Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/34352e3233342e36332e302f32342d3234203d3e20323636373636.roa
File:                     34352e3233342e36332e302f32342d3234203d3e20323636373636.roa (raw, json)
Hash identifier:          I0Jb2TceaK5/UM9boUtlDctmp4hMjL9s8jDfkXobeU8=
Subject key identifier:   5E:5D:7B:86:3B:F9:70:35:42:4B:3D:01:53:54:93:73:8A:B6:01:12
Certificate issuer:       /CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D
Certificate serial:       23E9749B6C2255E9F23597E75E8734A7366422D3
Authority key identifier: DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/34352e3233342e36332e302f32342d3234203d3e20323636373636.roa
Signing time:             Tue 20 Aug 2024 21:10:00 +0000
ROA not before:           Tue 20 Aug 2024 21:05:00 +0000
ROA not after:            Tue 19 Aug 2025 21:10:00 +0000
asID:                     266766
IP address blocks:        45.234.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 18:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e9:74:9b:6c:22:55:e9:f2:35:97:e7:5e:87:34:a7:36:64:22:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D
        Validity
            Not Before: Aug 20 21:05:00 2024 GMT
            Not After : Aug 19 21:10:00 2025 GMT
        Subject: CN=5E5D7B863BF97035424B3D01535493738AB60112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:ba:3e:86:42:76:4a:80:75:33:7d:2a:d9:
                    35:b5:72:2d:cf:c9:7c:2d:65:b3:0a:ad:53:e2:21:
                    ac:cc:68:1e:94:3c:cb:78:d5:6d:55:2c:09:97:23:
                    c0:0e:bc:c7:15:67:88:c7:51:b7:84:53:30:ac:8b:
                    96:01:3e:fd:6a:d4:0d:c9:f0:7d:5d:7a:bc:b2:69:
                    fe:da:65:ce:e3:7c:54:da:9f:fe:28:bf:5b:82:99:
                    db:3f:e0:6a:e6:05:34:f9:76:44:5d:37:aa:45:4c:
                    4d:c3:27:f2:b1:d6:04:72:56:18:ef:4b:94:e5:7a:
                    38:b1:ac:56:9c:1a:c6:6a:73:ed:64:a6:e5:72:89:
                    b7:b9:dc:04:a6:29:02:2f:89:60:5a:3c:9e:db:41:
                    f5:dc:64:ba:cb:98:3e:e4:cb:e3:9b:5b:db:1c:dd:
                    c2:40:1b:9b:a0:3c:b2:9d:02:c0:47:86:74:d2:ae:
                    f7:87:aa:2d:27:f7:f6:94:45:8c:40:c3:6f:fb:39:
                    5d:66:c3:3f:94:b4:bb:8e:e4:ea:af:3b:81:c4:dd:
                    48:65:0f:4b:92:08:04:98:03:f1:bc:45:2a:c8:7b:
                    99:ad:16:d8:5e:71:ce:3b:3d:70:74:03:8f:c2:5d:
                    00:ab:37:25:63:ff:08:ca:3e:7f:11:d3:7f:a7:fc:
                    18:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5D:7B:86:3B:F9:70:35:42:4B:3D:01:53:54:93:73:8A:B6:01:12
            X509v3 Authority Key Identifier:
                keyid:DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/34352e3233342e36332e302f32342d3234203d3e20323636373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:a4:c2:68:d2:df:48:99:f4:ca:92:ef:14:da:23:6f:a8:49:
         61:c9:2e:de:09:ec:84:53:95:e6:a0:d3:c8:46:a3:90:85:1e:
         bc:5f:6f:d2:ce:5c:84:fa:5c:a6:3b:9a:4a:0b:95:86:54:4d:
         c4:47:96:b7:da:c1:4b:ff:d0:e3:9a:6a:49:54:cc:00:24:62:
         e9:b1:3b:0d:91:a5:20:10:c0:70:c4:b2:36:d5:d9:bd:a2:25:
         f7:10:61:32:9c:e5:bd:b4:b8:d9:83:15:f7:8f:d9:8c:85:96:
         2e:84:0b:19:9c:f2:28:94:ab:7d:26:d1:8f:97:20:49:42:9c:
         21:db:e8:51:e0:2b:4c:50:03:f4:43:3b:5a:bd:48:28:e3:a7:
         a5:6b:a5:05:98:dc:b1:c5:df:2f:b5:28:c9:ad:2e:ab:9f:3c:
         09:50:36:48:7e:d0:b4:12:68:ad:da:32:3f:0a:1c:30:0a:5b:
         cf:1a:54:49:08:23:72:e1:9e:c4:2b:65:de:88:93:a1:b4:17:
         51:2c:53:f3:9e:a4:86:53:9e:23:c6:d4:c9:b8:12:aa:3e:8f:
         b1:a8:d9:eb:4b:04:86:73:14:3f:2a:60:6d:19:c9:f5:1e:22:
         26:bc:97:00:61:6c:3d:2e:c8:32:d5:b2:a1:2b:f4:3b:88:ab:
         a4:6d:51:bc
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUI+l0m2wiVenyNZfnXoc0pzZkItMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQyODZBODNCRTc3QzQyQkEyRDJCQkM4RTVBNENDQUYx
OTYwMjY0RDAeFw0yNDA4MjAyMTA1MDBaFw0yNTA4MTkyMTEwMDBaMDMxMTAvBgNV
BAMTKDVFNUQ3Qjg2M0JGOTcwMzU0MjRCM0QwMTUzNTQ5MzczOEFCNjAxMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzK7o+hkJ2SoB1M30q2TW1ci3P
yXwtZbMKrVPiIazMaB6UPMt41W1VLAmXI8AOvMcVZ4jHUbeEUzCsi5YBPv1q1A3J
8H1deryyaf7aZc7jfFTan/4ov1uCmds/4GrmBTT5dkRdN6pFTE3DJ/Kx1gRyVhjv
S5TlejixrFacGsZqc+1kpuVyibe53ASmKQIviWBaPJ7bQfXcZLrLmD7ky+ObW9sc
3cJAG5ugPLKdAsBHhnTSrveHqi0n9/aURYxAw2/7OV1mwz+UtLuO5OqvO4HE3Uhl
D0uSCASYA/G8RSrIe5mtFthecc47PXB0A4/CXQCrNyVj/wjKPn8R03+n/BgrAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUXl17hjv5cDVCSz0BU1STc4q2ARIwHwYDVR0j
BBgwFoAU3Shqg753xCui0rvI5aTMrxlgJk0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTQ3RERFQkQxOEM4MzQ5M0QxQTExQUVEQjU0MUE1RTMw
RTE4M0RGMjRFQUNGN0YyNTRCMkU2MUEzNjM4N0EwLzAvREQyODZBODNCRTc3QzQy
QkEyRDJCQkM4RTVBNENDQUYxOTYwMjY0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERDI4NkE4M0JFNzdDNDJCQTJE
MkJCQzhFNUE0Q0NBRjE5NjAyNjRELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREU0N0RERUJEMThDODM0OTNEMUExMUFFREI1NDFBNUUzMEUxODNERjI0
RUFDRjdGMjU0QjJFNjFBMzYzODdBMC8wLzM0MzUyZTMyMzMzNDJlMzYzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM3MzYzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3qPzAN
BgkqhkiG9w0BAQsFAAOCAQEAaqTCaNLfSJn0ypLvFNojb6hJYcku3gnshFOV5qDT
yEajkIUevF9v0s5chPpcpjuaSguVhlRNxEeWt9rBS//Q45pqSVTMACRi6bE7DZGl
IBDAcMSyNtXZvaIl9xBhMpzlvbS42YMV94/ZjIWWLoQLGZzyKJSrfSbRj5cgSUKc
IdvoUeArTFAD9EM7Wr1IKOOnpWulBZjcscXfL7Uoya0uq588CVA2SH7QtBJordoy
PwocMApbzxpUSQgjcuGexCtl3oiTobQXUSxT856khlOeI8bUybgSqj6PsajZ60sE
hnMUPypgbRnJ9R4iJryXAGFsPS7IMtWyoSv0O4irpG1RvA==
-----END CERTIFICATE-----