Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/34352e3233392e38342e302f32322d3234203d3e20323636383733.roa
File:                     34352e3233392e38342e302f32322d3234203d3e20323636383733.roa (raw, json)
Hash identifier:          GKvy2KB6dKQg1Z8yJ7Sgy5MnErjINyHL1TPabubwPjg=
Subject key identifier:   77:B4:98:E4:A9:CB:43:7E:08:EB:0B:6F:3C:45:C2:64:5C:87:62:38
Certificate issuer:       /CN=792FCE054FD71DD6FC1999AD96B878769A102C50
Certificate serial:       306FBFACFC92B6EC58F9F130FFC15E8E51BA3E80
Authority key identifier: 79:2F:CE:05:4F:D7:1D:D6:FC:19:99:AD:96:B8:78:76:9A:10:2C:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/792FCE054FD71DD6FC1999AD96B878769A102C50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/34352e3233392e38342e302f32322d3234203d3e20323636383733.roa
Signing time:             Tue 05 Mar 2024 18:02:20 +0000
ROA not before:           Tue 05 Mar 2024 17:57:20 +0000
ROA not after:            Tue 04 Mar 2025 18:02:20 +0000
asID:                     266873
IP address blocks:        45.239.84.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 12:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6f:bf:ac:fc:92:b6:ec:58:f9:f1:30:ff:c1:5e:8e:51:ba:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792FCE054FD71DD6FC1999AD96B878769A102C50
        Validity
            Not Before: Mar  5 17:57:20 2024 GMT
            Not After : Mar  4 18:02:20 2025 GMT
        Subject: CN=77B498E4A9CB437E08EB0B6F3C45C2645C876238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:bf:8e:40:2a:e4:07:03:c6:ae:7a:94:04:
                    6e:c8:a2:a6:7f:bb:e7:8d:bd:bb:08:e8:1f:08:fd:
                    9d:db:73:ff:59:d9:fd:c1:e5:34:5f:70:4d:eb:e5:
                    7e:c2:a5:67:19:90:c5:45:88:17:af:8d:01:b5:9c:
                    4c:ab:54:d3:67:7b:b4:60:8d:e2:5d:d8:44:2f:96:
                    c0:f8:83:68:1b:6b:73:6b:a9:cb:aa:3d:ad:f4:54:
                    a0:1c:59:9a:ad:cd:bc:22:08:22:bb:1c:04:dd:b5:
                    1e:61:35:5c:6e:8f:a5:63:d2:f5:1e:1a:b8:da:d6:
                    00:1a:a9:82:17:7f:4e:dd:c8:b1:26:4f:9a:cf:56:
                    7b:9e:67:11:40:10:41:af:5c:f6:d0:3a:3c:05:14:
                    12:ec:ac:ba:08:68:f7:a4:ff:4a:b7:e2:8b:cb:f8:
                    f5:04:a1:85:b9:36:cc:3e:2a:fb:af:bf:63:f3:60:
                    be:fa:ff:88:39:78:ca:34:cd:d2:70:45:6e:e3:01:
                    91:22:fd:01:7c:12:9d:e2:13:17:6d:6e:8c:d5:53:
                    3b:4b:69:1a:ee:03:2f:db:c8:79:c1:06:26:75:42:
                    ff:26:b4:71:c8:bf:6f:7d:94:b2:30:7f:1a:19:3f:
                    64:3a:25:1f:ef:46:50:8c:37:48:b7:bc:d9:39:25:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B4:98:E4:A9:CB:43:7E:08:EB:0B:6F:3C:45:C2:64:5C:87:62:38
            X509v3 Authority Key Identifier:
