Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/34352e3232342e3131372e302f32342d3234203d3e20323635383338.roa
File:                     34352e3232342e3131372e302f32342d3234203d3e20323635383338.roa (raw, json)
Hash identifier:          7FlUrA6AxXFqfM+HcPhjNq7I4HP9IxjwX7Kuj29sE8g=
Subject key identifier:   CD:C3:9E:52:22:0B:D9:F3:90:3F:F2:38:25:F4:19:32:46:49:55:E6
Certificate issuer:       /CN=3995180FA9FF9A6C4E022983421515BB8415A6D5
Certificate serial:       3254B193CBAC5CD921AF42811269DC27039AE7DC
Authority key identifier: 39:95:18:0F:A9:FF:9A:6C:4E:02:29:83:42:15:15:BB:84:15:A6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/34352e3232342e3131372e302f32342d3234203d3e20323635383338.roa
Signing time:             Tue 05 Mar 2024 17:51:49 +0000
ROA not before:           Tue 05 Mar 2024 17:46:49 +0000
ROA not after:            Tue 04 Mar 2025 17:51:49 +0000
asID:                     265838
IP address blocks:        45.224.117.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 06 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:54:b1:93:cb:ac:5c:d9:21:af:42:81:12:69:dc:27:03:9a:e7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3995180FA9FF9A6C4E022983421515BB8415A6D5
        Validity
            Not Before: Mar  5 17:46:49 2024 GMT
            Not After : Mar  4 17:51:49 2025 GMT
        Subject: CN=CDC39E52220BD9F3903FF23825F41932464955E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:84:e0:4f:45:d6:86:34:7d:eb:fe:1f:69:d0:
                    06:c1:2b:f2:e1:43:fa:f0:64:56:d1:23:3e:ac:31:
                    23:b7:e4:57:2b:d9:aa:74:0d:6c:ab:8b:17:53:49:
                    6e:87:29:39:a6:03:54:f0:cc:0a:62:de:57:60:43:
                    11:c5:05:e9:58:e7:a6:68:2d:0d:2c:8c:5f:e0:59:
                    89:dd:9e:ad:06:72:93:99:47:c1:23:9a:50:ea:96:
                    c9:2e:ae:1f:80:1f:86:a5:26:0b:d8:f5:86:e2:98:
                    7b:bf:62:0d:8e:0e:5a:b4:40:ae:5f:cf:f2:49:88:
                    96:a0:73:0c:aa:c5:65:11:65:2c:7e:9d:4d:e1:ea:
                    10:0b:02:09:59:9e:02:03:c0:aa:85:c4:a9:ab:3b:
                    0b:ba:b8:de:b4:44:26:f0:79:a0:3f:e6:2f:3d:6d:
                    c1:62:a6:51:b6:5c:94:55:1a:1f:69:b1:f6:74:39:
                    3e:7e:bb:38:d7:41:5c:5a:ad:bb:04:2e:2c:a1:35:
                    6d:37:37:55:2b:34:7e:44:bd:1b:ae:f8:12:f6:9c:
                    4a:93:5b:5a:eb:f3:ed:06:b1:90:e5:84:36:a9:e4:
                    e3:fa:6c:1f:8b:66:1d:d1:d5:4b:39:3f:3f:85:d4:
                    2f:e5:56:53:dc:f2:57:8a:82:6e:ab:0c:15:6b:07:
                    12:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C3:9E:52:22:0B:D9:F3:90:3F:F2:38:25:F4:19:32:46:49:55:E6
            X509v3 Authority Key Identifier:
                keyid:39:95:18:0F:A9:FF:9A:6C:4E:02:29:83:42:15:15:BB:84:15:A6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/34352e3232342e3131372e302f32342d3234203d3e20323635383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:af:5f:62:43:4e:7b:e4:2e:ba:23:99:85:04:ef:2c:09:2d:
         e0:88:d0:43:93:7d:28:4e:b2:f0:dd:04:a8:6a:c0:18:f2:d2:
         69:70:4d:06:31:81:f3:a4:25:d8:f8:cf:04:78:ae:e8:02:7b:
         b8:5d:d7:3b:4a:ff:5e:17:4d:07:68:ea:d9:37:6c:9a:84:46:
         45:6c:98:da:b2:88:76:a3:c0:f8:f1:74:51:f2:c0:69:ae:72:
         cc:8e:bc:eb:f7:6f:a4:1c:ad:ec:5f:e9:ed:85:e3:9f:4b:f0:
         91:e6:9d:c1:71:d7:1b:e8:83:9b:df:ab:08:7d:9d:d8:fe:a5:
         fb:b5:94:85:e8:73:ec:67:4e:b4:60:ea:15:43:ce:39:f4:5f:
         a5:0a:8d:e9:55:37:30:26:97:d4:db:0f:63:55:4b:e9:e1:28:
         7f:77:0c:83:c8:5a:8c:1f:69:42:3f:d7:7e:58:81:dd:cb:69:
         c7:cb:cf:f9:34:81:f0:fd:f1:7e:af:33:12:19:20:01:03:d7:
         75:b8:20:88:7e:d9:0f:07:ba:7d:e1:d1:26:c7:72:aa:88:64:
         db:5e:25:63:43:3b:37:a4:95:07:56:7c:da:17:b3:5a:b7:36:
         72:96:30:5a:4e:ed:96:ee:91:0a:3a:14:d3:31:a6:61:83:14:
         38:34:2e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----