Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/23887d64429577de9628e0214ec8d5188e6af8fe.roa
File:                     23887d64429577de9628e0214ec8d5188e6af8fe.roa (raw, json)
Hash identifier:          siExauc1XmlXVVyCxofvnSCLDXzoE6mpmjpHQwswFH8=
Subject key identifier:   74:29:65:A9:42:7D:64:BD:DD:6E:90:CE:A0:65:02:29:24:5F:7D:30
Certificate issuer:       /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial:       17340D
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/23887d64429577de9628e0214ec8d5188e6af8fe.roa
Signing time:             Mon 18 Jul 2022 19:41:45 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     266668
IP address blocks:        45.228.188.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1520653 (0x17340d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=23887d64429577de9628e0214ec8d5188e6af8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:85:d3:e7:e5:ce:5f:d3:92:3e:48:84:f3:8a:
                    1a:c4:46:74:f8:db:cf:43:7e:a0:28:01:e7:be:49:
                    91:98:12:7a:0a:4d:47:da:03:68:95:ff:0f:5b:f9:
                    97:a4:a8:80:dd:35:57:53:6b:01:33:b6:7c:63:f9:
                    74:77:a6:43:58:59:48:20:7b:78:b5:36:bd:e4:db:
                    c9:68:76:16:2b:bc:8e:5b:f8:80:64:aa:69:41:e3:
                    db:0e:e8:c1:62:05:50:67:aa:8a:b0:78:f3:c1:89:
                    f7:bf:4b:5e:f0:46:71:ad:37:51:97:d3:f4:b9:f3:
                    2b:73:6e:2b:71:5c:74:a8:c9:67:c4:10:f5:a3:0e:
                    57:e4:28:cc:9e:cc:df:5c:17:12:8f:e9:fe:fd:3e:
                    2f:df:fd:74:3a:23:f5:f6:37:e4:cc:11:1a:b7:fa:
                    93:94:14:23:07:91:d5:ac:d0:6b:3d:8c:d5:f2:c8:
                    8e:be:19:b8:49:cd:f6:b4:27:c4:a7:b6:d8:7e:f6:
                    b8:80:de:16:e3:e9:95:4e:74:b4:98:10:6d:0e:bf:
                    d3:7a:5c:52:b4:93:d1:0c:08:3b:29:97:7d:70:56:
                    8d:64:5a:e0:10:41:71:ed:73:d4:f7:57:e6:37:d4:
                    c5:0f:06:37:1a:b8:7f:2a:89:b5:8b:9e:95:ff:0c:
                    32:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:29:65:A9:42:7D:64:BD:DD:6E:90:CE:A0:65:02:29:24:5F:7D:30
            X509v3 Authority Key Identifier:
                keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/23887d64429577de9628e0214ec8d5188e6af8fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:ca:ec:c3:f0:b4:6e:c1:56:d2:68:bf:9a:43:2f:6e:f7:07:
         f0:ce:97:f5:9a:61:7d:15:8e:2c:0a:d1:f8:3f:5b:13:b1:8c:
         fb:2e:85:d7:06:da:d9:bb:ab:a9:1b:99:c4:13:6a:6c:62:25:
         78:e8:00:6c:cd:6b:97:09:62:92:68:c7:ec:27:81:6c:4c:8b:
         73:03:e6:7b:3f:72:92:98:56:98:29:83:d6:f7:97:5c:47:09:
         f3:0e:43:fc:43:18:dc:4f:21:87:d7:64:19:b2:12:7f:18:9c:
         68:d1:a3:ba:5d:a9:db:bb:e8:71:05:4d:84:93:08:1b:83:09:
         c0:bc:ec:70:20:ac:62:84:3b:4f:43:6d:5a:14:fa:c8:5e:18:
         34:5f:d4:85:5d:5f:ea:0e:71:58:80:f4:1f:21:bf:35:6a:95:
         2c:0a:2c:02:8b:fc:5f:06:d0:fb:5b:47:22:c2:8a:a8:92:83:
         85:6d:92:23:1e:46:28:18:3f:d2:00:ee:2b:c3:bf:c7:a6:25:
         dc:a8:37:85:fe:6f:1e:3f:b6:75:c6:78:01:05:70:00:1a:78:
         ec:2b:77:84:f3:22:14:05:99:f9:a4:8f:90:64:83:cf:bb:e0:
         e6:ac:67:59:aa:b8:ea:4b:7d:9f:ec:84:da:9f:ef:ca:5d:8e:
         6a:4f:b5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----