                keyid:79:2F:CE:05:4F:D7:1D:D6:FC:19:99:AD:96:B8:78:76:9A:10:2C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/792FCE054FD71DD6FC1999AD96B878769A102C50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/792FCE054FD71DD6FC1999AD96B878769A102C50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/34352e3233392e38342e302f32322d3234203d3e20323636383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:0e:b3:67:63:7d:7b:24:43:28:bc:20:ef:ba:bc:ad:ec:19:
         cf:44:ba:66:21:b0:67:38:5f:e8:e7:a8:a6:80:28:3f:bc:37:
         a9:0a:92:93:7b:9e:63:6e:9d:17:8c:c8:e9:09:01:af:7f:2d:
         0e:4d:fb:0d:2e:38:64:06:db:28:cf:74:a5:a9:48:1e:83:f6:
         92:31:b4:9c:53:bc:10:ea:75:7c:fa:0c:b5:c4:42:e6:00:52:
         a8:e2:f1:c4:12:7f:a4:43:f4:50:e3:b0:71:5f:5d:bb:2f:cd:
         eb:2d:73:eb:50:e2:43:fd:30:fd:c6:11:35:90:60:1b:5b:08:
         de:9a:6c:76:f6:7f:19:5a:51:ed:e2:70:0d:1a:a3:15:6f:ea:
         da:8a:ca:3e:6c:75:06:65:3e:66:d0:df:1f:08:61:e2:f5:61:
         67:3c:df:5a:f5:e5:6b:c4:99:65:e8:4e:33:6d:76:cc:88:b7:
         50:c7:77:fd:70:c3:45:c9:f1:0b:61:0f:4e:2e:88:3a:fe:70:
         65:e0:69:15:d9:9b:f2:57:7f:d6:66:c3:32:fa:81:51:35:ad:
         8f:9e:ba:46:c5:e2:e7:34:58:d3:33:36:4e:28:73:43:1d:9b:
         3f:87:6f:df:25:76:1a:c2:c0:8a:95:17:8f:59:db:d6:55:ac:
         73:58:82:10
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMG+/rPyStuxY+fEw/8FejlG6PoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkyRkNFMDU0RkQ3MURENkZDMTk5OUFEOTZCODc4NzY5
QTEwMkM1MDAeFw0yNDAzMDUxNzU3MjBaFw0yNTAzMDQxODAyMjBaMDMxMTAvBgNV
BAMTKDc3QjQ5OEU0QTlDQjQzN0UwOEVCMEI2RjNDNDVDMjY0NUM4NzYyMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxob+OQCrkBwPGrnqUBG7IoqZ/
u+eNvbsI6B8I/Z3bc/9Z2f3B5TRfcE3r5X7CpWcZkMVFiBevjQG1nEyrVNNne7Rg
jeJd2EQvlsD4g2gba3NrqcuqPa30VKAcWZqtzbwiCCK7HATdtR5hNVxuj6Vj0vUe
Grja1gAaqYIXf07dyLEmT5rPVnueZxFAEEGvXPbQOjwFFBLsrLoIaPek/0q34ovL
+PUEoYW5Nsw+Kvuvv2PzYL76/4g5eMo0zdJwRW7jAZEi/QF8Ep3iExdtbozVUztL
aRruAy/byHnBBiZ1Qv8mtHHIv299lLIwfxoZP2Q6JR/vRlCMN0i3vNk5JfUvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUd7SY5KnLQ34I6wtvPEXCZFyHYjgwHwYDVR0j
BBgwFoAUeS/OBU/XHdb8GZmtlrh4dpoQLFAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNEFCQkM2QUI2RDQxRDAyRDUxMDM4MDNFMjRDOENFNzg3
RjhFNDlBRkQ4RjUzNTkwMTVERjg4OUM0M0FGNUU1LzAvNzkyRkNFMDU0RkQ3MURE
NkZDMTk5OUFEOTZCODc4NzY5QTEwMkM1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OTJGQ0UwNTRGRDcxREQ2RkMx
OTk5QUQ5NkI4Nzg3NjlBMTAyQzUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzRBQkJDNkFCNkQ0MUQwMkQ1MTAzODAzRTI0QzhDRTc4N0Y4RTQ5QUZE
OEY1MzU5MDE1REY4ODlDNDNBRjVFNS8wLzM0MzUyZTMyMzMzOTJlMzgzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3vVDAN
BgkqhkiG9w0BAQsFAAOCAQEAlg6zZ2N9eyRDKLwg77q8rewZz0S6ZiGwZzhf6Oeo
poAoP7w3qQqSk3ueY26dF4zI6QkBr38tDk37DS44ZAbbKM90palIHoP2kjG0nFO8
EOp1fPoMtcRC5gBSqOLxxBJ/pEP0UOOwcV9duy/N6y1z61DiQ/0w/cYRNZBgG1sI
3ppsdvZ/GVpR7eJwDRqjFW/q2orKPmx1BmU+ZtDfHwhh4vVhZzzfWvXla8SZZehO
M212zIi3UMd3/XDDRcnxC2EPTi6IOv5wZeBpFdmb8ld/1mbDMvqBUTWtj566RsXi
5zRY0zM2TihzQx2bP4dv3yV2GsLAipUXj1nb1lWsc1iCEA==
-----END CERTIFICATE-----
Generated at Tue Nov 12 16:24:11 2024 by rpki-client on console-ams.rpki-client.org