Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/7eee37b5dd0db4a8ba20bb7b353a3b18cf4bfb99.roa
File:                     7eee37b5dd0db4a8ba20bb7b353a3b18cf4bfb99.roa (raw, json)
Hash identifier:          0UqKN//Fv33fVxZeEX0H+Iq22e75RUmdssklxGF69Ec=
Subject key identifier:   80:34:8B:DB:CE:0D:1D:97:CF:1B:1A:3A:C9:26:02:59:49:CF:11:8D
Certificate issuer:       /CN=9c039812edab95b305292dc8f1a3339fcf9cd5dc
Certificate serial:       19D795
Authority key identifier: EB:8E:77:AD:91:33:AA:32:0B:37:CF:99:93:4C:D6:85:E0:B3:51:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c039812edab95b305292dc8f1a3339fcf9cd5dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/7eee37b5dd0db4a8ba20bb7b353a3b18cf4bfb99.roa
Signing time:             Thu 04 Aug 2022 23:58:32 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     266655
IP address blocks:        45.225.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693589 (0x19d795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c039812edab95b305292dc8f1a3339fcf9cd5dc
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=7eee37b5dd0db4a8ba20bb7b353a3b18cf4bfb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:8f:8d:47:53:75:98:b8:2b:b7:e6:e5:71:
                    a8:e7:81:1d:8e:40:8d:0e:65:83:9c:bc:bc:cd:26:
                    be:0e:5e:bb:30:a4:fc:a9:c4:f0:fd:bc:10:a9:f3:
                    d7:ef:fb:4b:7e:8c:6c:7e:75:05:e4:27:de:aa:02:
                    98:2d:67:17:23:79:3f:5c:4a:5a:97:89:62:54:46:
                    0b:a6:aa:27:12:0f:31:c1:73:5e:0c:7a:6c:95:d8:
                    15:fc:e7:e2:fa:ec:c8:24:74:cb:a1:40:9d:18:36:
                    7b:d6:eb:1c:71:73:b6:45:ca:9f:67:12:a6:08:86:
                    04:d2:a9:c1:67:7a:51:2d:c1:86:b5:49:19:50:25:
                    41:e4:36:1c:6d:9f:16:6a:f2:ba:e8:0c:b9:2d:ef:
                    b1:d7:9f:d0:47:5d:e6:c6:b4:ae:8b:69:c4:8a:70:
                    51:be:99:5a:41:88:f9:db:5f:7a:f6:e9:e8:e8:f2:
                    3a:36:ae:3d:f7:72:94:ca:43:77:9a:87:5a:3f:31:
                    8d:53:db:28:ab:43:d3:d5:71:ad:54:cc:fc:0e:9a:
                    06:8b:7b:00:3c:e0:e1:ef:88:b1:8b:70:e8:9b:59:
                    79:16:3e:a1:6a:e3:5d:7a:8a:d1:5b:f2:9a:14:76:
                    fa:4d:e0:e3:bb:27:fe:b7:b5:46:02:01:ad:b3:90:
                    83:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:34:8B:DB:CE:0D:1D:97:CF:1B:1A:3A:C9:26:02:59:49:CF:11:8D
            X509v3 Authority Key Identifier:
                keyid:EB:8E:77:AD:91:33:AA:32:0B:37:CF:99:93:4C:D6:85:E0:B3:51:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c039812edab95b305292dc8f1a3339fcf9cd5dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/7eee37b5dd0db4a8ba20bb7b353a3b18cf4bfb99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/9c039812edab95b305292dc8f1a3339fcf9cd5dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:47:95:af:56:92:b3:fe:73:5e:c7:72:ba:24:58:97:68:64:
         6b:fe:69:55:07:09:55:83:27:a3:f6:64:61:a4:d0:0e:88:00:
         d9:e1:a1:f0:64:56:4a:ed:d9:96:14:46:a8:6d:d8:58:57:98:
         ab:1d:7d:c2:71:7e:16:ba:ed:7f:8e:88:9d:a9:52:4e:80:76:
         e4:ce:a1:da:f2:00:aa:16:b8:fe:75:d5:1a:df:ca:17:1c:fd:
         10:a6:df:39:2f:55:f3:ca:7d:44:2d:9c:d9:65:ac:56:ac:6b:
         e4:82:dd:94:04:9a:32:1e:91:87:29:7f:60:6f:d3:f2:eb:ec:
         ad:e5:e9:c2:f7:44:db:83:76:aa:c1:ef:be:04:d5:74:97:13:
         8e:16:39:05:7e:66:ba:71:25:89:56:e0:6e:c5:b9:57:b1:42:
         77:0d:0c:38:b5:04:8e:92:8b:96:4d:2c:0f:87:22:68:35:c3:
         48:0f:dc:bd:c4:77:4e:84:17:d2:32:9d:53:0b:72:98:bb:fd:
         35:d3:1c:b0:2c:82:72:3e:e6:4f:e5:11:59:28:34:99:8f:f7:
         33:85:d4:ce:d3:21:dc:b5:66:24:6f:fa:bc:32:7e:ba:f0:d0:
         98:40:9e:10:eb:5e:05:d7:7e:4c:35:88:b2:7c:78:16:ef:2f:
         a9:16:e7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----