Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/34352e3233342e36302e302f32332d3234203d3e20323732383734.roa
File:                     34352e3233342e36302e302f32332d3234203d3e20323732383734.roa (raw, json)
Hash identifier:          jT0G2aQzyKsck/WIvf1VDCYWUdpy4wIwpJQg29Nm+ps=
Subject key identifier:   37:BA:D4:28:29:43:46:20:53:A6:F3:F5:85:C6:18:00:E2:A2:39:B9
Certificate issuer:       /CN=17C10DFC65DA73892644268270EF974D3E2D31A0
Certificate serial:       69245DC4C40AB08826973639CC0845087B68BB43
Authority key identifier: 17:C1:0D:FC:65:DA:73:89:26:44:26:82:70:EF:97:4D:3E:2D:31:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17C10DFC65DA73892644268270EF974D3E2D31A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/34352e3233342e36302e302f32332d3234203d3e20323732383734.roa
Signing time:             Fri 24 Jan 2025 18:45:00 +0000
ROA not before:           Fri 24 Jan 2025 18:40:00 +0000
ROA not after:            Fri 23 Jan 2026 18:45:00 +0000
asID:                     272874
IP address blocks:        45.234.60.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 24 Jan 2025 19:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:24:5d:c4:c4:0a:b0:88:26:97:36:39:cc:08:45:08:7b:68:bb:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17C10DFC65DA73892644268270EF974D3E2D31A0
        Validity
            Not Before: Jan 24 18:40:00 2025 GMT
            Not After : Jan 23 18:45:00 2026 GMT
        Subject: CN=37BAD4282943462053A6F3F585C61800E2A239B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:1f:06:33:e0:22:4d:24:15:21:6d:04:ed:
                    a4:9d:cd:a6:33:b8:f3:86:43:b8:07:67:c2:62:78:
                    e8:d7:d3:d1:59:b8:a6:98:d2:c1:ff:77:bb:9c:20:
                    80:3e:a4:c2:ad:1d:ec:5b:1d:f4:b9:f2:8d:4c:2f:
                    be:60:09:5a:ea:25:59:44:27:12:ea:db:81:47:20:
                    25:26:52:fb:ce:6c:56:5d:50:2f:58:c9:12:63:1e:
                    eb:d9:7f:42:49:b3:49:30:79:ae:48:cb:13:1c:1c:
                    ed:ef:30:25:78:36:ea:df:d2:ac:24:ba:28:9e:c3:
                    58:18:3e:e1:26:e9:fb:0f:13:c0:e2:0f:5d:14:08:
                    eb:8c:e7:d0:5c:97:d5:e5:95:62:e4:77:68:1d:b4:
                    cd:5f:04:32:9b:f2:79:1e:24:24:5c:fe:0b:f5:20:
                    e5:55:a8:10:6a:96:ac:7a:e9:19:80:81:71:7b:37:
                    84:70:13:4b:da:92:50:b3:95:d9:6a:48:a5:31:f5:
                    e2:c1:74:15:e3:10:10:35:57:a9:c4:b5:95:b2:1c:
                    b1:b1:5e:74:c3:8d:dd:f1:09:82:f3:7a:2c:34:b5:
                    35:51:77:a5:2c:85:f1:cf:9d:17:6f:72:56:b5:2d:
                    66:0b:82:49:03:e1:38:fb:0a:10:99:1d:a8:24:8f:
                    26:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BA:D4:28:29:43:46:20:53:A6:F3:F5:85:C6:18:00:E2:A2:39:B9
            X509v3 Authority Key Identifier:
                keyid:17:C1:0D:FC:65:DA:73:89:26:44:26:82:70:EF:97:4D:3E:2D:31:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/17C10DFC65DA73892644268270EF974D3E2D31A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17C10DFC65DA73892644268270EF974D3E2D31A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/34352e3233342e36302e302f32332d3234203d3e20323732383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:42:43:3d:7a:0d:44:f6:d8:12:8f:7f:36:ba:2a:81:2c:48:
         2a:e6:44:e4:f7:23:ba:05:af:52:e9:08:94:a8:30:6d:7c:ca:
         93:87:d6:31:95:4f:9a:f5:f7:77:85:f1:ab:ac:04:af:6e:93:
         4c:72:a1:8d:d9:5d:b7:d6:9b:d8:e1:a7:2f:e7:b7:16:c5:aa:
         9d:dc:f7:88:5a:b3:c9:5d:35:91:77:f0:ba:cc:e7:03:f2:68:
         cc:ec:4c:c2:b1:bb:f7:b3:a1:8b:e9:c2:3f:36:80:12:34:1b:
         1c:34:69:05:a5:ea:ce:2a:48:8d:19:99:2c:f5:ed:bd:71:e3:
         a8:f2:81:c9:fa:c7:5a:55:0a:12:8d:ee:c7:64:9c:e8:80:4e:
         87:7f:ad:4e:5b:55:eb:70:58:5f:d3:ad:a8:fe:2b:e9:07:f4:
         aa:73:f7:f4:35:d9:66:78:62:72:36:ea:39:34:37:fb:7d:c4:
         a6:a9:f1:1d:aa:19:09:b1:ab:7d:77:47:ad:47:e7:52:99:f1:
         84:52:0f:1f:e0:49:cb:8b:a6:c8:31:99:f8:02:1c:30:88:e2:
         55:98:f2:ac:e6:d3:98:b4:8a:e3:d7:45:e2:00:3c:d3:fd:ab:
         d5:5b:4c:9d:ee:da:74:f4:b4:af:3f:7b:9b:91:bb:77:73:00:
         01:9f:3b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 24 22:28:46 2025 by rpki-client on console.sobornost.net