Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/40223c2be1934d4234e634652347a8ebb03e710f.roa
File:                     40223c2be1934d4234e634652347a8ebb03e710f.roa (raw, json)
Hash identifier:          XqXBcL0kHGDXtZs6EsmP20l2XcjB253kA+HyKPjYpMQ=
Subject key identifier:   CC:D7:D1:82:66:92:C1:DA:17:AF:D6:CB:92:F2:99:02:03:C4:5F:94
Certificate issuer:       /CN=b13d071b46d68829a9388770c45592a3ff309e4d
Certificate serial:       12E983
Authority key identifier: 53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/40223c2be1934d4234e634652347a8ebb03e710f.roa
Signing time:             Tue 29 Mar 2022 01:27:46 +0000
ROA not before:           Mon 28 Mar 2022 03:00:00 +0000
ROA not after:            Thu 28 Mar 2024 03:00:00 +0000
asID:                     266721
IP address blocks:        45.191.84.0/22 maxlen: 24
                          2803:ece0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 27 Mar 2024 08:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239427 (0x12e983)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b13d071b46d68829a9388770c45592a3ff309e4d
        Validity
            Not Before: Mar 28 03:00:00 2022 GMT
            Not After : Mar 28 03:00:00 2024 GMT
        Subject: CN=40223c2be1934d4234e634652347a8ebb03e710f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:90:68:15:7b:f7:15:bf:14:4c:d9:38:2d:
                    56:ed:ff:40:88:b0:4c:2a:02:9e:7a:27:9d:41:c2:
                    0f:c9:7f:93:7e:ba:f9:89:d6:76:49:7f:80:a8:87:
                    31:ca:a6:17:9a:30:df:a6:d8:ee:0c:c3:42:a3:4f:
                    07:f2:b6:bf:30:31:fc:95:53:4b:0d:84:b0:08:60:
                    db:8f:c5:cf:98:67:25:f3:e9:58:36:11:6c:40:e5:
                    8e:90:14:d2:d2:30:04:f6:66:cf:e0:15:79:6b:6f:
                    9f:cf:f1:a0:3f:a9:0a:1a:47:85:01:26:50:69:f2:
                    4f:67:8a:08:b0:85:98:a1:79:9f:9d:10:d7:4d:a8:
                    98:34:80:80:8e:dc:b8:f5:81:6f:95:05:e0:74:c1:
                    17:ef:1e:20:0c:2d:66:71:f7:4a:74:a9:76:ec:3b:
                    fa:19:5c:d6:9b:dc:5c:65:e6:e8:df:da:f8:25:bc:
                    ca:bd:1c:4c:e1:a3:8c:a9:99:e7:85:df:9f:04:4f:
                    11:3b:d4:d2:45:3c:fb:a8:67:39:dc:20:4f:cb:6d:
                    6b:c0:8a:9e:f1:12:fb:0d:b8:d9:9c:b3:67:c2:8d:
                    bf:ec:3c:ec:05:1a:11:a0:91:bb:69:e4:04:b4:e0:
                    8b:bb:51:a7:7c:5e:ff:66:84:c1:c4:48:e0:54:63:
                    5e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D7:D1:82:66:92:C1:DA:17:AF:D6:CB:92:F2:99:02:03:C4:5F:94
            X509v3 Authority Key Identifier:
                keyid:53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/40223c2be1934d4234e634652347a8ebb03e710f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/b13d071b46d68829a9388770c45592a3ff309e4d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.84.0/22
                IPv6:
                  2803:ece0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:cc:fe:ba:c7:8e:5c:06:6b:60:a9:f2:1a:a9:a7:67:0d:7a:
         74:85:d2:42:56:86:c4:43:ad:b2:c8:cd:1a:77:2b:6c:10:8c:
         03:a3:f8:94:fa:2a:8e:43:00:f6:40:61:7c:23:77:b2:8b:35:
         69:89:b2:d7:49:e8:88:d7:01:bb:2b:fe:59:19:41:6f:a7:60:
         ce:1d:5f:36:de:59:5e:08:32:3f:45:25:91:62:f7:63:bc:e0:
         db:7d:a1:ac:99:a7:c8:5b:9d:75:1a:83:db:cc:f2:2c:3a:fe:
         7e:47:28:22:20:71:d0:a1:45:5f:4b:60:78:95:37:ea:57:74:
         13:e6:da:08:15:82:eb:b0:cc:03:f3:71:8c:6c:c4:85:d2:11:
         e4:ee:8a:30:4b:d3:ba:37:d7:c0:a5:1f:7a:9c:32:58:7a:2b:
         58:3a:83:b0:5c:45:11:3d:b3:0d:2f:6d:18:e3:a9:d3:93:5d:
         a5:5b:da:5b:c5:92:a8:8c:d7:16:9b:1f:5a:ad:a6:81:a6:95:
         63:a6:e5:39:b6:4f:06:2c:d2:24:32:89:ee:a0:dc:ee:64:06:
         86:ed:1c:47:ec:de:7c:70:d5:34:eb:40:12:78:6f:c6:be:1d:
         1e:dd:69:92:5e:b2:af:bd:90:58:f3:4b:ac:bd:b0:0e:ea:f3:
         a2:4e:a7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----