5f:fb:b3:1e:61:45:da:97:48:
                    d6:2d:74:22:d1:2b:9a:22:2f:46:cd:2a:74:81:df:
                    f3:42:cb:76:c9:4f:3a:e8:c4:59:62:aa:8a:eb:03:
                    0a:b7:73:43:a8:1e:6f:0e:13:47:51:2e:6f:d6:7e:
                    f4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CC:B3:80:70:0C:69:75:77:27:58:DC:64:83:76:56:79:8F:FD:F9
            X509v3 Authority Key Identifier:
                keyid:66:FF:CE:89:2A:47:04:0F:2D:AB:7D:4D:1A:0B:1B:0B:3C:07:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/34352e3139302e3139302e302f32332d3234203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:29:93:80:bb:37:18:f6:16:30:81:e2:52:54:6b:6b:a3:a7:
         e7:7e:0c:a1:54:26:e0:ea:d7:43:6b:75:6e:0b:f0:60:87:2f:
         6e:ef:1e:62:43:85:94:85:c0:24:e2:97:af:da:e2:b2:08:5e:
         30:da:45:ab:cd:dc:a5:5c:be:ff:dd:a4:88:ef:3a:0e:5b:23:
         3e:a1:05:cc:b6:63:a9:76:2d:1d:bb:72:c9:38:d6:e0:ce:39:
         8d:53:e4:15:e0:88:eb:bb:b4:be:4b:da:4a:64:23:8d:68:c2:
         fe:af:02:28:38:3a:f6:ef:e3:ab:cc:08:78:b4:b0:01:5f:98:
         e2:49:07:0d:a7:60:99:64:cc:c1:15:48:de:ee:c4:0b:90:be:
         48:bf:8f:0a:78:48:c4:bc:b3:60:fb:2f:9c:6e:57:5d:04:30:
         49:22:90:5c:a9:12:c6:61:1e:99:ee:16:01:da:db:b2:70:c8:
         cf:77:8e:98:64:3a:d8:da:07:95:a9:25:35:60:5f:61:17:4e:
         c1:7e:34:3a:0a:de:6c:7a:e1:f4:58:15:24:be:a8:8d:5d:94:
         a9:05:6a:54:1b:c1:7e:22:a9:c9:dd:55:73:82:62:b5:c4:e2:
         21:94:da:bd:7f:aa:9d:5b:93:74:63:5c:51:73:17:8b:36:30:
         cb:72:87:fc
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCFMIPkeT0nULiJw5P18mHWHDFsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZGRkNFODkyQTQ3MDQwRjJEQUI3RDREMUEwQjFCMEIz
QzA3QjY5ODAeFw0yNDAzMDUxODAyMTVaFw0yNTAzMDQxODA3MTVaMDMxMTAvBgNV
BAMTKENGQ0NCMzgwNzAwQzY5NzU3NzI3NThEQzY0ODM3NjU2Nzk4RkZERjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQLKa8/cPnnS9N3JrY6q6bmmuF
3uOL7pUv+umQR4TnWE+7YXpfGBEkZyRRlbJYFpCWM530ya8IhegblV/XboasPUum
kRLSgls5+Km+JvTtOcfG0RzKfJwA9M4ZKJFr6D+iIb4Im/4sZtmQnyoanvwb9Pyn
9DVomdh86cc2nZTz9qIbspHvDMfq1a7S2u0xsDOZmBl9VlTQ35/lFkKLhOPzF0Bf
HAyHwOc5Tw8z08c28ERVuDN/B9xFKF2XKpuOnHejpUdS4qqpoF/7sx5hRdqXSNYt
dCLRK5oiL0bNKnSB3/NCy3bJTzroxFliqorrAwq3c0OoHm8OE0dRLm/WfvTxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUz8yzgHAMaXV3J1jcZIN2VnmP/fkwHwYDVR0j
BBgwFoAUZv/OiSpHBA8tq31NGgsbCzwHtpgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yODc5Q0ZDMkY2NEY0RjkyQjBGODVEMDlEOTdFRkZFMzM2
Rjg4QUNGODU1MTE1QzAwRUNCQjJBQzRFOUIxQzlCLzAvNjZGRkNFODkyQTQ3MDQw
RjJEQUI3RDREMUEwQjFCMEIzQzA3QjY5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NkZGQ0U4OTJBNDcwNDBGMkRB
QjdENEQxQTBCMUIwQjNDMDdCNjk4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjg3OUNGQzJGNjRGNEY5MkIwRjg1RDA5RDk3RUZGRTMzNkY4OEFDRjg1
NTExNUMwMEVDQkIyQUM0RTlCMUM5Qi8wLzM0MzUyZTMxMzkzMDJlMzEzOTMwMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMzMzczNTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLb6+
MA0GCSqGSIb3DQEBCwUAA4IBAQCkKZOAuzcY9hYwgeJSVGtro6fnfgyhVCbg6tdD
a3VuC/Bghy9u7x5iQ4WUhcAk4pev2uKyCF4w2kWrzdylXL7/3aSI7zoOWyM+oQXM
tmOpdi0du3LJONbgzjmNU+QV4Ijru7S+S9pKZCONaML+rwIoODr27+OrzAh4tLAB
X5jiSQcNp2CZZMzBFUje7sQLkL5Iv48KeEjEvLNg+y+cblddBDBJIpBcqRLGYR6Z
7hYB2tuycMjPd46YZDrY2geVqSU1YF9hF07BfjQ6Ct5seuH0WBUkvqiNXZSpBWpU
G8F+IqnJ3VVzgmK1xOIhlNq9f6qdW5N0Y1xRcxeLNjDLcof8
-----END CERTIFICATE-----
Generated at Fri Jun 28 00:03:40 2024 by rpki-client on console-ams.rpki-client.org