Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/5570bccd85758e42d3643a1734b6bef8406397d2.roa
File:                     5570bccd85758e42d3643a1734b6bef8406397d2.roa (raw, json)
Hash identifier:          VVIP8RlJf5e9ooegnSrzytpwJk5rtdJAR4qJMUHiy68=
Subject key identifier:   72:8E:42:73:55:3A:33:2E:B5:C2:A0:68:40:A8:60:8D:D6:FE:E2:1A
Certificate issuer:       /CN=6adbd36382f8fdc7486124fdd6ad414b2241421a
Certificate serial:       0EEB77
Authority key identifier: 0C:EF:93:E8:59:71:2C:AE:2C:1A:BC:81:2A:11:35:1F:FF:51:0C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6adbd36382f8fdc7486124fdd6ad414b2241421a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/5570bccd85758e42d3643a1734b6bef8406397d2.roa
Signing time:             Tue 12 Mar 2024 16:08:01 +0000
ROA not before:           Tue 12 Mar 2024 16:08:01 +0000
ROA not after:            Thu 12 Mar 2026 16:08:01 +0000
asID:                     271861
IP address blocks:        45.171.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 05:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977783 (0xeeb77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6adbd36382f8fdc7486124fdd6ad414b2241421a
        Validity
            Not Before: Mar 12 16:08:01 2024 GMT
            Not After : Mar 12 16:08:01 2026 GMT
        Subject: CN=5570bccd85758e42d3643a1734b6bef8406397d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:62:22:bc:d0:95:41:a8:28:22:a5:87:a1:22:
                    b1:79:05:28:52:dc:64:aa:fc:85:a2:17:23:51:5e:
                    67:20:e5:06:53:fe:e5:9d:d7:7d:a8:e5:52:7e:52:
                    57:3f:5a:81:d3:17:04:ce:63:01:c4:5e:2b:14:96:
                    a1:e8:7a:07:b0:de:7a:ac:71:a3:c8:13:82:7a:cb:
                    9a:8d:b0:ad:fb:30:2a:4e:c8:96:07:07:f8:01:d9:
                    dc:d7:62:36:4c:dd:56:8d:79:6b:d7:9e:36:52:8f:
                    fc:e4:da:53:89:cc:ac:72:36:39:06:31:f5:18:46:
                    66:11:07:33:c3:5a:cc:6b:ee:3c:bb:49:35:3c:b3:
                    ad:c3:19:5f:67:f1:a2:03:c7:33:69:7e:bf:42:34:
                    b3:98:65:18:72:b3:8f:fb:db:91:d6:d9:42:a0:6b:
                    ec:39:8b:6a:b1:76:92:c9:3d:50:78:04:02:76:58:
                    94:1e:e6:95:ab:05:9e:df:9e:23:ad:ca:8f:53:81:
                    d4:0f:61:10:e7:08:1f:2e:e5:69:0d:07:c1:0b:88:
                    3a:b0:f5:0f:d4:96:d0:eb:01:63:b9:a8:f2:ce:2d:
                    59:88:a2:46:73:d5:e6:ba:97:cf:1e:99:fe:fc:3d:
                    e6:fa:ad:96:50:44:5a:a6:9c:b7:36:ef:63:e1:8d:
                    86:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8E:42:73:55:3A:33:2E:B5:C2:A0:68:40:A8:60:8D:D6:FE:E2:1A
            X509v3 Authority Key Identifier:
                keyid:0C:EF:93:E8:59:71:2C:AE:2C:1A:BC:81:2A:11:35:1F:FF:51:0C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6adbd36382f8fdc7486124fdd6ad414b2241421a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/5570bccd85758e42d3643a1734b6bef8406397d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/6adbd36382f8fdc7486124fdd6ad414b2241421a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:ae:79:7d:e5:9b:d3:eb:7b:49:f9:3b:a9:06:9a:90:97:84:
         cd:f3:87:8e:38:8f:78:06:e4:e1:de:54:17:22:2f:06:67:25:
         e9:c2:45:a0:9c:8c:ce:d3:af:f2:41:82:12:01:0c:20:fe:76:
         f3:9b:8c:29:a9:d0:a3:79:65:4e:eb:46:9b:bb:d1:c2:42:d7:
         03:41:13:12:27:a7:9d:4a:eb:5b:fc:61:b0:55:cb:ec:26:a5:
         6c:9c:e3:f5:11:5c:ce:d3:19:88:36:bd:1e:2f:d0:83:17:ef:
         3b:3b:f2:1b:1b:45:7f:2a:00:cd:71:8e:82:c5:66:14:7a:c4:
         00:93:2f:55:21:3e:1e:7f:e2:f1:b4:aa:5d:d3:51:63:61:a9:
         cb:68:cd:e8:41:8d:4a:84:bf:cb:60:57:aa:a2:6f:30:16:0f:
         06:a4:cf:fb:cf:95:a1:ab:df:0f:b7:ae:b0:3c:54:db:fa:e9:
         dd:d0:ea:d7:62:7c:66:7f:6b:e7:d2:3e:16:23:2b:3d:7c:05:
         8e:74:dc:e1:fa:14:6d:20:13:bc:34:d8:2f:f5:0d:b3:1d:65:
         45:6b:97:cb:fb:ed:d7:95:f7:69:37:74:42:4c:66:97:e6:cd:
         1e:b4:f4:4a:15:09:d7:33:1b:52:52:a4:d8:73:e6:79:57:c9:
         a7:33:2c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----