Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133372e302f32342d3234203d3e20323637383530.roa
File:                     34352e3137352e3133372e302f32342d3234203d3e20323637383530.roa (raw, json)
Hash identifier:          PqVa2iN5BlnFAk7R5fMiGzsVbovufyKteYbMMH8jdS0=
Subject key identifier:   56:6E:33:09:38:06:91:C8:DB:0D:7C:A4:26:C3:28:83:2E:D7:0B:62
Certificate issuer:       /CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
Certificate serial:       07D2CB5F467674125CD950554D8A5F2CCF869895
Authority key identifier: 24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133372e302f32342d3234203d3e20323637383530.roa
Signing time:             Mon 08 Apr 2024 16:05:00 +0000
ROA not before:           Mon 08 Apr 2024 16:00:00 +0000
ROA not after:            Mon 07 Apr 2025 16:05:00 +0000
asID:                     267850
IP address blocks:        45.175.137.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 30 May 2024 14:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d2:cb:5f:46:76:74:12:5c:d9:50:55:4d:8a:5f:2c:cf:86:98:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
        Validity
            Not Before: Apr  8 16:00:00 2024 GMT
            Not After : Apr  7 16:05:00 2025 GMT
        Subject: CN=566E3309380691C8DB0D7CA426C328832ED70B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:65:a4:81:d6:7c:40:a1:93:76:58:c4:52:
                    73:89:1c:d0:a5:9c:ad:b4:6e:f4:d2:ad:5c:f0:58:
                    aa:02:8e:06:fe:50:8b:8e:04:1b:38:ec:ee:f2:5d:
                    cd:c5:f5:73:65:9c:4a:00:9f:cd:57:7a:61:79:f4:
                    a7:0f:c8:ef:ed:47:c1:64:ed:93:ad:1f:54:4a:44:
                    a9:9e:ab:3f:0c:19:df:6a:95:82:11:31:62:82:05:
                    2d:84:c6:87:2c:1f:73:fd:0e:13:a9:40:c7:eb:86:
                    41:d0:40:78:a8:c2:88:4c:ec:03:b5:c8:7f:62:47:
                    3a:9e:95:2b:7c:4b:05:03:3f:9d:fa:78:76:df:40:
                    7a:22:a0:ce:b9:48:5d:c2:06:a9:ca:33:ad:dc:ca:
                    9a:cb:18:a0:b3:1e:84:84:37:91:18:df:87:a5:1f:
                    6a:73:57:96:2f:7c:97:34:40:27:d1:a8:83:24:5d:
                    cf:77:3c:1a:e2:86:9f:23:6f:2e:02:b5:a0:cd:85:
                    f0:6f:87:10:ab:df:fd:4d:02:32:81:10:4d:d2:43:
                    d0:20:90:28:e4:43:ec:bd:00:fa:1d:33:98:7d:36:
                    3a:07:c7:22:5b:f6:bf:8f:0a:16:f1:0d:e1:9d:4c:
                    8a:0f:ff:d5:66:c0:79:15:8c:81:a8:de:d0:11:b8:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6E:33:09:38:06:91:C8:DB:0D:7C:A4:26:C3:28:83:2E:D7:0B:62
            X509v3 Authority Key Identifier:
                keyid:24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133372e302f32342d3234203d3e20323637383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:3a:b2:77:f5:5e:77:b8:5a:da:00:62:94:71:c9:a1:f6:60:
         37:98:33:05:88:63:3a:ba:f3:58:8a:d8:59:91:19:2c:f9:65:
         a4:19:ba:68:a0:b6:6c:99:fe:4b:f6:85:44:64:c1:9b:0f:a6:
         56:a6:ac:2b:02:e0:29:bb:af:51:19:2a:b4:7b:aa:b8:7f:90:
         0c:a4:0f:c4:f7:dc:d3:76:22:b5:b9:c8:82:99:e5:2e:c4:16:
         a3:77:ee:ea:04:81:e8:06:38:65:21:44:49:ae:72:28:38:62:
         72:7d:02:86:9b:f1:6d:1a:68:69:b8:95:0d:ea:1e:c0:91:f2:
         01:ce:44:9a:fa:44:4b:91:36:26:bf:1e:b8:3b:b8:8d:6e:f7:
         6c:d9:31:43:bc:66:58:ed:41:0a:ec:c2:10:3a:8f:49:26:d4:
         c4:a9:66:5d:61:d4:76:dd:2d:7e:d2:17:ce:2b:5d:61:63:ea:
         1d:73:45:7f:f4:4e:6d:61:57:ef:c7:0b:d8:dd:1a:34:0e:3f:
         36:72:19:e1:c8:5c:7c:52:e6:1a:3d:21:98:71:92:8c:9c:85:
         6b:7f:50:d1:cd:4a:9f:a8:2b:84:bb:1b:ad:51:20:32:0b:28:
         68:4b:70:81:21:62:3a:db:6d:53:36:25:20:2d:aa:ad:41:7d:
         ef:dc:b4:65
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUB9LLX0Z2dBJc2VBVTYpfLM+GmJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRDRDAyRjU4NjFBMjkwQ0I4NzIyRjQ5NUQwODdDNUZD
MzRFQjNBODAeFw0yNDA0MDgxNjAwMDBaFw0yNTA0MDcxNjA1MDBaMDMxMTAvBgNV
BAMTKDU2NkUzMzA5MzgwNjkxQzhEQjBEN0NBNDI2QzMyODgzMkVENzBCNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOt2WkgdZ8QKGTdljEUnOJHNCl
nK20bvTSrVzwWKoCjgb+UIuOBBs47O7yXc3F9XNlnEoAn81XemF59KcPyO/tR8Fk
7ZOtH1RKRKmeqz8MGd9qlYIRMWKCBS2ExocsH3P9DhOpQMfrhkHQQHiowohM7AO1
yH9iRzqelSt8SwUDP536eHbfQHoioM65SF3CBqnKM63cyprLGKCzHoSEN5EY34el
H2pzV5YvfJc0QCfRqIMkXc93PBrihp8jby4CtaDNhfBvhxCr3/1NAjKBEE3SQ9Ag
kCjkQ+y9APodM5h9NjoHxyJb9r+PChbxDeGdTIoP/9VmwHkVjIGo3tARuJP1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUVm4zCTgGkcjbDXykJsMogy7XC2IwHwYDVR0j
BBgwFoAUJM0C9YYaKQy4ci9JXQh8X8NOs6gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQ0UwMjhGM0ZEMkUyQTY4RkU0QTk4RjRFQkM3QzE4MDYw
MDlFNkYwOTY0Qjk0QkExQUYwQjU2NjU1RjVGMjJCLzAvMjRDRDAyRjU4NjFBMjkw
Q0I4NzIyRjQ5NUQwODdDNUZDMzRFQjNBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNENEMDJGNTg2MUEyOTBDQjg3
MjJGNDk1RDA4N0M1RkMzNEVCM0E4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRENFMDI4RjNGRDJFMkE2OEZFNEE5OEY0RUJDN0MxODA2MDA5RTZGMDk2
NEI5NEJBMUFGMEI1NjY1NUY1RjIyQi8wLzM0MzUyZTMxMzczNTJlMzEzMzM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzgzNTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALa+J
MA0GCSqGSIb3DQEBCwUAA4IBAQAhOrJ39V53uFraAGKUccmh9mA3mDMFiGM6uvNY
ithZkRks+WWkGbpooLZsmf5L9oVEZMGbD6ZWpqwrAuApu69RGSq0e6q4f5AMpA/E
99zTdiK1uciCmeUuxBajd+7qBIHoBjhlIURJrnIoOGJyfQKGm/FtGmhpuJUN6h7A
kfIBzkSa+kRLkTYmvx64O7iNbvds2TFDvGZY7UEK7MIQOo9JJtTEqWZdYdR23S1+
0hfOK11hY+odc0V/9E5tYVfvxwvY3Ro0Dj82chnhyFx8UuYaPSGYcZKMnIVrf1DR
zUqfqCuEuxutUSAyCyhoS3CBIWI6221TNiUgLaqtQX3v3LRl
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org