Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/34352e3232342e3130342e302f32322d3232203d3e20323635383438.roa
File:                     34352e3232342e3130342e302f32322d3232203d3e20323635383438.roa (raw, json)
Hash identifier:          q1KGSbBs1tC0dqXJ9Int6wndPXeE+I8p3rA34Hgh3eQ=
Subject key identifier:   18:C4:D1:85:83:17:E1:0D:E0:4C:9C:3E:49:5A:98:0A:97:54:73:91
Certificate issuer:       /CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653
Certificate serial:       746ECDEE047CAA1AA6BA3D629BCC812F8861D1C6
Authority key identifier: 28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/34352e3232342e3130342e302f32322d3232203d3e20323635383438.roa
Signing time:             Tue 05 Mar 2024 17:53:51 +0000
ROA not before:           Tue 05 Mar 2024 17:48:51 +0000
ROA not after:            Tue 04 Mar 2025 17:53:51 +0000
asID:                     265848
IP address blocks:        45.224.104.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:6e:cd:ee:04:7c:aa:1a:a6:ba:3d:62:9b:cc:81:2f:88:61:d1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653
        Validity
            Not Before: Mar  5 17:48:51 2024 GMT
            Not After : Mar  4 17:53:51 2025 GMT
        Subject: CN=18C4D1858317E10DE04C9C3E495A980A97547391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:b4:a6:36:df:3f:0c:44:b0:18:da:10:f3:
                    18:93:1b:c7:0b:4d:0d:d8:5e:06:bd:33:2e:1c:f2:
                    70:29:20:f0:96:6b:46:78:64:23:af:96:ad:11:b0:
                    f9:6b:74:2f:da:36:81:8e:e5:48:e8:51:3c:d2:47:
                    2f:c2:0e:06:d4:83:91:f2:ba:83:f6:eb:80:06:cb:
                    6f:ba:d4:82:f5:3f:41:43:48:1d:62:59:ff:f1:42:
                    7c:ce:ed:b7:e7:dc:5a:fc:be:68:21:15:16:49:ee:
                    28:29:d9:bc:7e:e1:c0:94:49:aa:f4:bd:7e:ad:c3:
                    0b:cb:82:bb:a9:2c:d6:07:32:29:2b:0c:46:af:ab:
                    0e:bb:6d:db:43:89:07:7a:6d:0f:67:e7:c0:b2:42:
                    f9:a5:a7:e0:5b:53:d7:d6:25:b7:2d:3e:c6:61:98:
                    9c:92:9f:56:28:01:1b:64:c0:bc:60:68:7c:a4:83:
                    2c:1e:6e:54:9e:0c:a1:a7:f6:f8:8c:fe:f1:8d:a7:
                    2f:0e:08:9f:1d:0f:b9:da:8d:22:47:19:0c:7d:21:
                    2c:4d:8c:c8:ac:92:ce:ee:1f:5c:1b:39:55:71:b7:
                    18:65:48:ba:29:e9:03:1b:52:27:39:fe:b3:35:d9:
                    6a:37:4d:e0:ec:6f:b3:5f:31:d0:b3:e7:67:da:ec:
                    f3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C4:D1:85:83:17:E1:0D:E0:4C:9C:3E:49:5A:98:0A:97:54:73:91
            X509v3 Authority Key Identifier:
                keyid:28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/34352e3232342e3130342e302f32322d3232203d3e20323635383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:12:f3:79:34:2c:a0:cc:ef:98:80:2c:d1:1d:86:08:1b:43:
