Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138302e302f32332d3233203d3e20323637373034.roa
File:                     34352e3136322e3138302e302f32332d3233203d3e20323637373034.roa (raw, json)
Hash identifier:          FvUX4ImfhO/sZjpA24WLy+fxh8P1xHO6Wt0dzxeptwU=
Subject key identifier:   8F:A4:49:30:A8:6C:3F:DE:BC:A4:27:62:18:EB:53:E8:AA:59:13:6D
Certificate issuer:       /CN=BD9037968409387615A2867C81BDF4EE88009203
Certificate serial:       4664B8D1DC5FBF626638E984A50947387E7093AE
Authority key identifier: BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138302e302f32332d3233203d3e20323637373034.roa
Signing time:             Thu 27 Jun 2024 19:15:02 +0000
ROA not before:           Thu 27 Jun 2024 19:10:02 +0000
ROA not after:            Thu 26 Jun 2025 19:15:02 +0000
asID:                     267704
IP address blocks:        45.162.180.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:64:b8:d1:dc:5f:bf:62:66:38:e9:84:a5:09:47:38:7e:70:93:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9037968409387615A2867C81BDF4EE88009203
        Validity
            Not Before: Jun 27 19:10:02 2024 GMT
            Not After : Jun 26 19:15:02 2025 GMT
        Subject: CN=8FA44930A86C3FDEBCA4276218EB53E8AA59136D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:53:f6:70:87:a0:73:69:ed:81:b1:05:3d:
                    2b:e0:10:0f:4d:c8:79:72:2e:b7:a7:ad:04:f9:be:
                    1f:0c:0d:6b:70:1b:30:f9:8d:2d:a6:88:03:d9:a2:
                    9e:7b:ed:79:fe:4d:ab:69:37:80:34:24:b7:64:7a:
                    00:39:2d:1b:2b:57:6f:84:3d:16:84:f1:34:57:aa:
                    eb:68:8f:9d:b3:6b:32:5a:42:24:f1:2c:37:31:70:
                    36:dd:59:3c:b0:e2:d2:8f:b0:16:83:4c:68:8a:64:
                    d2:8d:74:b5:8f:7e:85:91:71:c7:1f:03:b8:49:60:
                    7e:f1:d9:e0:b7:e1:a0:a3:f3:e6:92:53:49:1e:54:
                    53:22:8d:c3:e9:98:99:95:16:ea:43:55:f2:fc:18:
                    dd:f8:68:a5:41:9c:91:eb:ec:9b:1d:5a:ef:4e:d8:
                    af:43:5a:9f:7b:dd:62:35:1b:e8:a8:b0:ea:38:bd:
                    4f:b3:a0:17:8d:18:d1:38:9a:d4:9f:a7:1f:7b:23:
                    e4:b7:e2:64:e4:a2:96:3b:58:d3:63:da:1b:e3:33:
                    e0:69:3a:9f:ef:9b:24:3c:ce:bc:d8:a9:e3:54:15:
                    b3:a3:c9:7c:66:a0:0f:20:17:0d:50:c5:87:bc:c2:
                    61:61:c7:7b:3a:b0:28:19:47:69:fc:f3:ff:fe:c8:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A4:49:30:A8:6C:3F:DE:BC:A4:27:62:18:EB:53:E8:AA:59:13:6D
            X509v3 Authority Key Identifier:
                keyid:BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138302e302f32332d3233203d3e20323637373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:73:b7:7e:2f:da:de:e6:7f:28:ac:b5:6c:10:09:fa:db:24:
         45:90:75:40:45:ce:14:2d:a6:18:5b:8c:d7:f7:75:20:b3:ae:
         a7:7c:a5:a9:ee:99:f0:62:b5:ee:ca:53:04:95:15:31:cc:33:
         18:38:d8:0c:89:fe:74:41:76:36:3d:9f:2f:56:db:17:cb:8f:
         5a:b9:5c:04:a7:88:3b:e6:9d:38:95:fd:60:f8:c8:d8:73:28:
         29:06:44:7a:81:eb:62:08:06:1d:5f:c0:5b:d4:77:c8:81:7e:
         0a:5a:a1:65:a1:7e:b8:0d:f4:a4:e0:12:0b:f7:82:75:1d:cd:
         4e:a7:de:2e:41:ff:99:94:a0:9b:d1:26:a0:17:7e:31:1e:ec:
         c6:bc:f4:fa:6d:7c:73:23:35:d6:f8:84:9b:37:04:c8:59:3d:
         80:8b:d6:6d:59:5c:77:da:3b:f9:67:89:8f:45:84:9e:bb:fc:
         25:ad:c0:b9:9b:f5:34:ef:d8:1e:30:55:de:ab:3e:13:27:32:
         00:ab:4c:1d:8e:7d:94:27:f5:82:6d:7d:91:5c:65:08:fe:6e:
         5a:b8:df:90:27:f1:99:c7:39:f5:5d:39:d6:3b:85:3f:8e:33:
         fa:30:10:80:7f:24:67:2d:7f:60:09:ee:49:8a:20:bd:14:72:
         bc:ee:fd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----