Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/ca1b4f361549d2272c70f871030ab6ba981d1019.roa
File:                     ca1b4f361549d2272c70f871030ab6ba981d1019.roa (raw, json)
Hash identifier:          lHV/7mEhj7S0c3wN/avlsMYHX9nqwa0VyxCKOaOrBc0=
Subject key identifier:   90:E1:61:92:F8:23:F3:0A:41:55:FD:4B:16:2C:06:C7:E4:3B:30:09
Certificate issuer:       /CN=f6fe25a266009db467ead60d5ec947af0402cb02
Certificate serial:       12A05C
Authority key identifier: B4:E7:FD:7E:36:23:82:23:C3:0C:03:91:F3:2B:E7:BF:31:0F:E8:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6fe25a266009db467ead60d5ec947af0402cb02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/ca1b4f361549d2272c70f871030ab6ba981d1019.roa
Signing time:             Mon 10 Apr 2023 21:40:43 +0000
ROA not before:           Wed 22 Mar 2023 08:32:27 +0000
ROA not after:            Sat 22 Mar 2025 08:32:27 +0000
asID:                     271885
IP address blocks:        45.68.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1220700 (0x12a05c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fe25a266009db467ead60d5ec947af0402cb02
        Validity
            Not Before: Mar 22 08:32:27 2023 GMT
            Not After : Mar 22 08:32:27 2025 GMT
        Subject: CN=ca1b4f361549d2272c70f871030ab6ba981d1019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e6:b1:38:ec:e3:23:1f:9d:e5:c3:39:54:ae:
                    98:53:8f:b5:c5:af:de:28:82:a4:e6:12:8a:f9:7e:
                    d0:a5:49:20:03:19:8f:91:91:94:2c:86:98:76:38:
                    13:36:20:f9:6c:e4:42:ec:25:38:c7:35:63:d2:b9:
                    fe:6c:62:18:40:44:81:66:d6:ad:03:c3:38:16:28:
                    f3:27:8d:28:ef:8a:2e:e7:ab:c5:bb:4a:d3:56:3c:
                    a1:93:5c:91:f9:cc:01:40:10:fc:03:7b:cd:85:17:
                    f4:f6:3b:b1:59:ac:47:9d:2b:f4:dd:6f:fc:26:a1:
                    3b:df:d7:e7:2d:5d:38:52:d0:81:9d:c1:85:a0:d3:
                    c1:57:0e:fc:cd:79:45:3d:1a:19:cc:c5:0d:f4:6a:
                    56:37:17:7b:49:8e:69:e0:2a:46:95:fa:3d:fb:b1:
                    4d:97:8e:d5:cd:05:01:e0:0a:e1:35:7c:26:c7:27:
                    48:19:69:71:fe:fc:a5:23:b6:45:f1:a2:3a:40:30:
                    9d:07:6c:80:80:83:13:b4:cc:f1:87:14:34:b0:fb:
                    fc:62:de:1f:8f:e6:f2:68:69:8d:61:fe:5a:5f:67:
                    04:10:0d:2c:f0:6f:50:0e:7b:fb:a3:02:50:ed:37:
                    18:79:75:c0:a0:b8:ee:c6:43:f0:a3:06:7d:19:49:
                    77:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E1:61:92:F8:23:F3:0A:41:55:FD:4B:16:2C:06:C7:E4:3B:30:09
            X509v3 Authority Key Identifier:
                keyid:B4:E7:FD:7E:36:23:82:23:C3:0C:03:91:F3:2B:E7:BF:31:0F:E8:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6fe25a266009db467ead60d5ec947af0402cb02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/ca1b4f361549d2272c70f871030ab6ba981d1019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/f6fe25a266009db467ead60d5ec947af0402cb02.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:b4:e7:69:c7:5b:13:58:59:3d:cb:f6:ab:ae:3f:6c:2b:47:
         c0:81:b4:7c:b5:6d:0c:f4:43:d6:ce:06:8d:32:e5:92:e9:69:
         dd:44:cc:ab:c3:28:76:81:ee:df:02:77:7e:c6:59:5a:fd:35:
         45:5a:35:53:f6:e3:86:87:c7:01:79:2b:64:f3:67:9f:70:3a:
         c4:48:35:7b:f7:8d:1e:ce:d8:b2:eb:2a:d4:36:96:9e:91:f0:
         23:07:bf:34:2e:46:4b:f8:bb:3b:e9:e5:0b:6c:0e:0e:0b:bb:
         9f:10:14:e0:e1:d7:a7:04:70:1e:32:9e:6b:05:e6:41:1b:ee:
         07:25:45:67:33:6b:96:dc:a2:0a:e9:b1:04:6f:a4:42:b2:68:
         32:52:0a:fe:94:d4:8c:06:73:53:80:53:56:96:12:d9:b9:3d:
         25:e7:00:b5:87:7a:3f:09:c0:3e:d8:bc:69:51:f4:b2:3c:59:
         43:ba:c9:91:94:2f:0b:ae:05:a3:c0:bd:cf:57:9d:92:44:eb:
         63:0d:e2:fe:df:a2:5e:0f:16:1e:03:e6:db:2f:54:93:93:17:
         84:45:94:1a:f7:6c:1a:f9:ac:7c:81:71:0c:64:fb:fb:4d:12:
         95:fc:ff:14:e0:9a:ce:d1:c5:37:48:27:77:0f:46:35:e2:2f:
         14:f0:9c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----