Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35342e302f32342d3234203d3e20323639383338.roa
File:                     34352e3232382e35342e302f32342d3234203d3e20323639383338.roa (raw, json)
Hash identifier:          n4gcoJOTHrXqEViJ1n4RcjghSAr/ROayTK/ECObXiEQ=
Subject key identifier:   28:49:24:9F:BD:5F:FE:D9:C5:C8:8F:F3:74:21:E4:AE:A8:81:29:47
Certificate issuer:       /CN=A8F348342236CEF0874883E7673551354708EDDE
Certificate serial:       63E49DB3837393C07672B2D22C2E0C0AABE7BF6B
Authority key identifier: A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35342e302f32342d3234203d3e20323639383338.roa
Signing time:             Tue 05 Mar 2024 18:18:06 +0000
ROA not before:           Tue 05 Mar 2024 18:13:06 +0000
ROA not after:            Tue 04 Mar 2025 18:18:06 +0000
asID:                     269838
IP address blocks:        45.228.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 16:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e4:9d:b3:83:73:93:c0:76:72:b2:d2:2c:2e:0c:0a:ab:e7:bf:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F348342236CEF0874883E7673551354708EDDE
        Validity
            Not Before: Mar  5 18:13:06 2024 GMT
            Not After : Mar  4 18:18:06 2025 GMT
        Subject: CN=2849249FBD5FFED9C5C88FF37421E4AEA8812947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:57:70:54:7f:b3:23:7e:8f:38:20:bd:af:
                    b8:d7:bd:30:2e:17:31:db:2b:fd:a3:dd:80:07:da:
                    e5:2e:1a:36:6f:28:58:b1:d0:5e:3f:65:7e:20:a6:
                    47:3c:e3:e4:03:93:04:14:2c:c7:cc:01:69:66:30:
                    63:ec:48:27:2d:6f:2d:10:5c:0c:22:4e:f5:e5:d2:
                    67:a6:4d:9f:9b:8c:16:b9:2b:ba:85:63:a2:6a:73:
                    bc:ff:79:f2:18:3e:bb:2d:71:59:f4:35:50:88:b1:
                    2c:3e:cb:e1:65:77:31:98:65:f6:50:77:91:c1:a9:
                    60:4e:22:ad:50:44:06:33:f2:9a:98:1b:66:92:89:
                    64:b8:65:55:d0:97:fe:f1:60:ed:d8:ce:f1:f5:a0:
                    3b:b2:45:e2:26:de:16:51:51:28:ce:f1:a0:da:5f:
                    d7:7c:07:1a:a6:04:86:89:cf:f1:ec:84:99:8f:31:
                    a6:ac:8f:bc:74:67:dc:83:b3:0d:ed:a4:81:4f:66:
                    7a:36:10:fe:f3:eb:72:d8:5e:dc:21:11:27:bc:d5:
                    bb:94:41:b0:0a:a9:6e:47:05:b7:1f:7d:31:9c:89:
                    ec:e3:15:6e:5a:f0:27:d6:4b:9c:6c:2e:0e:01:40:
                    3f:63:91:b6:5d:e4:7f:12:f2:43:2d:49:b6:b7:a2:
                    cc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:49:24:9F:BD:5F:FE:D9:C5:C8:8F:F3:74:21:E4:AE:A8:81:29:47
            X509v3 Authority Key Identifier:
                keyid:A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35342e302f32342d3234203d3e20323639383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:63:e5:16:ed:c9:60:60:28:55:3d:21:da:37:7d:48:b8:cb:
         25:77:bb:57:6c:26:aa:9c:c5:95:2d:01:e8:f0:78:42:23:09:
         58:2c:23:6d:10:e4:e9:49:58:f3:69:47:6a:da:33:b5:88:92:
         1c:45:f1:c7:f1:b4:ce:b8:99:d5:67:69:ac:9c:0f:81:91:50:
         12:0f:e0:8a:c7:de:76:60:14:fc:7d:df:25:eb:80:54:85:c3:
         e4:4d:51:eb:16:2f:8f:10:c4:34:ee:9d:e4:4a:62:47:71:e9:
         05:a9:7d:f7:6f:c6:f8:01:50:00:a7:f5:c9:f7:3f:a6:4a:c4:
         af:1b:ca:1f:6f:d4:4f:f4:36:c5:97:6f:4e:33:4b:e8:b6:84:
         ae:ee:6b:3e:99:de:72:03:b5:8c:32:06:51:cd:22:67:cc:0d:
         b4:92:7b:c6:af:f2:5f:94:47:ac:21:94:bb:7c:df:39:9b:fb:
         66:0c:13:7a:7d:75:d6:b4:8a:8f:57:b8:a1:c3:c0:91:27:12:
         00:67:56:2c:2e:0b:fe:05:6d:21:de:6f:88:f2:10:dc:9a:9d:
         0f:ee:54:f2:65:dd:00:c8:80:91:b2:7b:5c:b6:01:e6:2a:4c:
         9f:e5:a8:e2:e1:41:6d:a3:98:11:dd:b4:13:ff:fe:ea:c1:ab:
         7c:2e:69:86
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUY+Sds4Nzk8B2crLSLC4MCqvnv2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGMzQ4MzQyMjM2Q0VGMDg3NDg4M0U3NjczNTUxMzU0
NzA4RURERTAeFw0yNDAzMDUxODEzMDZaFw0yNTAzMDQxODE4MDZaMDMxMTAvBgNV
BAMTKDI4NDkyNDlGQkQ1RkZFRDlDNUM4OEZGMzc0MjFFNEFFQTg4MTI5NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJVdwVH+zI36POCC9r7jXvTAu
FzHbK/2j3YAH2uUuGjZvKFix0F4/ZX4gpkc84+QDkwQULMfMAWlmMGPsSCctby0Q
XAwiTvXl0memTZ+bjBa5K7qFY6Jqc7z/efIYPrstcVn0NVCIsSw+y+FldzGYZfZQ
d5HBqWBOIq1QRAYz8pqYG2aSiWS4ZVXQl/7xYO3YzvH1oDuyReIm3hZRUSjO8aDa
X9d8BxqmBIaJz/HshJmPMaasj7x0Z9yDsw3tpIFPZno2EP7z63LYXtwhESe81buU
QbAKqW5HBbcffTGciezjFW5a8CfWS5xsLg4BQD9jkbZd5H8S8kMtSba3oswLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUKEkkn71f/tnFyI/zdCHkrqiBKUcwHwYDVR0j
BBgwFoAUqPNINCI2zvCHSIPnZzVRNUcI7d4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NDFBMUQ2QzU2RDlBMjQzMUVENjJEODc1MDQ2OUY1QjM3
QTI3RUNGRjUxMkQxNEJDMTc3ODE0MTAxRjQ5RDEyLzAvQThGMzQ4MzQyMjM2Q0VG
MDg3NDg4M0U3NjczNTUxMzU0NzA4RURERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOEYzNDgzNDIyMzZDRUYwODc0
ODgzRTc2NzM1NTEzNTQ3MDhFRERFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODQxQTFENkM1NkQ5QTI0MzFFRDYyRDg3NTA0NjlGNUIzN0EyN0VDRkY1
MTJEMTRCQzE3NzgxNDEwMUY0OUQxMi8wLzM0MzUyZTMyMzIzODJlMzUzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM4MzMzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3kNjAN
BgkqhkiG9w0BAQsFAAOCAQEAhmPlFu3JYGAoVT0h2jd9SLjLJXe7V2wmqpzFlS0B
6PB4QiMJWCwjbRDk6UlY82lHatoztYiSHEXxx/G0zriZ1WdprJwPgZFQEg/gisfe
dmAU/H3fJeuAVIXD5E1R6xYvjxDENO6d5EpiR3HpBal992/G+AFQAKf1yfc/pkrE
rxvKH2/UT/Q2xZdvTjNL6LaEru5rPpnecgO1jDIGUc0iZ8wNtJJ7xq/yX5RHrCGU
u3zfOZv7ZgwTen111rSKj1e4ocPAkScSAGdWLC4L/gVtId5viPIQ3JqdD+5U8mXd
AMiAkbJ7XLYB5ipMn+Wo4uFBbaOYEd20E//+6sGrfC5phg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org