Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/34352e3139302e39342e302f32342d3234203d3e20313938393830.roa
File:                     34352e3139302e39342e302f32342d3234203d3e20313938393830.roa (raw, json)
Hash identifier:          DtIgUDvGAcvncYpbVLbxFPIIJK5TKy4uK6rK/DKerdo=
Subject key identifier:   61:3D:13:42:A0:A1:DE:F0:4B:01:E6:3F:62:9D:E8:24:DB:C4:0F:1F
Certificate issuer:       /CN=0A5D0DA27AEF033371A74DEA11C4AF833677DD51
Certificate serial:       36770A9574ED5709610F027689C1EF77C35E0419
Authority key identifier: 0A:5D:0D:A2:7A:EF:03:33:71:A7:4D:EA:11:C4:AF:83:36:77:DD:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/34352e3139302e39342e302f32342d3234203d3e20313938393830.roa
Signing time:             Mon 08 Jul 2024 00:35:00 +0000
ROA not before:           Mon 08 Jul 2024 00:30:00 +0000
ROA not after:            Mon 07 Jul 2025 00:35:00 +0000
asID:                     198980
IP address blocks:        45.190.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 14 Jul 2024 00:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:77:0a:95:74:ed:57:09:61:0f:02:76:89:c1:ef:77:c3:5e:04:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5D0DA27AEF033371A74DEA11C4AF833677DD51
        Validity
            Not Before: Jul  8 00:30:00 2024 GMT
            Not After : Jul  7 00:35:00 2025 GMT
        Subject: CN=613D1342A0A1DEF04B01E63F629DE824DBC40F1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:84:dd:0e:3b:8f:d1:36:dc:a0:d1:3c:b9:7b:
                    19:8c:d3:8c:ec:1c:0e:44:2a:bc:58:81:58:44:5c:
                    06:b0:27:3e:e2:ab:42:a0:0f:45:53:57:28:7f:30:
                    10:51:d7:40:a3:a1:9c:5c:33:78:10:3c:6f:24:e5:
                    8c:dc:2b:45:2f:2e:d9:e7:dd:a7:76:21:b3:10:57:
                    37:1b:79:66:b5:18:63:db:c6:f2:54:a7:a9:a1:85:
                    bb:e7:c3:b0:cf:1f:6a:2a:92:b9:5a:98:6d:61:be:
                    dc:af:72:20:e7:b2:24:8f:d2:51:70:a9:68:ff:87:
                    07:f3:9d:45:0a:fa:44:87:80:35:9c:65:5c:24:4e:
                    8a:ed:a1:32:43:08:d3:f0:e2:56:86:bf:07:be:08:
                    e9:ac:11:c4:47:f9:88:48:15:88:40:cb:67:f5:0d:
                    69:d0:18:2b:cb:e8:ae:d9:27:35:56:7b:86:90:36:
                    a2:1f:5a:98:81:11:8b:82:10:83:fb:67:be:9f:47:
                    23:ed:53:25:1b:bd:29:0e:53:96:78:53:32:63:8e:
                    e9:08:a1:5b:e0:ee:6c:73:eb:6e:59:ef:0e:a4:c1:
                    ac:35:2d:93:7e:51:48:46:61:ee:33:b2:1f:a5:62:
                    88:41:00:f8:5a:f6:3f:5b:3f:b0:14:dc:da:31:47:
                    a1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3D:13:42:A0:A1:DE:F0:4B:01:E6:3F:62:9D:E8:24:DB:C4:0F:1F
            X509v3 Authority Key Identifier:
                keyid:0A:5D:0D:A2:7A:EF:03:33:71:A7:4D:EA:11:C4:AF:83:36:77:DD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/34352e3139302e39342e302f32342d3234203d3e20313938393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:be:4b:6f:5b:f9:32:b8:8d:8b:56:b2:42:d5:d4:94:e2:30:
