Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/34352e3233372e3138342e302f32342d3234203d3e20323636383238.roa
File:                     34352e3233372e3138342e302f32342d3234203d3e20323636383238.roa (raw, json)
Hash identifier:          1hJ7oq3BZP5jpxUT7vFD4ek3N9/lADc7hHIqGQW0ASQ=
Subject key identifier:   4F:5B:0A:98:97:E2:CF:53:3A:4A:3C:25:03:AC:6A:4A:7F:DF:54:C3
Certificate issuer:       /CN=283E39ACDA61098B187783EF95225FD4C9135441
Certificate serial:       60CAEB3805CCC6D20EA5E25252FA7FB067E2DF25
Authority key identifier: 28:3E:39:AC:DA:61:09:8B:18:77:83:EF:95:22:5F:D4:C9:13:54:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/283E39ACDA61098B187783EF95225FD4C9135441.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/34352e3233372e3138342e302f32342d3234203d3e20323636383238.roa
Signing time:             Tue 05 Mar 2024 17:57:01 +0000
ROA not before:           Tue 05 Mar 2024 17:52:01 +0000
ROA not after:            Tue 04 Mar 2025 17:57:01 +0000
asID:                     266828
IP address blocks:        45.237.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 05 Jul 2024 16:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ca:eb:38:05:cc:c6:d2:0e:a5:e2:52:52:fa:7f:b0:67:e2:df:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283E39ACDA61098B187783EF95225FD4C9135441
        Validity
            Not Before: Mar  5 17:52:01 2024 GMT
            Not After : Mar  4 17:57:01 2025 GMT
        Subject: CN=4F5B0A9897E2CF533A4A3C2503AC6A4A7FDF54C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:50:e3:9a:f1:d0:54:74:6d:53:35:f3:c1:69:
                    0d:6b:47:e3:b3:0b:29:b4:4c:0d:d0:95:a2:1e:36:
                    ef:b8:32:79:3b:6d:c8:db:d4:75:c7:75:25:94:af:
                    9b:6b:d3:f7:46:63:f2:4f:c6:18:ab:15:64:9a:3b:
                    1e:e2:bc:f3:80:a8:46:22:e4:fd:c8:2d:74:e0:0f:
                    56:9a:db:6b:cf:b2:02:1b:82:c7:20:c0:7f:7e:45:
                    2a:81:1e:95:86:ea:23:f2:b7:14:14:27:9d:da:37:
                    d4:63:30:07:25:55:d6:3e:46:78:5e:47:a9:eb:59:
                    a7:10:5f:54:3d:7b:8d:95:03:79:46:d8:3b:15:e4:
                    eb:b7:4b:4f:4a:1c:ab:f5:e1:ce:7a:56:f6:13:51:
                    c0:d0:43:01:e8:40:72:fe:96:b7:66:9c:e7:9b:31:
                    89:e7:33:09:0f:e8:e2:9e:ee:4a:37:9e:0d:1b:5e:
                    64:fa:6e:88:92:98:91:4b:17:07:c4:cd:43:6c:0d:
                    c3:b6:53:85:cf:8d:f4:61:5f:18:23:06:8a:7e:d3:
                    7d:54:1c:3e:51:7f:ec:4e:88:90:92:65:c1:39:a9:
                    d5:15:d5:bc:ef:48:99:e4:8f:fd:ca:5b:54:1a:14:
                    0d:cd:a4:b7:2c:b6:f1:72:8b:0a:ba:46:c7:c3:0a:
                    8b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5B:0A:98:97:E2:CF:53:3A:4A:3C:25:03:AC:6A:4A:7F:DF:54:C3
            X509v3 Authority Key Identifier:
