Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/34352e362e34302e302f32322d3234203d3e20323634363035.roa
File:                     34352e362e34302e302f32322d3234203d3e20323634363035.roa (raw, json)
Hash identifier:          LGYeI/81Mc8QKiydYV7iRBGSt+XZboLFL9jXCbG8soQ=
Subject key identifier:   D1:DD:04:81:BD:7E:48:F5:86:8B:3B:1C:78:2C:86:50:67:07:B2:BA
Certificate issuer:       /CN=B8196866E8E404DE886895D0DF5004CF22D49297
Certificate serial:       6D24FBA6F53BD7A8C8583A9DCF2240219D65BDF6
Authority key identifier: B8:19:68:66:E8:E4:04:DE:88:68:95:D0:DF:50:04:CF:22:D4:92:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/34352e362e34302e302f32322d3234203d3e20323634363035.roa
Signing time:             Tue 05 Mar 2024 18:17:47 +0000
ROA not before:           Tue 05 Mar 2024 18:12:47 +0000
ROA not after:            Tue 04 Mar 2025 18:17:47 +0000
asID:                     264605
IP address blocks:        45.6.40.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 10 Oct 2024 15:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:24:fb:a6:f5:3b:d7:a8:c8:58:3a:9d:cf:22:40:21:9d:65:bd:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8196866E8E404DE886895D0DF5004CF22D49297
        Validity
            Not Before: Mar  5 18:12:47 2024 GMT
            Not After : Mar  4 18:17:47 2025 GMT
        Subject: CN=D1DD0481BD7E48F5868B3B1C782C86506707B2BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:08:8a:10:16:00:5a:91:5e:a2:1c:ed:23:b8:
                    45:3a:60:21:84:85:21:03:5f:5c:6c:33:21:2b:2b:
                    fc:9e:07:83:f2:49:40:52:ec:39:89:14:8c:9f:7f:
                    3f:95:01:c5:40:fe:0a:ee:aa:36:28:07:f6:f9:1b:
                    66:11:0a:b0:fb:b2:36:ba:21:ff:15:58:68:ba:74:
                    4f:94:2f:d6:99:63:12:8a:73:48:3b:a0:62:79:6e:
                    df:69:df:74:76:aa:16:bc:f2:44:89:0e:d1:77:3b:
                    0e:1a:5c:60:3a:cd:1f:62:71:de:29:d4:dc:24:f7:
                    18:bc:70:91:58:b8:f1:83:a2:6a:69:35:42:bf:db:
                    b1:b4:10:e8:ab:82:49:b6:23:13:a3:40:14:1e:05:
                    85:0e:09:c2:1b:72:fb:32:d1:e4:ef:ae:62:c0:3b:
                    cb:ac:fe:c7:a8:a5:4f:99:8b:e9:93:c0:55:b6:0c:
                    0a:8a:f3:2b:f9:43:fd:95:89:5c:96:32:fe:bf:dd:
                    73:d1:ac:12:f5:00:c0:87:9b:21:cb:29:77:ac:3e:
                    28:7d:b1:85:ad:88:02:63:ad:2e:53:ac:3a:53:73:
                    8b:45:c4:06:d6:96:2b:04:2b:db:a0:31:3e:a2:d7:
                    a4:90:04:ee:f0:80:e4:b3:14:75:67:e4:8c:46:bf:
                    82:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DD:04:81:BD:7E:48:F5:86:8B:3B:1C:78:2C:86:50:67:07:B2:BA
            X509v3 Authority Key Identifier:
                keyid:B8:19:68:66:E8:E4:04:DE:88:68:95:D0:DF:50:04:CF:22:D4:92:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/34352e362e34302e302f32322d3234203d3e20323634363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:89:27:98:1f:1a:c1:d9:cc:96:7c:56:4a:33:34:b5:e1:c7:
         78:2d:e9:ac:92:c3:4e:ab:c5:1d:06:67:74:42:6f:d5:3d:1b:
         d3:e7:c1:f6:6f:79:b6:ea:73:b8:40:ad:8e:6a:20:f5:56:df:
         26:2c:98:78:a7:08:01:c8:b5:db:93:65:99:63:6e:e1:3d:de:
         17:bb:e4:4b:71:b2:fe:6b:b1:14:c1:cf:1e:54:d7:5a:56:c1:
         dd:f8:ba:9c:64:1e:13:06:09:87:8c:8d:df:7f:d9:62:1e:eb:
         d6:6a:03:91:9c:94:05:7a:f1:66:99:89:6c:29:22:f8:be:06:
         ec:ea:4f:86:72:8d:ca:2e:dc:44:62:81:0c:28:b5:6c:77:16:
         4c:da:f8:d4:b1:69:91:ab:fd:3e:fd:e2:08:e6:b1:2f:b4:63:
         29:49:a8:cd:b0:0b:65:e3:95:53:fc:6a:36:65:1b:e2:c6:68:
         59:79:8a:b7:84:f2:99:f5:b5:b3:3b:7a:70:de:b5:1e:9e:4c:
         d7:da:7a:fb:b9:0c:61:2a:86:15:e1:28:50:a3:c8:47:74:1a:
         18:52:75:9d:36:ca:f9:a4:96:12:01:4c:2b:14:3c:ee:4c:f3:
         5f:a0:8e:c4:9b:fc:5b:ca:2a:c1:d7:05:b5:0d:c8:5a:52:e4:
         ef:c9:58:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----