Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33362e302f32322d3234203d3e203233343837.roa
File:                     34352e3137382e33362e302f32322d3234203d3e203233343837.roa (raw, json)
Hash identifier:          uq6Z6ZLmlO+CyZu8dnQmDEXNzeeKunKdJOQXF+uVoLM=
Subject key identifier:   0F:0C:E0:5C:63:D9:77:1D:90:85:23:20:F9:69:03:E4:F0:49:CB:85
Certificate issuer:       /CN=3214A9089E97D5F53B714A9F9256A933E4595E53
Certificate serial:       4AE7A8FF43E1DEB0D157950096B6C918BFDEBC3F
Authority key identifier: 32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33362e302f32322d3234203d3e203233343837.roa
Signing time:             Tue 05 Mar 2024 18:14:16 +0000
ROA not before:           Tue 05 Mar 2024 18:09:16 +0000
ROA not after:            Tue 04 Mar 2025 18:14:16 +0000
asID:                     23487
IP address blocks:        45.178.36.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 20:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e7:a8:ff:43:e1:de:b0:d1:57:95:00:96:b6:c9:18:bf:de:bc:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3214A9089E97D5F53B714A9F9256A933E4595E53
        Validity
            Not Before: Mar  5 18:09:16 2024 GMT
            Not After : Mar  4 18:14:16 2025 GMT
        Subject: CN=0F0CE05C63D9771D90852320F96903E4F049CB85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:83:58:41:22:b8:df:55:06:6b:a0:f0:ba:b8:
                    56:a0:bb:06:61:86:81:e5:54:8b:9f:37:91:92:79:
                    78:e9:8f:f8:5f:90:34:71:40:9f:da:3c:d9:54:93:
                    19:9c:73:20:2c:32:4e:8b:a9:6d:5f:21:29:49:5a:
                    c4:9d:6a:e2:01:1c:89:90:9c:28:bb:10:5a:0c:07:
                    ba:e5:17:c6:62:bb:26:61:88:b1:8e:e5:de:f4:c5:
                    db:58:fa:d1:1c:2b:2b:02:62:0f:b8:6e:8d:2b:c6:
                    57:be:3f:f1:0a:92:b2:6c:ad:9b:88:06:c6:3a:52:
                    17:b6:df:34:b7:de:91:98:69:0d:78:0a:81:b2:6d:
                    d6:85:f5:79:d4:51:98:ab:7f:6a:2f:78:3e:80:2d:
                    a3:08:bf:59:e1:ae:0d:7c:42:7e:76:f7:72:d1:f5:
                    bb:96:8a:00:bf:86:32:c5:f3:c8:a7:a5:94:44:0c:
                    0c:06:13:6f:1e:95:07:ef:36:be:2f:37:42:c9:0e:
                    fa:f8:17:62:40:76:26:21:5c:71:71:81:a2:03:36:
                    43:8a:7a:8c:43:1c:97:b3:16:21:16:a9:1b:90:45:
                    ea:70:06:6a:a4:97:f3:31:3e:f9:17:77:51:bc:50:
                    93:04:48:12:e9:56:14:71:1e:5d:3d:e2:0c:8a:57:
                    90:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0C:E0:5C:63:D9:77:1D:90:85:23:20:F9:69:03:E4:F0:49:CB:85
            X509v3 Authority Key Identifier:
                keyid:32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33362e302f32322d3234203d3e203233343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:66:a0:d6:90:ed:cf:84:58:33:21:a0:93:b0:81:57:29:fe:
         61:09:5a:8b:7c:93:fb:ca:00:8c:ef:3b:01:7f:81:57:4d:3d:
         92:4d:4d:3b:4d:4b:cc:83:d7:07:75:5a:09:10:b7:c1:e5:99:
         42:3a:07:33:c4:e3:9e:94:19:90:69:d7:c4:ad:86:9b:75:fb:
         37:44:4d:e4:74:0e:e8:a2:1c:99:34:38:2f:7b:ba:61:e5:b9:
         f3:09:4e:0f:d3:9a:78:5b:7d:5a:89:70:98:13:ff:77:01:af:
         f1:72:01:d2:46:4a:49:12:12:0e:7a:15:fb:16:a0:fb:58:37:
         a9:8b:b7:bf:8a:ab:7d:5c:07:80:a1:28:4f:15:b9:fa:8e:df:
         c0:d9:e2:5f:e7:9a:b7:33:cf:92:36:fe:e8:c7:07:74:7d:15:
         05:d3:7f:0d:1c:ae:62:4e:e2:ff:a6:55:54:ca:0a:85:d0:75:
         c6:07:42:76:45:68:63:a8:be:42:55:25:77:ea:d5:d4:09:ad:
         93:0a:ff:ff:7a:5a:d1:64:9c:75:f8:8f:3e:29:a4:4c:c6:78:
         3a:1f:c7:74:9a:ae:d0:cb:ec:16:c2:b8:bd:51:29:db:1b:69:
         5f:81:d8:97:98:6f:16:db:30:ab:ba:b6:8c:82:37:6c:3f:8c:
         db:47:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----