         c9:ee:c0:ae:05:95:e5:58:9d:f5:4c:51:83:51:bb:c4:79:2a:
         29:38:ce:4a:4e:d2:15:da:24:12:c2:73:d9:d3:6f:4f:9b:b4:
         25:2b:f8:2a:fa:1d:ed:ba:34:ea:f4:08:0f:7a:6e:e3:5b:8d:
         f0:9d:21:af:0e:5a:bb:e2:f7:54:d0:22:3f:04:d1:e7:e8:b3:
         b8:26:e1:57:cc:70:40:19:d7:79:d1:5c:23:e7:b8:0e:78:a4:
         5d:c5:fa:55:9b:2a:2d:b0:a3:58:b2:a7:17:94:91:cd:32:1d:
         9e:b3:a0:28:23:ae:ec:9f:a7:69:64:8d:bf:5b:d0:06:93:6f:
         2f:b0:1e:86:1d:f1:f0:c6:60:e2:66:42:11:8c:5b:4c:35:44:
         77:84:9c:36:fa:84:a9:1c:97:93:6d:9b:93:f2:97:d1:c1:aa:
         d6:44:58:7c:f3:f9:56:f9:c2:09:5b:c3:09:7c:7e:9e:d3:69:
         50:bc:00:90:36:26:bc:35:8a:15:31:8c:05:d6:6c:7b:8f:e9:
         2e:21:01:67:d1:e2:f6:e2:99:94:54:53:3c:a2:8a:3f:bb:01:
         9b:36:25:65:85:1f:40:0b:bc:ba:1b:68:a5:28:2f:4d:6a:29:
         b0:6f:91:dc
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdG7N7gR8qhqmuj1im8yBL4hh0cYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhBN0Q1M0JBQzUzMTA1Q0E4QTBCM0ExQzk1QzJFNkE3
MTk4MTY1MzAeFw0yNDAzMDUxNzQ4NTFaFw0yNTAzMDQxNzUzNTFaMDMxMTAvBgNV
BAMTKDE4QzREMTg1ODMxN0UxMERFMDRDOUMzRTQ5NUE5ODBBOTc1NDczOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDrSmNt8/DESwGNoQ8xiTG8cL
TQ3YXga9My4c8nApIPCWa0Z4ZCOvlq0RsPlrdC/aNoGO5UjoUTzSRy/CDgbUg5Hy
uoP264AGy2+61IL1P0FDSB1iWf/xQnzO7bfn3Fr8vmghFRZJ7igp2bx+4cCUSar0
vX6twwvLgrupLNYHMikrDEavqw67bdtDiQd6bQ9n58CyQvmlp+BbU9fWJbctPsZh
mJySn1YoARtkwLxgaHykgyweblSeDKGn9viM/vGNpy8OCJ8dD7najSJHGQx9ISxN
jMisks7uH1wbOVVxtxhlSLop6QMbUic5/rM12Wo3TeDsb7NfMdCz52fa7PPTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUGMTRhYMX4Q3gTJw+SVqYCpdUc5EwHwYDVR0j
BBgwFoAUKKfVO6xTEFyooLOhyVwuanGYFlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RDNDMkZFODI1MzZFNkI5NTQwOUNDMDQ0ODlEM0YwNURF
MjA3NDUwNTgwREMwNDMwOTI1NDc5RUUxQzczNzg1LzAvMjhBN0Q1M0JBQzUzMTA1
Q0E4QTBCM0ExQzk1QzJFNkE3MTk4MTY1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEE3RDUzQkFDNTMxMDVDQThB
MEIzQTFDOTVDMkU2QTcxOTgxNjUzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0QzQzJGRTgyNTM2RTZCOTU0MDlDQzA0NDg5RDNGMDVERTIwNzQ1MDU4
MERDMDQzMDkyNTQ3OUVFMUM3Mzc4NS8wLzM0MzUyZTMyMzIzNDJlMzEzMDM0MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1MzgzNDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeBo
MA0GCSqGSIb3DQEBCwUAA4IBAQBtEvN5NCygzO+YgCzRHYYIG0PJ7sCuBZXlWJ31
TFGDUbvEeSopOM5KTtIV2iQSwnPZ029Pm7QlK/gq+h3tujTq9AgPem7jW43wnSGv
Dlq74vdU0CI/BNHn6LO4JuFXzHBAGdd50Vwj57gOeKRdxfpVmyotsKNYsqcXlJHN
Mh2es6AoI67sn6dpZI2/W9AGk28vsB6GHfHwxmDiZkIRjFtMNUR3hJw2+oSpHJeT
bZuT8pfRwarWRFh88/lW+cIJW8MJfH6e02lQvACQNia8NYoVMYwF1mx7j+kuIQFn
0eL24pmUVFM8ooo/uwGbNiVlhR9AC7y6G2ilKC9Naimwb5Hc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org