Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233362e302f32322d3232203d3e20323635373335.roa
File:                     34352e372e3233362e302f32322d3232203d3e20323635373335.roa (raw, json)
Hash identifier:          N+WswWlEBImi2l3RGvgxcHRlK1uqtdOEztbKpIbfVBY=
Subject key identifier:   52:49:2A:55:D8:A3:8B:B6:CE:E7:44:28:57:E3:9F:47:B9:39:5E:78
Certificate issuer:       /CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
Certificate serial:       0AC3DEA9068F760A1A3DA699BA6324A1CB46BE35
Authority key identifier: FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233362e302f32322d3232203d3e20323635373335.roa
Signing time:             Wed 14 Aug 2024 01:45:00 +0000
ROA not before:           Wed 14 Aug 2024 01:40:00 +0000
ROA not after:            Wed 13 Aug 2025 01:45:00 +0000
asID:                     265735
IP address blocks:        45.7.236.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c3:de:a9:06:8f:76:0a:1a:3d:a6:99:ba:63:24:a1:cb:46:be:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
        Validity
            Not Before: Aug 14 01:40:00 2024 GMT
            Not After : Aug 13 01:45:00 2025 GMT
        Subject: CN=52492A55D8A38BB6CEE7442857E39F47B9395E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:45:ae:0f:c3:c0:88:49:a3:03:e7:69:fc:11:
                    eb:0e:73:e5:de:7f:73:4c:7d:40:aa:dc:8a:5e:d3:
                    c5:4f:c6:2b:79:30:8f:57:a5:df:9e:85:60:05:5b:
                    a4:f6:9a:b4:71:00:56:24:1c:b8:4e:d5:62:56:82:
                    63:4e:7f:b3:4d:2e:3d:79:85:13:df:8a:55:02:4c:
                    1f:12:2c:db:60:e3:88:dc:de:28:9a:8a:62:d8:f4:
                    a6:f1:c3:1c:3a:6f:84:50:53:a3:28:ee:d8:ad:2b:
                    a3:1a:c2:1f:e7:00:93:03:5b:6c:84:2b:76:a8:5e:
                    78:6a:c5:68:49:f4:30:ab:16:a2:d6:40:75:3e:00:
                    b3:91:c3:c1:cf:3c:eb:fd:97:1f:2a:ef:1a:38:61:
                    ff:c4:73:0a:0a:20:e5:1a:a2:10:0f:71:ee:e0:72:
                    19:3e:bf:d7:3f:79:92:f7:b9:74:77:1c:a9:14:04:
                    e0:94:6c:c8:86:81:4a:95:48:65:e3:82:9e:a0:1d:
                    7b:37:cb:45:16:ce:a4:b8:bc:c9:44:b7:5a:eb:2a:
                    ac:4f:ee:cd:fe:59:b1:bf:ec:19:a6:2f:27:e3:3a:
                    0c:db:99:b4:61:18:2f:ac:c2:ca:4c:d3:f7:9a:4c:
                    17:15:ea:bb:38:a7:b4:e8:90:d0:1c:f9:6b:09:85:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:49:2A:55:D8:A3:8B:B6:CE:E7:44:28:57:E3:9F:47:B9:39:5E:78
            X509v3 Authority Key Identifier:
                keyid:FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233362e302f32322d3232203d3e20323635373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:29:9e:49:95:5a:a9:44:62:01:62:ef:84:ea:7f:a2:47:83:
         db:91:f6:1e:65:f3:78:66:a5:c9:8d:d6:58:52:33:b6:06:36:
         7a:d8:ef:d1:6b:51:10:84:96:37:c7:a2:cf:71:6e:55:28:71:
         83:9f:03:6f:39:ef:64:bf:7d:2c:be:6e:fe:4e:7b:16:49:0b:
         c4:99:b8:01:35:32:dc:4a:d6:09:93:fb:bf:5d:f3:0d:77:5a:
         ea:d6:92:a9:2d:b5:b3:bc:6d:ba:f6:e8:aa:64:74:a3:d9:5c:
         39:28:4e:57:c3:46:b3:c6:04:9b:f0:b5:f1:a4:74:ce:6a:59:
         46:3c:e0:16:62:e9:ce:02:58:71:12:5c:c8:a9:11:42:77:02:
         fe:b8:b0:1b:5e:49:58:30:f3:d0:15:fa:3f:de:9f:be:7a:ff:
         98:cf:be:64:5d:80:b6:f8:de:a0:8f:65:1d:72:db:a5:72:6b:
         b8:7e:73:98:a1:ae:8f:ed:c6:0a:3b:72:84:e3:60:59:3d:1d:
         1b:f2:16:e1:eb:9c:e8:17:a5:cd:ce:79:27:dc:bf:75:97:ae:
         28:8f:b1:f9:bc:16:a2:42:7b:0d:28:7e:21:03:08:76:ca:4a:
         8f:49:bb:91:f9:54:86:56:1e:2c:c1:04:89:41:52:f3:07:47:
         ca:be:6a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----