Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134302e302f32322d3233203d3e20323635363633.roa
File:                     34352e3137352e3134302e302f32322d3233203d3e20323635363633.roa (raw, json)
Hash identifier:          Sus80JZgeOd9k7pMOYLy+BZXKk8JsQCaCHXVbD42sN4=
Subject key identifier:   B4:36:88:35:E2:10:5B:4A:2A:37:6A:02:7B:3D:62:4B:82:13:ED:30
Certificate issuer:       /CN=029141245BD9F1CE31BEF7964E181E44F17CE901
Certificate serial:       6EF5CD92C1465FE5239A67A9827BD4AD38DD9F3E
Authority key identifier: 02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134302e302f32322d3233203d3e20323635363633.roa
Signing time:             Wed 04 Sep 2024 19:20:00 +0000
ROA not before:           Wed 04 Sep 2024 19:15:00 +0000
ROA not after:            Wed 03 Sep 2025 19:20:00 +0000
asID:                     265663
IP address blocks:        45.175.140.0/22 maxlen: 23
Validation:               Failed, certificate revoked on Wed 04 Sep 2024 20:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f5:cd:92:c1:46:5f:e5:23:9a:67:a9:82:7b:d4:ad:38:dd:9f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029141245BD9F1CE31BEF7964E181E44F17CE901
        Validity
            Not Before: Sep  4 19:15:00 2024 GMT
            Not After : Sep  3 19:20:00 2025 GMT
        Subject: CN=B4368835E2105B4A2A376A027B3D624B8213ED30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fd:86:41:b1:0d:0b:5d:1d:be:45:cf:24:70:
                    01:56:d6:21:7c:f0:3e:33:f5:86:60:09:41:fa:f6:
                    d4:72:8a:38:8b:2a:9c:7d:11:a2:b6:90:ed:c6:3b:
                    df:c8:24:5c:ab:84:33:f1:98:31:2f:bb:04:ac:6e:
                    08:81:12:e6:e0:ac:fb:59:59:60:c8:e8:1f:99:55:
                    fa:76:0c:6c:f9:9b:52:ae:45:3d:48:96:8d:f0:d7:
                    9d:b0:b7:fd:ee:8b:03:ad:1c:ef:49:18:81:b7:be:
                    92:42:ef:ea:20:88:52:27:9e:a5:d4:b1:62:1d:dc:
                    0e:48:93:0c:ac:f4:c9:6c:d0:d5:e9:a0:41:2f:a2:
                    36:72:0b:4f:c1:38:28:1f:30:66:4e:d8:8e:89:8b:
                    04:be:94:27:97:ad:ed:ca:e7:8e:dd:87:85:a2:42:
                    41:e3:9f:0f:ef:14:cc:d2:2b:9b:7b:23:56:05:fe:
                    7c:63:36:69:6d:80:ea:dd:52:48:65:fd:94:f7:c9:
                    b1:27:78:71:0b:76:69:06:74:0c:58:6e:db:a1:f9:
                    75:e1:28:41:f5:d0:13:6e:43:39:32:97:e8:73:c7:
                    ff:4e:23:1d:47:54:86:32:29:43:8b:19:0d:1b:59:
                    ef:3c:2c:92:64:b3:d2:ef:33:90:9a:a3:ff:55:69:
                    24:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:36:88:35:E2:10:5B:4A:2A:37:6A:02:7B:3D:62:4B:82:13:ED:30
            X509v3 Authority Key Identifier:
                keyid:02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134302e302f32322d3233203d3e20323635363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:79:21:60:7a:87:7d:af:1b:ab:3e:0f:d5:b4:7f:8a:3a:b2:
         1c:3c:a7:ed:21:df:43:19:b5:9c:cf:c9:3c:16:62:88:bf:96:
         25:c1:01:32:ca:33:a9:a0:95:c2:55:73:1a:77:3b:4b:03:7d:
         c8:e5:93:03:7a:96:9f:11:72:e1:1d:65:bd:09:44:7d:02:f1:
         7f:8a:ae:2b:2d:b3:0e:ce:ef:2b:2f:41:8f:68:dc:ec:bc:c0:
         1f:84:1b:f9:c8:05:6f:df:d9:b9:39:95:5b:2c:39:16:99:bd:
         07:eb:53:d3:ff:14:42:e0:0e:13:6d:de:a3:8c:33:dd:9a:ae:
         7d:e9:a8:bc:0c:80:db:47:c5:29:f0:3e:b4:4d:a8:8d:cc:ee:
         46:68:99:ee:c4:37:73:30:58:2a:1e:29:01:c6:d9:9b:77:44:
         11:f8:5b:55:1e:3f:e1:d1:76:d2:f9:41:ca:a2:ce:d8:21:56:
         74:a1:86:a1:97:17:fa:7d:c2:a5:76:e5:4f:40:bf:d0:c4:e0:
         31:26:91:ad:c9:13:e8:0e:a8:ce:e8:ba:68:de:82:7c:ab:30:
         6f:92:13:8e:02:2e:45:8b:10:43:8e:02:e7:26:a6:fb:63:e9:
         2a:5a:e8:44:39:c0:cd:2b:d9:32:df:53:6f:ad:f3:ec:63:5f:
         af:f5:6a:54
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbvXNksFGX+UjmmepgnvUrTjdnz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDI5MTQxMjQ1QkQ5RjFDRTMxQkVGNzk2NEUxODFFNDRG
MTdDRTkwMTAeFw0yNDA5MDQxOTE1MDBaFw0yNTA5MDMxOTIwMDBaMDMxMTAvBgNV
BAMTKEI0MzY4ODM1RTIxMDVCNEEyQTM3NkEwMjdCM0Q2MjRCODIxM0VEMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR/YZBsQ0LXR2+Rc8kcAFW1iF8
8D4z9YZgCUH69tRyijiLKpx9EaK2kO3GO9/IJFyrhDPxmDEvuwSsbgiBEubgrPtZ
WWDI6B+ZVfp2DGz5m1KuRT1Ilo3w152wt/3uiwOtHO9JGIG3vpJC7+ogiFInnqXU
sWId3A5Ikwys9Mls0NXpoEEvojZyC0/BOCgfMGZO2I6JiwS+lCeXre3K547dh4Wi
QkHjnw/vFMzSK5t7I1YF/nxjNmltgOrdUkhl/ZT3ybEneHELdmkGdAxYbtuh+XXh
KEH10BNuQzkyl+hzx/9OIx1HVIYyKUOLGQ0bWe88LJJks9LvM5Cao/9VaSR7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUtDaINeIQW0oqN2oCez1iS4IT7TAwHwYDVR0j
BBgwFoAUApFBJFvZ8c4xvveWThgeRPF86QEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQjRERjhDQzdGMEU4M0NGOURBN0JCMzY3NzNCQTRCMzk4
RjM1NzBCQzYwMTlDQTkzNENBNUIwNkI4NzA2QzY0LzAvMDI5MTQxMjQ1QkQ5RjFD
RTMxQkVGNzk2NEUxODFFNDRGMTdDRTkwMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMjkxNDEyNDVCRDlGMUNFMzFC
RUY3OTY0RTE4MUU0NEYxN0NFOTAxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkI0REY4Q0M3RjBFODNDRjlEQTdCQjM2NzczQkE0QjM5OEYzNTcwQkM2
MDE5Q0E5MzRDQTVCMDZCODcwNkM2NC8wLzM0MzUyZTMxMzczNTJlMzEzNDMwMmUz
MDJmMzIzMjJkMzIzMzIwM2QzZTIwMzIzNjM1MzYzNjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLa+M
MA0GCSqGSIb3DQEBCwUAA4IBAQBHeSFgeod9rxurPg/VtH+KOrIcPKftId9DGbWc
z8k8FmKIv5YlwQEyyjOpoJXCVXMadztLA33I5ZMDepafEXLhHWW9CUR9AvF/iq4r
LbMOzu8rL0GPaNzsvMAfhBv5yAVv39m5OZVbLDkWmb0H61PT/xRC4A4Tbd6jjDPd
mq596ai8DIDbR8Up8D60TaiNzO5GaJnuxDdzMFgqHikBxtmbd0QR+FtVHj/h0XbS
+UHKos7YIVZ0oYahlxf6fcKlduVPQL/QxOAxJpGtyRPoDqjO6Lpo3oJ8qzBvkhOO
Ai5FixBDjgLnJqb7Y+kqWuhEOcDNK9ky31NvrfPsY1+v9WpU
-----END CERTIFICATE-----
Generated at Thu May 8 03:19:35 2025 by rpki-client