Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35352e302f32342d3234203d3e20323639383338.roa
File:                     34352e3232382e35352e302f32342d3234203d3e20323639383338.roa (raw, json)
Hash identifier:          DcpefBZF3V9DGB4bdKNJ3/8ZnDRACao5/42wE65c0DI=
Subject key identifier:   0B:0A:16:D1:CD:51:54:76:DE:A7:8F:6E:C4:42:1F:85:84:49:09:E6
Certificate issuer:       /CN=A8F348342236CEF0874883E7673551354708EDDE
Certificate serial:       2E07C2C16E15230A61D4D3066156CEB922196EF5
Authority key identifier: A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35352e302f32342d3234203d3e20323639383338.roa
Signing time:             Tue 05 Mar 2024 18:18:05 +0000
ROA not before:           Tue 05 Mar 2024 18:13:05 +0000
ROA not after:            Tue 04 Mar 2025 18:18:05 +0000
asID:                     269838
IP address blocks:        45.228.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 16:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:07:c2:c1:6e:15:23:0a:61:d4:d3:06:61:56:ce:b9:22:19:6e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F348342236CEF0874883E7673551354708EDDE
        Validity
            Not Before: Mar  5 18:13:05 2024 GMT
            Not After : Mar  4 18:18:05 2025 GMT
        Subject: CN=0B0A16D1CD515476DEA78F6EC4421F85844909E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:f5:12:c1:5b:40:7a:5e:f7:cc:02:a4:ce:
                    db:1e:7c:eb:e3:58:81:57:36:66:01:73:45:c9:95:
                    22:24:a2:1c:5f:4e:9e:fc:91:f2:89:84:9e:da:c2:
                    3f:1d:8b:0e:80:bb:5f:6b:c9:16:00:4a:c5:eb:0f:
                    3f:5c:6b:8f:e4:a6:ee:8f:9d:59:89:3e:2c:30:3e:
                    06:d5:73:55:64:63:49:a3:92:b4:6e:60:bb:8b:7d:
                    b4:d1:b9:57:3e:36:e2:a0:3e:5e:db:43:a5:0b:1a:
                    93:ab:49:e6:f2:6c:7f:63:38:97:06:e9:74:3f:43:
                    7d:04:de:a3:6e:91:69:bb:cc:1b:08:a0:55:d3:4d:
                    06:0b:dc:72:c6:04:37:31:3c:09:68:0a:0c:13:69:
                    3c:4c:44:12:bf:4f:7f:c3:cb:88:3d:ac:fb:f1:30:
                    c6:2c:2d:dc:f8:b4:88:9e:e0:52:06:da:90:8b:f9:
                    60:87:ba:89:c5:af:b3:61:75:86:e1:8c:b0:e2:5f:
                    fd:b9:ba:74:d5:84:9e:8c:87:d6:72:2c:4c:6f:42:
                    0d:8a:5e:ce:58:84:3b:f5:ff:1e:07:2d:5f:97:c6:
                    56:58:ec:2c:0c:0f:13:24:29:3d:57:ff:2b:dd:c5:
                    3e:71:d1:7c:5d:8d:ad:84:ed:22:86:fa:23:f0:0d:
                    64:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0A:16:D1:CD:51:54:76:DE:A7:8F:6E:C4:42:1F:85:84:49:09:E6
            X509v3 Authority Key Identifier:
                keyid:A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35352e302f32342d3234203d3e20323639383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:25:f8:c9:69:45:98:b4:6c:cc:68:5b:a9:1c:65:e9:a0:22:
         2a:cc:40:15:74:0c:8e:9f:4e:d5:6f:3d:2a:0a:52:72:9f:e5:
         37:9d:2a:9f:59:8c:47:db:9e:7f:13:b3:0d:70:7e:91:78:5b:
         3f:8a:47:aa:54:05:35:de:33:f2:e0:76:ab:92:d4:08:c3:bf:
         e9:22:bb:73:8f:af:d2:e3:07:c0:60:5f:d8:05:8d:30:55:45:
         cc:42:e4:43:4a:ef:4d:11:cb:8a:c9:ec:9e:e3:de:d6:5f:3a:
         22:f2:61:f5:a9:2a:26:a1:4c:a2:74:51:d9:9f:84:77:65:8f:
         89:b9:e3:73:a0:1b:af:bb:94:30:26:58:ce:50:e7:aa:e0:a6:
         1d:ce:96:f3:97:a6:c3:43:3d:da:51:30:a9:13:0f:4f:fc:c2:
         4e:b8:60:35:f7:5f:c7:11:63:e7:b1:f9:29:e1:1a:6c:81:c8:
         37:dd:5c:75:3b:64:3a:2c:1e:b6:52:e1:09:c4:5c:c6:28:04:
         d1:56:d3:93:1a:a7:b0:5b:19:60:31:bb:74:24:4c:20:06:fe:
         a4:a4:f4:6b:62:ed:dd:80:d6:9f:52:5d:dc:52:2b:3b:52:82:
         4c:e5:bc:ba:93:a5:74:99:ac:27:e1:34:25:85:f0:85:04:ff:
         88:81:ff:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----