Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F015F9CE3731804A5D0F4CB60A2DBE7D4EB26417FE060E6A8CCE818F8083C01E/0/34352e3233332e3233362e302f32332d3235203d3e20323636373733.roa
File:                     34352e3233332e3233362e302f32332d3235203d3e20323636373733.roa (raw, json)
Hash identifier:          LZ08eOzlM+nGYHKf63K+/6YpEhDh1kiBIJKNTwwvzmU=
Subject key identifier:   9E:64:52:62:AC:B1:D4:DB:70:ED:28:3A:FD:89:3E:07:05:A3:3E:7F
Certificate issuer:       /CN=5925D79B29D86051E16C2D8734BC706F2511A76B
Certificate serial:       14916099079499A9543245D6D275141A49C7A328
Authority key identifier: 59:25:D7:9B:29:D8:60:51:E1:6C:2D:87:34:BC:70:6F:25:11:A7:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5925D79B29D86051E16C2D8734BC706F2511A76B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F015F9CE3731804A5D0F4CB60A2DBE7D4EB26417FE060E6A8CCE818F8083C01E/0/34352e3233332e3233362e302f32332d3235203d3e20323636373733.roa
Signing time:             Wed 09 Apr 2025 15:30:00 +0000
ROA not before:           Wed 09 Apr 2025 15:25:00 +0000
ROA not after:            Wed 08 Apr 2026 15:30:00 +0000
asID:                     266773
IP address blocks:        45.233.236.0/23 maxlen: 25

Validation:               Failed, certificate revoked on Thu 10 Apr 2025 20:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:91:60:99:07:94:99:a9:54:32:45:d6:d2:75:14:1a:49:c7:a3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5925D79B29D86051E16C2D8734BC706F2511A76B
        Validity
            Not Before: Apr  9 15:25:00 2025 GMT
            Not After : Apr  8 15:30:00 2026 GMT
        Subject: CN=9E645262ACB1D4DB70ED283AFD893E0705A33E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:40:6f:20:76:19:9c:75:d1:e6:35:e5:ba:
                    d8:c7:7c:7a:79:c1:0d:c0:25:cc:87:5b:7c:6b:83:
                    90:8f:01:32:07:68:a7:d4:0b:fd:fd:f2:de:54:93:
                    ac:ed:5d:b0:3d:92:e4:48:2b:4c:fa:a4:3f:b6:be:
                    f0:55:51:1f:bd:ab:16:ee:e3:52:07:c4:98:71:43:
                    74:71:c2:c4:6e:2b:ba:a3:72:c4:09:6b:62:41:23:
                    97:9a:31:31:71:03:ca:6f:ab:ad:9f:48:5c:37:ff:
                    5e:22:49:9e:b2:d6:8b:52:be:d5:1b:17:23:60:75:
                    d1:bf:a1:0b:68:ac:9a:b0:c4:ca:68:82:29:f8:3f:
                    9d:1d:c0:a1:75:78:af:e3:e7:44:26:cd:4e:45:35:
                    ac:00:10:43:b4:05:9e:1c:0b:23:b5:e4:0c:e9:f1:
                    aa:96:c4:76:d5:f8:eb:5b:97:0b:df:ab:59:7a:78:
                    80:aa:c3:32:d6:b9:c3:e5:5b:05:01:39:c9:36:de:
                    19:43:b7:28:a7:e3:73:2e:a2:70:29:ca:b9:3a:3b:
                    53:ab:5d:7a:3f:02:39:c4:63:b5:b7:94:69:10:23:
                    98:1b:af:01:e4:23:7e:a3:b9:6b:b1:30:67:d1:cc:
                    cf:3c:0e:ef:1d:cc:e5:f7:e5:17:fc:b6:ab:e2:c6:
                    50:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:64:52:62:AC:B1:D4:DB:70:ED:28:3A:FD:89:3E:07:05:A3:3E:7F
            X509v3 Authority Key Identifier:
