Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46E793FAB0BDC04DABE00C31BBF8FBB0F090259D24FFE6C993E7EC6FA20946A6/0/34352e352e3136302e302f32322d3233203d3e203130323939.roa
File:                     34352e352e3136302e302f32322d3233203d3e203130323939.roa (raw, json)
Hash identifier:          lwX9nHlfcjsIkJGLz0by/iYj21PhzbAfGfSbkWxrGp4=
Subject key identifier:   74:AE:3E:A9:A0:98:00:0E:BB:9B:C2:C9:67:7E:59:52:C7:23:62:91
Certificate issuer:       /CN=032C699B92C7B4D5EFBBFF0D4773645B78457A56
Certificate serial:       2FE200FAF7D0343F04A3AC3908E88917ADDA36F5
Authority key identifier: 03:2C:69:9B:92:C7:B4:D5:EF:BB:FF:0D:47:73:64:5B:78:45:7A:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/032C699B92C7B4D5EFBBFF0D4773645B78457A56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46E793FAB0BDC04DABE00C31BBF8FBB0F090259D24FFE6C993E7EC6FA20946A6/0/34352e352e3136302e302f32322d3233203d3e203130323939.roa
Signing time:             Thu 27 Mar 2025 19:20:00 +0000
ROA not before:           Thu 27 Mar 2025 19:15:00 +0000
ROA not after:            Thu 26 Mar 2026 19:20:00 +0000
asID:                     10299
IP address blocks:        45.5.160.0/22 maxlen: 23
Validation:               Failed, certificate revoked on Thu 27 Mar 2025 19:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e2:00:fa:f7:d0:34:3f:04:a3:ac:39:08:e8:89:17:ad:da:36:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032C699B92C7B4D5EFBBFF0D4773645B78457A56
        Validity
            Not Before: Mar 27 19:15:00 2025 GMT
            Not After : Mar 26 19:20:00 2026 GMT
        Subject: CN=74AE3EA9A098000EBB9BC2C9677E5952C7236291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dc:ac:26:a6:f5:f9:66:ff:90:ef:31:cd:21:
                    e6:3f:03:2a:47:91:76:1d:5b:05:8d:2b:19:1a:19:
                    b1:e8:e2:f2:b6:6d:59:70:97:12:f7:7d:cd:20:be:
                    4d:77:98:f2:a4:0f:67:59:71:a4:ee:d8:9e:5c:0f:
                    ce:35:f3:b7:00:8e:49:80:dc:69:13:68:92:bc:45:
                    a8:cc:ec:4b:ee:a2:46:03:e8:20:9e:0f:a6:f4:0b:
                    e2:d1:6b:86:c3:f9:44:0c:94:dc:d6:ff:cb:7a:61:
                    80:d2:e0:73:2b:a9:5b:27:52:92:d7:0e:71:9b:89:
                    d8:16:ce:06:6a:fd:e7:a8:28:8a:7e:ed:cc:4c:bf:
                    b2:4b:f2:50:a7:f7:6b:81:68:49:1f:e0:98:ee:3d:
                    b5:4b:f5:97:ef:cc:13:64:16:79:7e:dc:ae:02:83:
                    1a:d7:a9:10:13:2f:83:f0:73:02:a8:16:27:05:9e:
                    98:83:f9:78:f2:b4:b5:b8:5d:33:f9:65:c6:80:72:
                    16:de:6a:ad:ae:e5:13:71:94:02:b6:1d:e1:d6:3f:
                    2a:01:0b:a7:71:32:42:82:29:15:1e:bb:78:2f:86:
                    65:a9:5b:58:75:f4:3e:29:0e:3f:bc:26:c5:d5:e1:
                    98:a4:de:d7:03:a3:7d:80:79:a9:71:30:8c:22:de:
                    a0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AE:3E:A9:A0:98:00:0E:BB:9B:C2:C9:67:7E:59:52:C7:23:62:91
            X509v3 Authority Key Identifier:
                keyid:03:2C:69:9B:92:C7:B4:D5:EF:BB:FF:0D:47:73:64:5B:78:45:7A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46E793FAB0BDC04DABE00C31BBF8FBB0F090259D24FFE6C993E7EC6FA20946A6/0/032C699B92C7B4D5EFBBFF0D4773645B78457A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/032C699B92C7B4D5EFBBFF0D4773645B78457A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46E793FAB0BDC04DABE00C31BBF8FBB0F090259D24FFE6C993E7EC6FA20946A6/0/34352e352e3136302e302f32322d3233203d3e203130323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:a9:a2:3a:e0:ba:5e:ca:23:60:1a:2c:3e:e4:b4:24:e4:75:
         49:4d:3c:bf:eb:1f:0e:a6:b1:97:72:90:a5:b8:f2:bb:4f:6b:
         40:ca:41:b6:61:08:0b:14:10:ad:70:b6:0c:64:83:e7:00:26:
         f5:e8:81:00:f5:56:e1:97:74:41:0d:26:a2:70:63:71:03:07:
         b0:46:7a:66:fc:20:28:5b:04:de:55:08:8f:9d:2e:8b:62:f4:
         08:45:fe:9e:bf:45:de:2d:92:c1:de:45:1f:fc:2b:7f:10:4b:
         00:3b:5a:1b:08:c4:b3:6a:01:9f:68:f9:67:d3:f9:77:f8:54:
         cf:e9:64:20:80:94:e3:7f:bd:04:aa:e1:a2:e7:f6:94:41:45:
         43:39:03:bf:19:83:f7:4f:c7:4a:74:a6:e7:a5:0f:a9:14:f7:
         9c:3f:51:0d:98:f1:d7:e1:3a:b2:e3:94:e3:40:f0:71:23:d1:
         b3:13:57:4e:9a:d2:9d:8a:51:3b:44:32:70:f5:d9:08:1b:21:
         b3:0e:a9:12:23:eb:d6:70:8d:4f:6b:b6:01:a6:e6:5b:ea:66:
         8a:ad:ac:3b:9a:96:0b:5d:8d:ab:a8:0c:fd:36:66:fe:d2:33:
         8d:1a:e9:64:04:c9:b2:83:df:e7:c6:18:a1:5f:60:52:a3:4a:
         98:8f:10:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:31:29 2025 by rpki-client