         d4:01:94:43:37:66:eb:c3:55:76:7e:f3:c4:aa:a7:ce:22:15:
         c8:27:b3:85:51:78:d4:18:75:01:2d:f7:fc:0b:27:e0:ef:1c:
         73:57:7a:53:b8:2f:4d:8a:62:1b:81:38:2d:09:30:b6:29:98:
         39:14:87:57:6e:8b:14:48:f2:72:db:43:e6:ba:b4:60:f0:25:
         49:90:14:9f:94:4b:d3:1b:a5:b1:7b:3e:35:6c:09:e7:eb:57:
         77:f5:5b:6b:90:5a:65:64:aa:44:02:4e:f5:27:7e:92:86:86:
         87:07:7c:1c:f9:04:79:96:dc:9d:45:ef:fe:8f:14:b3:5c:56:
         a9:11:3a:d4:76:b5:b9:36:39:c5:03:51:4f:d9:84:43:bd:ba:
         04:ea:5f:54:47:a5:79:fb:ce:b0:4b:ed:aa:8f:1e:c7:5f:c2:
         8d:b3:da:f8:c5:1f:c5:14:54:0a:b2:9f:9c:26:8e:8b:60:5e:
         c6:f1:c2:36:bf:ee:e9:d0:39:8b:c7:fd:17:ac:4a:57:95:b7:
         44:c7:e0:dd:04:04:b5:c6:20:6f:bc:d8:04:ca:57:f5:3b:1a:
         39:27:40:bf:cc:9e:31:b6:ed:0c:9a:2e:bb:ea:2f:cd:d1:82:
         16:7a:a4:b2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNncKlXTtVwlhDwJ2icHvd8NeBBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE1RDBEQTI3QUVGMDMzMzcxQTc0REVBMTFDNEFGODMz
Njc3REQ1MTAeFw0yNDA3MDgwMDMwMDBaFw0yNTA3MDcwMDM1MDBaMDMxMTAvBgNV
BAMTKDYxM0QxMzQyQTBBMURFRjA0QjAxRTYzRjYyOURFODI0REJDNDBGMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdhN0OO4/RNtyg0Ty5exmM04zs
HA5EKrxYgVhEXAawJz7iq0KgD0VTVyh/MBBR10CjoZxcM3gQPG8k5YzcK0UvLtnn
3ad2IbMQVzcbeWa1GGPbxvJUp6mhhbvnw7DPH2oqkrlamG1hvtyvciDnsiSP0lFw
qWj/hwfznUUK+kSHgDWcZVwkTortoTJDCNPw4laGvwe+COmsEcRH+YhIFYhAy2f1
DWnQGCvL6K7ZJzVWe4aQNqIfWpiBEYuCEIP7Z76fRyPtUyUbvSkOU5Z4UzJjjukI
oVvg7mxz625Z7w6kwaw1LZN+UUhGYe4zsh+lYohBAPha9j9bP7AU3NoxR6HPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYT0TQqCh3vBLAeY/Yp3oJNvEDx8wHwYDVR0j
BBgwFoAUCl0NonrvAzNxp03qEcSvgzZ33VEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNDM3N0U5NDQzMEE5MzNGODc3OUExNDYyODA2RUUyQUI0
OUQ0MENCMzJFRDBCQjEyRUIxOTExMkFBRTdFQTMwLzAvMEE1RDBEQTI3QUVGMDMz
MzcxQTc0REVBMTFDNEFGODMzNjc3REQ1MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQTVEMERBMjdBRUYwMzMzNzFB
NzRERUExMUM0QUY4MzM2NzdERDUxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTQzNzdFOTQ0MzBBOTMzRjg3NzlBMTQ2MjgwNkVFMkFCNDlENDBDQjMy
RUQwQkIxMkVCMTkxMTJBQUU3RUEzMC8wLzM0MzUyZTMxMzkzMDJlMzkzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzODM5MzgzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2+XjAN
BgkqhkiG9w0BAQsFAAOCAQEATr5Lb1v5MriNi1ayQtXUlOIw1AGUQzdm68NVdn7z
xKqnziIVyCezhVF41Bh1AS33/Asn4O8cc1d6U7gvTYpiG4E4LQkwtimYORSHV26L
FEjycttD5rq0YPAlSZAUn5RL0xulsXs+NWwJ5+tXd/Vba5BaZWSqRAJO9Sd+koaG
hwd8HPkEeZbcnUXv/o8Us1xWqRE61Ha1uTY5xQNRT9mEQ726BOpfVEelefvOsEvt
qo8ex1/CjbPa+MUfxRRUCrKfnCaOi2BexvHCNr/u6dA5i8f9F6xKV5W3RMfg3QQE
tcYgb7zYBMpX9TsaOSdAv8yeMbbtDJouu+ovzdGCFnqksg==
-----END CERTIFICATE-----
Generated at Sun Jul 14 02:07:10 2024 by rpki-client on console-fra.rpki-client.org