Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33332e302f32342d3234203d3e20323636383736.roa
File:                     34352e3136302e33332e302f32342d3234203d3e20323636383736.roa (raw, json)
Hash identifier:          +H3wvufT7eglBB3ia1y4HXCEtoaS9rxiyDbAa3Erwrw=
Subject key identifier:   94:17:66:EE:51:80:83:BF:91:96:2F:68:0F:AC:7B:EA:FE:A9:DD:29
Certificate issuer:       /CN=9A0A973B46C2B2B4900ED226E666340849864C77
Certificate serial:       6B8A53A887B1E8174DF9BC42139BC96EC9AF26B5
Authority key identifier: 9A:0A:97:3B:46:C2:B2:B4:90:0E:D2:26:E6:66:34:08:49:86:4C:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33332e302f32342d3234203d3e20323636383736.roa
Signing time:             Tue 05 Mar 2024 17:45:01 +0000
ROA not before:           Tue 05 Mar 2024 17:40:01 +0000
ROA not after:            Tue 04 Mar 2025 17:45:01 +0000
asID:                     266876
IP address blocks:        45.160.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 21 Apr 2024 04:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8a:53:a8:87:b1:e8:17:4d:f9:bc:42:13:9b:c9:6e:c9:af:26:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A0A973B46C2B2B4900ED226E666340849864C77
        Validity
            Not Before: Mar  5 17:40:01 2024 GMT
            Not After : Mar  4 17:45:01 2025 GMT
        Subject: CN=941766EE518083BF91962F680FAC7BEAFEA9DD29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:47:c8:ae:67:4a:4b:4c:59:ab:aa:b7:a2:
                    56:a3:da:6c:13:78:bb:6f:c6:2a:28:80:18:28:c7:
                    38:77:b2:a9:d7:66:e0:6f:25:0b:e0:4f:c8:d3:b2:
                    90:e6:a3:86:e3:ce:6c:a0:0e:1a:3b:1a:06:41:59:
                    94:86:86:48:cf:7f:94:65:bb:f0:2b:79:07:07:c7:
                    f3:78:db:30:2d:db:d3:ce:d5:58:00:7d:e1:fb:d2:
                    ca:84:9d:dc:b9:fb:7f:60:3c:61:2a:ff:75:05:8b:
                    68:65:06:39:82:fb:38:e9:29:c4:74:89:58:3c:07:
                    60:54:80:d5:93:e1:6d:b2:57:4c:ca:07:d3:9e:05:
                    4e:06:c9:c0:5d:38:56:e6:7d:d0:3d:f5:99:a2:a6:
                    1b:31:30:b1:48:22:ba:b1:35:3d:80:91:79:d8:3a:
                    d0:8b:a9:dc:64:71:6d:eb:41:b7:3e:3b:b3:e5:98:
                    10:cd:47:25:53:f6:10:82:ab:f9:6a:16:9a:46:4c:
                    fa:de:d2:34:cc:ba:7c:32:85:b8:63:fe:92:49:c8:
                    b3:46:da:75:5b:04:55:35:01:15:10:9a:80:c4:7e:
                    52:d4:06:ec:9a:d0:15:4a:24:aa:bb:fd:df:4c:01:
                    7f:e0:f7:ea:f2:3a:87:b5:14:00:be:ca:d0:9e:a0:
                    32:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:66:EE:51:80:83:BF:91:96:2F:68:0F:AC:7B:EA:FE:A9:DD:29
            X509v3 Authority Key Identifier:
                keyid:9A:0A:97:3B:46:C2:B2:B4:90:0E:D2:26:E6:66:34:08:49:86:4C:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33332e302f32342d3234203d3e20323636383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:8d:07:12:6c:7f:31:fb:16:b0:ee:e5:e8:47:8f:52:01:5e:
         d8:61:09:92:f4:4d:3f:b6:d7:3f:c9:66:5c:df:19:47:91:0a:
         f6:e1:65:3b:70:81:b1:26:19:f4:c6:f6:c1:cd:af:32:a6:c9:
         d6:f3:df:fc:15:97:7f:8f:f9:c1:6b:71:72:54:0e:96:4e:c0:
         71:1d:98:9d:45:1d:c8:4c:e2:69:2b:51:d5:7f:e9:c5:a7:cd:
         b6:84:94:ed:75:8e:86:58:ed:50:a0:df:7f:96:35:9e:fd:f2:
         26:1c:d5:87:d3:01:80:47:73:d4:c0:14:20:98:8e:8d:af:d2:
         fb:1b:bc:36:46:b3:87:2c:af:51:cd:7f:06:3b:24:9e:1d:f2:
         84:b7:92:d1:13:35:66:66:cf:4a:ae:f3:c4:19:44:70:9a:6d:
         4a:d8:8a:e0:a3:8a:9c:82:c0:38:ee:9f:76:e1:24:b3:8c:36:
         d0:d9:e1:4d:eb:af:e6:a5:ee:cc:cb:a5:17:92:57:b5:14:b5:
         17:38:c9:af:24:ac:a7:70:f5:03:30:8c:9d:1a:2c:1c:2c:e9:
         45:78:bb:20:b3:a8:7e:ed:7c:05:f2:61:3d:c7:0d:1c:62:d6:
         29:22:7d:09:b7:e7:53:2e:70:3c:fc:83:d9:02:66:5a:f8:51:
         6f:28:fd:5c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUa4pTqIex6BdN+bxCE5vJbsmvJrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUEwQTk3M0I0NkMyQjJCNDkwMEVEMjI2RTY2NjM0MDg0
OTg2NEM3NzAeFw0yNDAzMDUxNzQwMDFaFw0yNTAzMDQxNzQ1MDFaMDMxMTAvBgNV
BAMTKDk0MTc2NkVFNTE4MDgzQkY5MTk2MkY2ODBGQUM3QkVBRkVBOUREMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpzEfIrmdKS0xZq6q3olaj2mwT
eLtvxioogBgoxzh3sqnXZuBvJQvgT8jTspDmo4bjzmygDho7GgZBWZSGhkjPf5Rl
u/AreQcHx/N42zAt29PO1VgAfeH70sqEndy5+39gPGEq/3UFi2hlBjmC+zjpKcR0
iVg8B2BUgNWT4W2yV0zKB9OeBU4GycBdOFbmfdA99ZmiphsxMLFIIrqxNT2AkXnY
OtCLqdxkcW3rQbc+O7PlmBDNRyVT9hCCq/lqFppGTPre0jTMunwyhbhj/pJJyLNG
2nVbBFU1ARUQmoDEflLUBuya0BVKJKq7/d9MAX/g9+ryOoe1FAC+ytCeoDI9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUlBdm7lGAg7+Rli9oD6x76v6p3SkwHwYDVR0j
BBgwFoAUmgqXO0bCsrSQDtIm5mY0CEmGTHcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMjkyMjYyQ0MxREY4QThEQUNEOEEzNzEzQTY1MzBFOTM2
ODI4MDM5RkFDNEE0MjY4RTJFOTFFQjAzQzZDOTFFLzAvOUEwQTk3M0I0NkMyQjJC
NDkwMEVEMjI2RTY2NjM0MDg0OTg2NEM3Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTBBOTczQjQ2QzJCMkI0OTAw
RUQyMjZFNjY2MzQwODQ5ODY0Qzc3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjI5MjI2MkNDMURGOEE4REFDRDhBMzcxM0E2NTMwRTkzNjgyODAzOUZB
QzRBNDI2OEUyRTkxRUIwM0M2QzkxRS8wLzM0MzUyZTMxMzYzMDJlMzMzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2gITAN
BgkqhkiG9w0BAQsFAAOCAQEALY0HEmx/MfsWsO7l6EePUgFe2GEJkvRNP7bXP8lm
XN8ZR5EK9uFlO3CBsSYZ9Mb2wc2vMqbJ1vPf/BWXf4/5wWtxclQOlk7AcR2YnUUd
yEziaStR1X/pxafNtoSU7XWOhljtUKDff5Y1nv3yJhzVh9MBgEdz1MAUIJiOja/S
+xu8NkazhyyvUc1/Bjsknh3yhLeS0RM1ZmbPSq7zxBlEcJptStiK4KOKnILAOO6f
duEks4w20NnhTeuv5qXuzMulF5JXtRS1FzjJrySsp3D1AzCMnRosHCzpRXi7ILOo
fu18BfJhPccNHGLWKSJ9CbfnUy5wPPyD2QJmWvhRbyj9XA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org