Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/34352e3232382e36302e302f32322d3234203d3e20323636363737.roa
File:                     34352e3232382e36302e302f32322d3234203d3e20323636363737.roa (raw, json)
Hash identifier:          E6ybQXsYzEoZrRTTJojAzs89Ls0/GZKfd/M+EGYw7mc=
Subject key identifier:   DF:39:B6:2F:ED:7B:08:F6:51:EF:32:1D:E2:C0:69:E6:99:7C:BD:0A
Certificate issuer:       /CN=3ADE8F28C8077395C8518736031DE38C090CDF1B
Certificate serial:       18DCD65C06A4717909501AB20C47D3BCE4B5E001
Authority key identifier: 3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/34352e3232382e36302e302f32322d3234203d3e20323636363737.roa
Signing time:             Tue 05 Mar 2024 18:18:19 +0000
ROA not before:           Tue 05 Mar 2024 18:13:19 +0000
ROA not after:            Tue 04 Mar 2025 18:18:19 +0000
asID:                     266677
IP address blocks:        45.228.60.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 20:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:dc:d6:5c:06:a4:71:79:09:50:1a:b2:0c:47:d3:bc:e4:b5:e0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ADE8F28C8077395C8518736031DE38C090CDF1B
        Validity
            Not Before: Mar  5 18:13:19 2024 GMT
            Not After : Mar  4 18:18:19 2025 GMT
        Subject: CN=DF39B62FED7B08F651EF321DE2C069E6997CBD0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:7c:2d:d0:02:cb:c6:93:9d:41:9d:9e:84:
                    45:10:86:a7:81:9c:9a:8e:cd:60:23:cf:97:09:63:
                    55:f9:a9:20:2e:9e:33:f4:48:12:73:d7:4a:af:18:
                    8d:f3:c8:7e:92:c5:6a:0d:38:b2:db:fe:d1:e0:ea:
                    2a:e6:cd:37:fc:8a:07:b4:29:59:7c:75:27:cc:83:
                    52:c7:75:ab:6c:86:8b:c3:c1:ca:f4:cb:a2:ef:4b:
                    41:d9:46:e2:9d:dd:a1:81:c5:88:83:41:e9:49:95:
                    61:8c:ec:ec:56:63:9b:99:e6:78:1b:0c:61:90:e6:
                    f3:45:8b:2e:8f:38:4e:18:8c:4b:c8:cb:f4:8e:05:
                    b1:7e:5f:a8:04:73:b5:e3:f6:80:21:a0:f8:aa:0d:
                    62:59:67:d0:22:a1:0c:8a:c4:c5:ca:a6:ce:81:48:
                    f2:d4:6e:3b:e7:93:39:1f:c1:1d:15:8f:68:26:4f:
                    c0:30:f1:bf:b1:40:37:d8:65:a2:d8:96:49:40:30:
                    a8:64:1c:ba:3c:e5:dd:64:9a:e9:a5:e6:99:ed:03:
                    93:7c:73:45:27:49:66:7a:fc:df:1d:30:6b:c1:df:
                    6a:4f:f6:0e:3b:b4:e4:33:af:94:04:39:aa:4b:fc:
                    26:95:a7:74:f2:eb:eb:b2:f1:5e:bd:f8:76:fa:60:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:39:B6:2F:ED:7B:08:F6:51:EF:32:1D:E2:C0:69:E6:99:7C:BD:0A
            X509v3 Authority Key Identifier:
                keyid:3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/34352e3232382e36302e302f32322d3234203d3e20323636363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:29:f9:37:b4:73:bb:14:0d:a5:42:47:25:01:8b:9b:c9:23:
