Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/34352e3233362e33302e302f32342d3234203d3e20323733323033.roa
File:                     34352e3233362e33302e302f32342d3234203d3e20323733323033.roa (raw, json)
Hash identifier:          5OPFrXMhkhDJTHIO28MmOYymmnszFVJlNDoHm8YPzSo=
Subject key identifier:   3B:82:12:12:E3:2A:04:15:1F:A0:DF:F9:ED:CB:D1:15:4A:C2:3D:F2
Certificate issuer:       /CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
Certificate serial:       1541D1E9E078AF44FFF815992A7D0E58BC3608F7
Authority key identifier: 22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/34352e3233362e33302e302f32342d3234203d3e20323733323033.roa
Signing time:             Wed 29 May 2024 19:50:00 +0000
ROA not before:           Wed 29 May 2024 19:45:00 +0000
ROA not after:            Wed 28 May 2025 19:50:00 +0000
asID:                     273203
IP address blocks:        45.236.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 15:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:41:d1:e9:e0:78:af:44:ff:f8:15:99:2a:7d:0e:58:bc:36:08:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
        Validity
            Not Before: May 29 19:45:00 2024 GMT
            Not After : May 28 19:50:00 2025 GMT
        Subject: CN=3B821212E32A04151FA0DFF9EDCBD1154AC23DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:dc:cb:31:65:58:e5:6a:ab:29:1b:72:5c:80:
                    bd:ae:d3:55:df:5d:9d:7e:fa:34:38:24:a2:0c:e7:
                    12:39:f7:16:bd:74:61:af:09:58:f7:dd:77:70:a2:
                    d5:fd:ff:14:1e:b0:c8:d3:a5:17:73:d6:06:39:92:
                    7c:aa:05:eb:1b:9d:79:f6:34:e0:a2:54:02:6c:92:
                    2e:54:c7:f3:cb:22:2a:0c:cd:ff:9c:fa:5a:2a:71:
                    53:47:e5:18:72:10:85:9b:a9:04:f7:bd:63:52:a5:
                    17:f6:2d:ff:9c:c6:5a:b9:18:42:54:ef:9e:7d:81:
                    77:63:2e:c1:77:09:64:c1:d2:71:af:39:80:8f:59:
                    27:7e:dd:cf:6a:f3:a2:54:be:55:a0:27:94:95:3a:
                    0f:38:f8:62:c1:b1:f9:29:e4:5a:f5:67:61:ef:b8:
                    5a:04:e0:e6:f9:29:d6:3e:e7:4b:b1:4b:e4:3d:48:
                    78:f4:8e:41:f6:e6:d3:bf:7f:37:fd:65:a3:c8:02:
                    9b:fa:31:28:08:f0:7d:8b:12:21:87:83:a8:0b:54:
                    c3:79:1d:b9:1c:c5:4a:c1:c9:c1:dd:11:6e:4b:e2:
                    39:d6:82:db:fa:a0:fa:8f:cf:99:cb:8e:36:9b:f5:
                    33:87:7d:b9:04:75:b3:f7:47:52:76:eb:45:aa:34:
                    74:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:82:12:12:E3:2A:04:15:1F:A0:DF:F9:ED:CB:D1:15:4A:C2:3D:F2
            X509v3 Authority Key Identifier:
                keyid:22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/34352e3233362e33302e302f32342d3234203d3e20323733323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:f9:12:c3:48:5a:3e:7c:04:9b:4b:ae:00:3e:4d:92:e9:d6:
         ff:9f:09:87:41:f6:4d:95:1e:46:5b:8a:99:11:12:f0:65:ec:
         ed:ab:54:8d:55:d0:44:15:84:6c:05:a3:c6:fd:2e:4b:36:e0:
         2a:4a:d3:b1:ff:14:df:e2:8a:65:68:f0:c7:6a:6e:e4:44:59:
         86:af:ea:f2:81:62:cb:f3:02:22:c4:25:74:62:70:58:fb:32:
         fc:ec:e8:81:d2:cc:e1:ae:29:ed:15:0e:3a:3e:b5:3e:e9:22:
         b2:ac:c2:e2:fe:57:0f:05:bc:39:94:77:e0:82:14:ea:b6:89:
         2f:ea:0d:2c:42:c8:b0:9d:ae:43:f9:76:0e:cf:e4:55:9f:03:
         bd:05:92:a2:8a:19:b6:c5:59:c8:a1:41:8c:12:b1:0b:81:f6:
         25:bf:31:85:3a:18:ed:47:23:3d:b8:2f:b9:f9:03:1c:f1:17:
         08:f1:c5:8a:54:8a:7a:19:f8:b0:02:11:fa:72:99:dc:64:19:
         81:8e:2c:3f:47:19:32:fe:40:2a:a7:bc:f9:df:24:71:70:b4:
         c4:a5:d2:bd:65:1b:53:48:80:e9:81:43:e6:3a:19:a7:09:83:
         56:86:7d:39:3e:c9:c1:98:7d:f2:f1:e4:45:29:76:2e:d6:8d:
         2e:62:ed:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----