                keyid:59:25:D7:9B:29:D8:60:51:E1:6C:2D:87:34:BC:70:6F:25:11:A7:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F015F9CE3731804A5D0F4CB60A2DBE7D4EB26417FE060E6A8CCE818F8083C01E/0/5925D79B29D86051E16C2D8734BC706F2511A76B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5925D79B29D86051E16C2D8734BC706F2511A76B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F015F9CE3731804A5D0F4CB60A2DBE7D4EB26417FE060E6A8CCE818F8083C01E/0/34352e3233332e3233362e302f32332d3235203d3e20323636373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:d6:70:4c:3c:76:08:29:a0:3e:b1:75:1b:c8:7c:95:77:9e:
         a6:03:77:8e:48:85:38:6c:e3:6c:55:3b:2e:07:4d:f4:a4:c7:
         c5:e3:21:8b:88:a9:56:d7:63:23:81:3a:49:a6:2a:d4:2c:fe:
         43:af:a1:df:45:69:6a:e3:4d:32:bf:cd:c8:01:cd:0d:ce:b1:
         52:2a:f0:e6:d7:b9:7f:71:24:8f:0e:8a:d6:90:87:77:6a:9c:
         5f:5b:60:13:cb:cc:23:3e:3a:b8:aa:9f:ab:8d:63:41:95:8f:
         b5:85:bf:df:f1:7c:55:21:dc:b8:0f:35:ff:a5:2f:14:99:fa:
         9b:af:2c:89:31:6c:8d:84:ae:79:0f:86:bb:2f:89:13:5c:f6:
         46:ae:e4:d4:56:2b:a4:16:59:8d:d2:bd:0b:5c:e4:6b:12:00:
         54:aa:62:08:c2:cf:ef:15:d9:fb:1c:96:dc:c9:b3:a5:86:0d:
         78:26:a1:63:1f:f9:36:9e:f8:9e:93:97:9e:17:7f:84:83:c8:
         bd:71:39:4e:c1:26:6b:a9:13:6f:b6:51:01:f9:7e:67:9f:26:
         e1:75:95:73:88:dc:c3:bd:13:da:68:fc:da:08:c8:7c:f3:66:
         d3:b6:5c:5b:92:50:05:47:f1:fc:5e:82:66:72:a6:3a:56:27:
         c7:e3:48:73
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFJFgmQeUmalUMkXW0nUUGknHoygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTkyNUQ3OUIyOUQ4NjA1MUUxNkMyRDg3MzRCQzcwNkYy
NTExQTc2QjAeFw0yNTA0MDkxNTI1MDBaFw0yNjA0MDgxNTMwMDBaMDMxMTAvBgNV
BAMTKDlFNjQ1MjYyQUNCMUQ0REI3MEVEMjgzQUZEODkzRTA3MDVBMzNFN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5WkBvIHYZnHXR5jXlutjHfHp5
wQ3AJcyHW3xrg5CPATIHaKfUC/398t5Uk6ztXbA9kuRIK0z6pD+2vvBVUR+9qxbu
41IHxJhxQ3RxwsRuK7qjcsQJa2JBI5eaMTFxA8pvq62fSFw3/14iSZ6y1otSvtUb
FyNgddG/oQtorJqwxMpogin4P50dwKF1eK/j50QmzU5FNawAEEO0BZ4cCyO15Azp
8aqWxHbV+Otblwvfq1l6eICqwzLWucPlWwUBOck23hlDtyin43MuonApyrk6O1Or
XXo/AjnEY7W3lGkQI5gbrwHkI36juWuxMGfRzM88Du8dzOX35Rf8tqvixlBfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUnmRSYqyx1Ntw7Sg6/Yk+BwWjPn8wHwYDVR0j
BBgwFoAUWSXXmynYYFHhbC2HNLxwbyURp2swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDE1RjlDRTM3MzE4MDRBNUQwRjRDQjYwQTJEQkU3RDRF
QjI2NDE3RkUwNjBFNkE4Q0NFODE4RjgwODNDMDFFLzAvNTkyNUQ3OUIyOUQ4NjA1
MUUxNkMyRDg3MzRCQzcwNkYyNTExQTc2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTI1RDc5QjI5RDg2MDUxRTE2
QzJEODczNEJDNzA2RjI1MTFBNzZCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjAxNUY5Q0UzNzMxODA0QTVEMEY0Q0I2MEEyREJFN0Q0RUIyNjQxN0ZF
MDYwRTZBOENDRTgxOEY4MDgzQzAxRS8wLzM0MzUyZTMyMzMzMzJlMzIzMzM2MmUz
MDJmMzIzMzJkMzIzNTIwM2QzZTIwMzIzNjM2MzczNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLens
MA0GCSqGSIb3DQEBCwUAA4IBAQA11nBMPHYIKaA+sXUbyHyVd56mA3eOSIU4bONs
VTsuB030pMfF4yGLiKlW12MjgTpJpirULP5Dr6HfRWlq400yv83IAc0NzrFSKvDm
17l/cSSPDorWkId3apxfW2ATy8wjPjq4qp+rjWNBlY+1hb/f8XxVIdy4DzX/pS8U
mfqbryyJMWyNhK55D4a7L4kTXPZGruTUViukFlmN0r0LXORrEgBUqmIIws/vFdn7
HJbcybOlhg14JqFjH/k2nviek5eeF3+Eg8i9cTlOwSZrqRNvtlEB+X5nnybhdZVz
iNzDvRPaaPzaCMh882bTtlxbklAFR/H8XoJmcqY6VifH40hz
-----END CERTIFICATE-----
Generated at Thu Apr 10 23:37:50 2025 by rpki-client on console.sobornost.net