         bd:23:f0:f0:81:0b:07:7d:a5:db:54:c0:ad:e1:3d:03:30:84:
         10:1f:b0:79:35:cb:ce:19:2c:90:a8:49:a1:a9:58:4c:19:84:
         40:f3:27:e9:13:bb:17:e5:93:bb:fc:71:95:79:03:69:19:0f:
         35:77:70:ca:0e:17:dc:57:ea:17:85:57:58:33:8e:af:35:11:
         f8:35:9a:e5:84:30:da:6b:eb:03:9f:fa:10:c9:41:3e:5c:b5:
         95:23:07:c2:61:4d:17:1f:8e:82:23:03:b0:4b:ff:53:61:92:
         f8:51:f3:3b:29:cc:bb:01:0f:a4:0b:97:38:81:eb:b2:b2:0c:
         65:2b:1a:49:99:6d:cb:df:ab:4d:02:7c:6c:8f:02:10:dd:a3:
         37:b7:0f:44:60:a6:2d:14:c9:d6:ae:f6:c3:77:8a:c4:fc:c2:
         c7:2b:dc:73:06:69:52:fe:5c:90:3c:38:bc:41:a3:09:06:49:
         89:9d:06:95:9d:b4:dc:4e:65:57:e9:d6:34:b0:d3:1e:94:3d:
         d7:f2:47:b6:44:e3:58:4d:a5:7a:24:ab:b1:a6:70:0b:03:ce:
         2c:9d:75:98:85:dd:05:0a:ed:30:79:11:58:46:04:94:ec:4b:
         7e:0a:a2:27
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGNzWXAakcXkJUBqyDEfTvOS14AEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FERThGMjhDODA3NzM5NUM4NTE4NzM2MDMxREUzOEMw
OTBDREYxQjAeFw0yNDAzMDUxODEzMTlaFw0yNTAzMDQxODE4MTlaMDMxMTAvBgNV
BAMTKERGMzlCNjJGRUQ3QjA4RjY1MUVGMzIxREUyQzA2OUU2OTk3Q0JEMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYnwt0ALLxpOdQZ2ehEUQhqeB
nJqOzWAjz5cJY1X5qSAunjP0SBJz10qvGI3zyH6SxWoNOLLb/tHg6irmzTf8ige0
KVl8dSfMg1LHdatshovDwcr0y6LvS0HZRuKd3aGBxYiDQelJlWGM7OxWY5uZ5ngb
DGGQ5vNFiy6POE4YjEvIy/SOBbF+X6gEc7Xj9oAhoPiqDWJZZ9AioQyKxMXKps6B
SPLUbjvnkzkfwR0Vj2gmT8Aw8b+xQDfYZaLYlklAMKhkHLo85d1kmuml5pntA5N8
c0UnSWZ6/N8dMGvB32pP9g47tOQzr5QEOapL/CaVp3Ty6+uy8V69+Hb6YKGZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU3zm2L+17CPZR7zId4sBp5pl8vQowHwYDVR0j
BBgwFoAUOt6PKMgHc5XIUYc2Ax3jjAkM3xswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRDBGQTI4REMwMEU5RDYwMEM1MDBBNDUxRTEwMTc3RkY3
MDE4NDE0NjEyRjVCM0JEMTEzMTIyMUQzMkY0NUUwLzAvM0FERThGMjhDODA3NzM5
NUM4NTE4NzM2MDMxREUzOEMwOTBDREYxQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQURFOEYyOEM4MDc3Mzk1Qzg1
MTg3MzYwMzFERTM4QzA5MENERjFCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkQwRkEyOERDMDBFOUQ2MDBDNTAwQTQ1MUUxMDE3N0ZGNzAxODQxNDYx
MkY1QjNCRDExMzEyMjFEMzJGNDVFMC8wLzM0MzUyZTMyMzIzODJlMzYzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM2MzczNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3kPDAN
BgkqhkiG9w0BAQsFAAOCAQEAASn5N7RzuxQNpUJHJQGLm8kjvSPw8IELB32l21TA
reE9AzCEEB+weTXLzhkskKhJoalYTBmEQPMn6RO7F+WTu/xxlXkDaRkPNXdwyg4X
3FfqF4VXWDOOrzUR+DWa5YQw2mvrA5/6EMlBPly1lSMHwmFNFx+OgiMDsEv/U2GS
+FHzOynMuwEPpAuXOIHrsrIMZSsaSZlty9+rTQJ8bI8CEN2jN7cPRGCmLRTJ1q72
w3eKxPzCxyvccwZpUv5ckDw4vEGjCQZJiZ0GlZ203E5lV+nWNLDTHpQ91/JHtkTj
WE2leiSrsaZwCwPOLJ11mIXdBQrtMHkRWEYElOxLfgqiJw==
-----END CERTIFICATE-----