Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/97fb3cb747c12445c06f4bc1979614b97ad1e93f.roa
File:                     97fb3cb747c12445c06f4bc1979614b97ad1e93f.roa (raw, json)
Hash identifier:          OmM7plq1XuLPmifds/kSEWW3mgkNbIoSOy8gp5/QjUE=
Subject key identifier:   0E:88:72:1F:21:5F:D6:C7:2C:F1:11:9C:63:CA:E9:60:C7:5D:7C:7C
Certificate issuer:       /CN=f659416c64fe0a5bd2ceeaad4dd0260ce3ec4bf7
Certificate serial:       203252
Authority key identifier: 03:BC:2F:9B:03:8D:66:27:79:4B:6F:AC:AF:23:28:F7:96:1E:05:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f659416c64fe0a5bd2ceeaad4dd0260ce3ec4bf7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/97fb3cb747c12445c06f4bc1979614b97ad1e93f.roa
Signing time:             Tue 20 Jun 2023 17:38:52 +0000
ROA not before:           Sun 18 Jun 2023 03:00:00 +0000
ROA not after:            Fri 20 Jun 2025 03:00:00 +0000
asID:                     266894
IP address blocks:        45.161.32.0/22 maxlen: 24
                          2803:56a0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2110034 (0x203252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f659416c64fe0a5bd2ceeaad4dd0260ce3ec4bf7
        Validity
            Not Before: Jun 18 03:00:00 2023 GMT
            Not After : Jun 20 03:00:00 2025 GMT
        Subject: CN=97fb3cb747c12445c06f4bc1979614b97ad1e93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:39:35:10:e5:3e:60:ba:a3:53:48:0b:4d:b1:
                    f9:7a:ce:60:cb:72:56:1e:db:e2:b4:78:65:ac:2a:
                    a0:ed:85:73:61:0d:82:61:3d:b6:b7:2a:0a:2e:9b:
                    0b:be:64:b9:c6:0d:e1:84:22:19:56:73:64:df:14:
                    1b:6e:f7:42:0d:cc:8e:71:ca:b2:f5:9c:b8:63:e7:
                    e9:06:60:7b:ac:0c:54:a1:84:6d:86:11:8b:0b:2f:
                    5a:6d:14:48:ed:2f:8b:1f:b0:c2:c6:97:df:b6:a3:
                    f4:ef:d1:96:76:25:c2:b5:7e:62:67:bb:b7:f5:aa:
                    b0:2f:5a:e5:91:70:00:25:a2:b9:3e:01:be:7e:49:
                    bc:87:64:7c:a2:b6:b4:b4:81:53:6f:47:dc:a6:86:
                    48:26:9c:49:c5:2d:96:82:37:71:21:02:23:31:4e:
                    ff:22:fe:fd:e8:9b:8b:6f:44:c1:8f:38:d4:72:7e:
                    8d:d7:af:16:71:aa:25:cc:85:00:d8:2e:aa:c6:c9:
                    82:3e:45:5c:02:b7:92:f7:bc:9e:f1:25:32:76:cc:
                    0e:b5:d2:5a:6f:39:c0:7f:8f:a6:64:4a:05:7b:0a:
                    40:9d:ce:9d:bd:3d:03:c8:ed:b0:9a:2e:04:84:b6:
                    68:1b:95:55:98:19:80:e5:76:da:cd:ed:15:1f:e9:
                    b0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:88:72:1F:21:5F:D6:C7:2C:F1:11:9C:63:CA:E9:60:C7:5D:7C:7C
            X509v3 Authority Key Identifier:
                keyid:03:BC:2F:9B:03:8D:66:27:79:4B:6F:AC:AF:23:28:F7:96:1E:05:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f659416c64fe0a5bd2ceeaad4dd0260ce3ec4bf7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/97fb3cb747c12445c06f4bc1979614b97ad1e93f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/f659416c64fe0a5bd2ceeaad4dd0260ce3ec4bf7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.32.0/22
                IPv6:
                  2803:56a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:50:68:a9:7a:ce:28:9e:ba:00:6f:ad:27:f4:a0:e9:3e:17:
         a4:4b:31:eb:00:0d:21:8b:1d:15:a4:10:47:b6:1e:92:6e:43:
         25:d2:bb:0c:5e:37:fa:f6:83:ac:3e:dc:38:e4:61:8d:e1:58:
         c2:67:f3:ad:7f:23:88:63:f6:d5:02:d7:e0:85:8c:ee:95:8a:
         fc:85:cb:07:45:68:fa:c1:e0:5c:70:fe:55:9f:0f:3d:5c:f9:
         af:e8:0c:24:cc:40:7b:6b:8a:68:7a:09:e3:f9:26:a1:a7:68:
         bf:e3:d1:e1:5e:3c:22:c2:f8:64:66:ef:cb:8b:0c:d6:6c:e7:
         26:c3:61:03:33:61:4f:26:92:c2:d8:d1:a8:15:9d:20:ad:94:
         3b:a5:05:0f:fa:1c:36:6e:c9:28:e5:29:5f:9e:b4:e6:0b:d2:
         f6:29:ac:08:27:58:cf:dc:54:fd:00:0a:2e:f3:fc:d7:a3:b7:
         88:67:ed:65:f1:57:c9:87:f3:67:28:6d:32:7e:5f:c2:95:88:
         c8:80:a1:dd:c3:27:34:dd:92:31:d0:75:f0:d0:82:69:9c:1c:
         bb:ed:b2:2d:9a:c3:49:ba:7c:06:3b:9b:cc:0c:5c:78:cc:e5:
         16:97:d0:6b:66:89:49:73:07:42:fe:fc:65:17:16:5f:df:0b:
         ec:1e:d7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----