Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/34352e3232382e3133362e302f32322d3232203d3e20323636363733.roa
File:                     34352e3232382e3133362e302f32322d3232203d3e20323636363733.roa (raw, json)
Hash identifier:          RVHf//KhPvnNy08W0E0JX5xANVXxcLLBmXivdVTL6X8=
Subject key identifier:   0D:E6:6C:F3:BB:43:30:A0:67:FC:A8:3D:0B:CF:41:FF:4E:82:D8:43
Certificate issuer:       /CN=D762BD634950F86F90198996258F5C888AE2933E
Certificate serial:       3915EE87B80427C7D6DB58CFD0D7EF55E7F69ECE
Authority key identifier: D7:62:BD:63:49:50:F8:6F:90:19:89:96:25:8F:5C:88:8A:E2:93:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D762BD634950F86F90198996258F5C888AE2933E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/34352e3232382e3133362e302f32322d3232203d3e20323636363733.roa
Signing time:             Tue 05 Mar 2024 18:07:42 +0000
ROA not before:           Tue 05 Mar 2024 18:02:42 +0000
ROA not after:            Tue 04 Mar 2025 18:07:42 +0000
asID:                     266673
IP address blocks:        45.228.136.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 21 May 2024 03:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:15:ee:87:b8:04:27:c7:d6:db:58:cf:d0:d7:ef:55:e7:f6:9e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D762BD634950F86F90198996258F5C888AE2933E
        Validity
            Not Before: Mar  5 18:02:42 2024 GMT
            Not After : Mar  4 18:07:42 2025 GMT
        Subject: CN=0DE66CF3BB4330A067FCA83D0BCF41FF4E82D843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e6:06:ff:8f:49:ac:05:a3:12:6d:c8:dc:35:
                    11:e3:60:94:1e:0f:71:9d:fc:50:03:47:83:c4:c1:
                    ea:1b:96:d4:2b:a0:7e:1a:30:1c:3b:28:fd:3b:d4:
                    01:1c:2f:29:a4:23:09:ba:53:e8:af:e2:12:85:e2:
                    01:ef:18:ab:18:5c:c5:d9:15:a9:77:af:be:1d:6a:
                    ee:40:f5:01:13:69:73:05:ad:91:97:6e:20:94:c5:
                    c8:38:ef:47:90:b7:06:26:70:2c:23:05:d3:50:30:
                    dc:71:9d:4a:de:65:bf:4c:d0:31:08:b9:91:87:ac:
                    06:75:06:cc:b9:6f:a1:1f:23:1c:fc:f7:aa:a5:29:
                    9f:e4:ef:c9:43:92:7e:03:ef:c6:6f:d3:e0:ee:75:
                    52:3c:45:8c:fd:b2:8d:2f:c9:4d:e4:b1:7c:dd:4d:
                    f3:f4:94:a9:c2:81:57:be:5d:52:09:a5:24:96:cc:
                    4d:9a:16:43:3b:d5:9a:c7:6e:ad:b0:76:b3:39:59:
                    0f:c3:4b:97:8e:09:74:d5:b0:d6:48:33:52:e7:44:
                    f5:3a:94:8e:8f:7b:fc:12:f4:1e:93:6a:c5:94:ab:
                    14:7d:c5:1a:e1:b4:7e:67:13:6b:45:cd:7e:8b:27:
                    85:7f:b3:15:e0:bb:19:12:5d:a1:2a:be:59:22:f8:
                    8c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E6:6C:F3:BB:43:30:A0:67:FC:A8:3D:0B:CF:41:FF:4E:82:D8:43
            X509v3 Authority Key Identifier:
                keyid:D7:62:BD:63:49:50:F8:6F:90:19:89:96:25:8F:5C:88:8A:E2:93:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/D762BD634950F86F90198996258F5C888AE2933E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D762BD634950F86F90198996258F5C888AE2933E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/34352e3232382e3133362e302f32322d3232203d3e20323636363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:a7:6a:5f:8f:dd:92:79:5f:5b:27:66:b8:41:d4:18:12:10:
         82:8f:2f:45:db:72:68:ab:87:f3:cd:da:da:94:6f:e9:cb:61:
         ad:aa:e5:d2:25:9b:29:f1:3d:7f:c7:71:28:67:30:b7:6e:b6:
         b7:11:33:34:4a:1c:ec:ef:ad:00:82:1d:50:95:4b:b6:bc:25:
         32:00:a7:c0:70:8e:b0:3c:f3:d8:9e:d8:10:85:ba:0d:9e:83:
         e8:21:79:5b:4a:be:5b:90:0d:d0:09:21:98:e0:24:5f:2d:64:
         e3:f9:22:06:8a:4f:93:33:cf:3d:b9:77:38:fa:20:77:36:84:
         48:53:ee:9d:b6:f0:d5:6f:24:3c:3c:78:c3:85:d9:87:df:c4:
         ff:33:05:df:60:ec:4a:82:2c:89:0e:29:a9:00:ea:c0:aa:05:
         1e:71:e8:24:bf:c1:37:ec:03:f4:56:b0:bc:08:57:48:be:a7:
         48:5d:a7:cc:14:d3:65:9c:53:81:72:59:73:ff:58:b3:b7:e3:
         1c:80:b0:11:42:d1:5e:f0:5d:db:5e:4a:0c:8a:79:cc:dd:84:
         98:8a:5b:04:1e:a8:fd:3f:c6:84:08:be:5a:a0:1e:95:b7:fd:
         18:6b:05:f2:8f:15:05:62:54:18:e4:55:78:e7:40:85:95:20:
         3b:47:27:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 04:46:34 2024 by rpki-client on console-ams.rpki-client.org