                keyid:28:3E:39:AC:DA:61:09:8B:18:77:83:EF:95:22:5F:D4:C9:13:54:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/283E39ACDA61098B187783EF95225FD4C9135441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/283E39ACDA61098B187783EF95225FD4C9135441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/34352e3233372e3138342e302f32342d3234203d3e20323636383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:72:d9:75:0a:66:d5:9b:df:e3:5c:7f:99:a6:55:da:18:f6:
         bf:00:8a:8e:82:c2:ba:fa:3d:ee:eb:5c:d4:98:9b:6f:8e:9a:
         da:64:a6:f2:37:a5:ed:cd:6b:f6:2c:f6:f2:ad:7a:2c:68:57:
         f0:89:b2:6c:17:e7:c5:68:91:a9:40:e9:e1:57:20:a5:7a:da:
         65:5d:f1:9c:a7:e6:02:67:79:27:0f:71:f1:07:bd:3f:c7:20:
         ed:4e:c6:45:b5:e2:15:a9:e3:c5:ed:c3:a7:c9:26:eb:fe:c2:
         04:a9:63:65:c2:4c:3b:a0:47:9d:53:45:f9:7d:92:97:d7:5c:
         82:a1:62:0f:aa:ff:50:26:b5:ce:70:94:f5:25:05:28:1c:b4:
         f9:d9:6e:85:aa:8c:b8:a6:06:8a:41:b2:e9:83:2a:04:d9:5f:
         54:ba:c8:b5:0d:be:ff:b6:4a:82:70:d9:22:a0:fe:1a:32:95:
         5a:69:ee:1f:b9:c6:86:48:85:d4:02:34:90:9d:f6:0b:7a:55:
         36:6d:c3:14:3c:f0:19:65:76:fc:5e:9c:79:61:24:12:2c:43:
         77:94:da:68:ba:b6:80:bd:f5:7d:ae:45:7d:43:68:58:06:13:
         4a:b0:c2:48:be:e6:87:69:df:fd:57:53:10:7e:18:a4:74:42:
         ea:81:3d:fd
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYMrrOAXMxtIOpeJSUvp/sGfi3yUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjgzRTM5QUNEQTYxMDk4QjE4Nzc4M0VGOTUyMjVGRDRD
OTEzNTQ0MTAeFw0yNDAzMDUxNzUyMDFaFw0yNTAzMDQxNzU3MDFaMDMxMTAvBgNV
BAMTKDRGNUIwQTk4OTdFMkNGNTMzQTRBM0MyNTAzQUM2QTRBN0ZERjU0QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUOOa8dBUdG1TNfPBaQ1rR+Oz
Cym0TA3QlaIeNu+4Mnk7bcjb1HXHdSWUr5tr0/dGY/JPxhirFWSaOx7ivPOAqEYi
5P3ILXTgD1aa22vPsgIbgscgwH9+RSqBHpWG6iPytxQUJ53aN9RjMAclVdY+Rnhe
R6nrWacQX1Q9e42VA3lG2DsV5Ou3S09KHKv14c56VvYTUcDQQwHoQHL+lrdmnOeb
MYnnMwkP6OKe7ko3ng0bXmT6boiSmJFLFwfEzUNsDcO2U4XPjfRhXxgjBop+031U
HD5Rf+xOiJCSZcE5qdUV1bzvSJnkj/3KW1QaFA3NpLcstvFyiwq6RsfDCouHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUT1sKmJfiz1M6SjwlA6xqSn/fVMMwHwYDVR0j
BBgwFoAUKD45rNphCYsYd4PvlSJf1MkTVEEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85Rjc5NEE5NjgzNTI1QzIzQkEzRDNFQjZDQ0Q5RTgyNTY5
NzJEQ0QyQjY3QkUyMjU4RTM3RjAzMTVDMDAzRTRELzAvMjgzRTM5QUNEQTYxMDk4
QjE4Nzc4M0VGOTUyMjVGRDRDOTEzNTQ0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yODNFMzlBQ0RBNjEwOThCMTg3
NzgzRUY5NTIyNUZENEM5MTM1NDQxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUY3OTRBOTY4MzUyNUMyM0JBM0QzRUI2Q0NEOUU4MjU2OTcyRENEMkI2
N0JFMjI1OEUzN0YwMzE1QzAwM0U0RC8wLzM0MzUyZTMyMzMzNzJlMzEzODM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALe24
MA0GCSqGSIb3DQEBCwUAA4IBAQAoctl1CmbVm9/jXH+ZplXaGPa/AIqOgsK6+j3u
61zUmJtvjpraZKbyN6XtzWv2LPbyrXosaFfwibJsF+fFaJGpQOnhVyCletplXfGc
p+YCZ3knD3HxB70/xyDtTsZFteIVqePF7cOnySbr/sIEqWNlwkw7oEedU0X5fZKX
11yCoWIPqv9QJrXOcJT1JQUoHLT52W6Fqoy4pgaKQbLpgyoE2V9Uusi1Db7/tkqC
cNkioP4aMpVaae4fucaGSIXUAjSQnfYLelU2bcMUPPAZZXb8Xpx5YSQSLEN3lNpo
uraAvfV9rkV9Q2hYBhNKsMJIvuaHad/9V1MQfhikdELqgT39
-----END CERTIFICATE-----
Generated at Fri Jul 5 18:41:39 2024 by rpki-client on console-fra.rpki-client.org