Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138342e302f32322d3232203d3e20323637373636.roa
File:                     34352e3137302e3138342e302f32322d3232203d3e20323637373636.roa (raw, json)
Hash identifier:          ewLyvn7sbiOti46koK5gpisBJDluPtLxdk3dS0/TLM0=
Subject key identifier:   5A:F0:49:D0:03:0C:03:29:80:B1:30:BB:75:F3:89:AF:C9:EA:40:19
Certificate issuer:       /CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
Certificate serial:       7A5061DDE79EC60CB27CD2C88202B0CE6534E99B
Authority key identifier: 42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138342e302f32322d3232203d3e20323637373636.roa
Signing time:             Tue 20 Aug 2024 02:00:01 +0000
ROA not before:           Tue 20 Aug 2024 01:55:01 +0000
ROA not after:            Tue 19 Aug 2025 02:00:01 +0000
asID:                     267766
IP address blocks:        45.170.184.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 20 Aug 2024 13:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:50:61:dd:e7:9e:c6:0c:b2:7c:d2:c8:82:02:b0:ce:65:34:e9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
        Validity
            Not Before: Aug 20 01:55:01 2024 GMT
            Not After : Aug 19 02:00:01 2025 GMT
        Subject: CN=5AF049D0030C032980B130BB75F389AFC9EA4019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:be:fc:6c:82:3c:54:b8:a3:e8:b2:74:14:
                    15:51:2c:3a:e7:94:fc:de:e7:78:a0:0a:f2:4d:34:
                    d3:7e:7b:a3:0f:c0:1a:7e:82:0e:8c:65:3a:3f:9f:
                    06:50:4d:b5:05:13:f7:73:5a:c1:68:78:99:ce:67:
                    48:e1:b3:f9:f5:9b:f1:cd:00:56:17:98:60:ac:06:
                    9d:4a:ff:86:0f:91:35:37:6c:8f:14:a8:cb:69:14:
                    1c:48:72:16:f5:20:cf:b9:bd:d2:73:91:8b:ba:0b:
                    92:60:36:06:94:81:c9:4b:8b:26:db:d2:af:6c:17:
                    75:5d:6e:bb:5f:43:f1:ab:67:e3:29:fa:11:e5:63:
                    f2:0d:05:fe:95:d5:f5:5e:0b:53:57:4c:bb:1b:34:
                    40:6d:38:bf:c4:e4:63:d4:e6:c2:79:03:1d:ff:b1:
                    96:5f:64:e6:2b:38:7c:7f:31:66:c1:ac:09:7e:65:
                    29:95:fa:0a:61:a8:df:a8:45:59:24:ea:54:cd:e0:
                    e2:27:3e:1a:35:fa:fe:f8:70:fd:86:28:9e:14:db:
                    8a:02:27:dd:ca:11:0f:5e:91:b5:00:1e:b2:61:c4:
                    02:34:71:d4:ba:f4:8a:61:c0:22:04:98:b1:54:35:
                    8e:bc:54:e2:83:7b:d6:e1:79:91:74:ca:a4:87:9c:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F0:49:D0:03:0C:03:29:80:B1:30:BB:75:F3:89:AF:C9:EA:40:19
            X509v3 Authority Key Identifier:
                keyid:42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138342e302f32322d3232203d3e20323637373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:c0:97:4e:a8:b3:6e:a2:e2:2c:e0:27:27:c8:cc:d4:02:ad:
         73:2f:12:45:03:03:fc:8d:16:19:d6:42:ef:92:58:09:52:88:
         96:37:bd:84:3f:16:ed:a1:76:c5:2e:c9:50:a6:1a:ef:d5:f2:
         5a:00:50:f5:0d:05:6e:54:ba:cd:89:a0:4d:24:d0:24:bb:30:
         af:1c:f3:37:f9:38:67:6e:e2:53:50:ad:ba:53:fe:1f:8e:21:
         d4:12:6c:02:18:09:3e:e9:64:1c:24:51:d4:24:a3:5c:87:9e:
         09:4c:c8:3d:02:0b:11:2a:4f:10:77:5e:3e:64:c3:df:fa:46:
         29:e4:c8:6e:97:93:15:d5:ee:c2:39:d1:ec:34:cd:39:73:f8:
         be:3b:0c:2b:c8:69:b1:3d:0b:7e:aa:ab:61:df:b3:95:77:eb:
         36:58:cb:8d:96:f4:2a:f4:16:b0:0a:f0:d8:82:60:7d:e3:21:
         eb:f7:85:5b:eb:45:2e:10:c6:3e:a6:27:15:63:ee:7c:27:ce:
         e1:37:59:83:70:6f:41:70:ee:a0:d1:5b:56:91:3c:b5:65:17:
         76:6e:82:81:8b:61:93:d4:fb:c9:ed:76:44:13:66:3a:31:f7:
         f6:e7:2e:e8:81:7b:38:47:b9:49:4c:49:a0:d4:0d:a3:63:3a:
         a3:21:50:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----