Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/34352e3137342e3230342e302f32322d3232203d3e20323637383531.roa
File:                     34352e3137342e3230342e302f32322d3232203d3e20323637383531.roa (raw, json)
Hash identifier:          ubrNDCH9NOBtPuo7O8y7qPyM7pjAmkP0F59QeYzE5i8=
Subject key identifier:   DC:63:DE:DC:1E:4A:B8:F4:A0:5D:59:FC:25:F4:39:E8:E5:64:32:D1
Certificate issuer:       /CN=6FB215754DD4ED59F894D93863C869DAB31DC0CC
Certificate serial:       2B9A96A29B3D813D5033E2FC93318032DDAFD766
Authority key identifier: 6F:B2:15:75:4D:D4:ED:59:F8:94:D9:38:63:C8:69:DA:B3:1D:C0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FB215754DD4ED59F894D93863C869DAB31DC0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/34352e3137342e3230342e302f32322d3232203d3e20323637383531.roa
Signing time:             Tue 05 Mar 2024 18:11:25 +0000
ROA not before:           Tue 05 Mar 2024 18:06:25 +0000
ROA not after:            Tue 04 Mar 2025 18:11:25 +0000
asID:                     267851
IP address blocks:        45.174.204.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 19:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9a:96:a2:9b:3d:81:3d:50:33:e2:fc:93:31:80:32:dd:af:d7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB215754DD4ED59F894D93863C869DAB31DC0CC
        Validity
            Not Before: Mar  5 18:06:25 2024 GMT
            Not After : Mar  4 18:11:25 2025 GMT
        Subject: CN=DC63DEDC1E4AB8F4A05D59FC25F439E8E56432D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:98:c0:9f:b0:a0:26:ab:1a:b2:ae:63:14:
                    fa:a0:c9:9c:5d:c0:15:f1:07:e1:f8:fe:58:5d:9a:
                    15:7d:07:a7:0a:37:bd:4c:58:fb:82:82:11:64:56:
                    b0:11:43:9e:8a:d2:6f:1d:b4:e6:99:21:e1:48:be:
                    c1:3b:1b:91:63:c3:92:93:b1:14:00:f5:fb:63:60:
                    c7:98:54:e1:02:fe:32:b3:8e:06:cb:02:fd:e1:b8:
                    55:b4:5c:3b:59:71:97:ab:e0:59:60:8e:a6:b1:14:
                    76:5d:47:e3:d2:45:b6:93:7e:66:ed:52:9e:c2:39:
                    df:b7:f8:fc:20:d5:d7:28:db:4e:ca:6e:c1:54:cc:
                    c2:d9:a1:47:53:70:5e:6d:65:e5:86:23:8f:ed:50:
                    97:d7:58:bf:21:9c:7d:2b:c1:73:49:32:15:c4:83:
                    89:35:6b:10:ff:7f:53:74:78:4d:bf:6d:16:11:4a:
                    91:84:86:11:c4:af:4d:fc:64:ac:e1:bb:30:a3:c0:
                    54:6c:b7:d9:ad:64:fd:85:c5:0c:e9:3a:59:44:fb:
                    f6:aa:16:34:46:b6:c7:fc:cf:4d:a2:20:32:b9:08:
                    4b:8f:61:8c:c0:55:be:89:0c:64:55:fa:53:c9:64:
                    39:0d:d1:88:b4:e9:37:8b:43:9a:29:31:3a:4f:b7:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:63:DE:DC:1E:4A:B8:F4:A0:5D:59:FC:25:F4:39:E8:E5:64:32:D1
            X509v3 Authority Key Identifier:
                keyid:6F:B2:15:75:4D:D4:ED:59:F8:94:D9:38:63:C8:69:DA:B3:1D:C0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/6FB215754DD4ED59F894D93863C869DAB31DC0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FB215754DD4ED59F894D93863C869DAB31DC0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/34352e3137342e3230342e302f32322d3232203d3e20323637383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:7f:6e:0c:6c:22:47:f3:65:5c:5c:12:19:c4:47:bd:cf:a9:
         7d:72:38:bb:f9:bd:c8:57:88:e0:0d:f4:95:9c:43:18:87:e3:
         8b:64:14:3a:b5:14:12:dc:fe:8b:1a:78:c3:fe:96:2d:07:e4:
         d3:c4:0c:fe:e7:a1:3a:76:ed:80:a4:b7:c5:6f:65:91:af:cb:
         3c:5f:cb:e1:86:f4:a6:13:36:27:57:9e:df:7c:05:bd:82:06:
         88:a2:9e:b7:b5:f2:b6:96:09:50:f9:cb:d5:10:c3:9f:dc:aa:
         e9:70:2d:f5:da:e4:d3:2d:58:d1:1b:24:a5:e1:4e:e4:7c:1f:
         ec:6b:9e:61:c0:73:f4:bb:ef:18:8f:db:42:84:cb:7d:57:40:
         75:e5:77:94:48:88:1f:9f:02:2e:f5:04:94:0d:4b:6d:a0:7f:
         1b:06:b4:48:33:4f:7e:4a:c1:95:8f:bb:98:9b:ef:e5:d2:e4:
         1a:1d:cb:e3:09:70:d8:c4:2b:79:ec:a3:1d:e1:a3:9f:4c:a2:
         0e:08:f8:6a:20:8e:eb:f4:6b:78:4a:b2:fd:71:a6:44:85:69:
         09:26:6d:91:36:bb:7d:7e:71:df:e7:ce:2c:44:14:f2:12:7a:
         51:93:46:81:cf:ba:08:f6:48:5c:dd:5c:ae:f5:7d:93:4f:8a:
         40:ef:dd:6d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUK5qWops9gT1QM+L8kzGAMt2v12YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZCMjE1NzU0REQ0RUQ1OUY4OTREOTM4NjNDODY5REFC
MzFEQzBDQzAeFw0yNDAzMDUxODA2MjVaFw0yNTAzMDQxODExMjVaMDMxMTAvBgNV
BAMTKERDNjNERURDMUU0QUI4RjRBMDVENTlGQzI1RjQzOUU4RTU2NDMyRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtpjAn7CgJqsasq5jFPqgyZxd
wBXxB+H4/lhdmhV9B6cKN71MWPuCghFkVrARQ56K0m8dtOaZIeFIvsE7G5Fjw5KT
sRQA9ftjYMeYVOEC/jKzjgbLAv3huFW0XDtZcZer4FlgjqaxFHZdR+PSRbaTfmbt
Up7COd+3+Pwg1dco207KbsFUzMLZoUdTcF5tZeWGI4/tUJfXWL8hnH0rwXNJMhXE
g4k1axD/f1N0eE2/bRYRSpGEhhHEr038ZKzhuzCjwFRst9mtZP2FxQzpOllE+/aq
FjRGtsf8z02iIDK5CEuPYYzAVb6JDGRV+lPJZDkN0Yi06TeLQ5opMTpPt7HxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU3GPe3B5KuPSgXVn8JfQ56OVkMtEwHwYDVR0j
BBgwFoAUb7IVdU3U7Vn4lNk4Y8hp2rMdwMwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NjcwRjZCRDFFOTM0RkVFRUMwRTAwQUUwRUJBREJCOTFD
MjVDNDgxNzgzRTc0NUMzRTQ3RUFBMDdDOUE5OEI0LzAvNkZCMjE1NzU0REQ0RUQ1
OUY4OTREOTM4NjNDODY5REFCMzFEQzBDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RkIyMTU3NTRERDRFRDU5Rjg5
NEQ5Mzg2M0M4NjlEQUIzMURDMENDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDY3MEY2QkQxRTkzNEZFRUVDMEUwMEFFMEVCQURCQjkxQzI1QzQ4MTc4
M0U3NDVDM0U0N0VBQTA3QzlBOThCNC8wLzM0MzUyZTMxMzczNDJlMzIzMDM0MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3MzgzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLa7M
MA0GCSqGSIb3DQEBCwUAA4IBAQB4f24MbCJH82VcXBIZxEe9z6l9cji7+b3IV4jg
DfSVnEMYh+OLZBQ6tRQS3P6LGnjD/pYtB+TTxAz+56E6du2ApLfFb2WRr8s8X8vh
hvSmEzYnV57ffAW9ggaIop63tfK2lglQ+cvVEMOf3KrpcC312uTTLVjRGySl4U7k
fB/sa55hwHP0u+8Yj9tChMt9V0B15XeUSIgfnwIu9QSUDUttoH8bBrRIM09+SsGV
j7uYm+/l0uQaHcvjCXDYxCt57KMd4aOfTKIOCPhqII7r9Gt4SrL9caZEhWkJJm2R
Nrt9fnHf584sRBTyEnpRk0aBz7oI9khc3Vyu9X2TT4pA791t
-----END CERTIFICATE-----
Generated at Thu Oct 10 00:01:21 2024 by rpki-client on console-fra.rpki-client.org