Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0e138d34-c7c6-4cc9-9e7b-b8758efa2895/a230ac0423877dc4af1eb298a2438fce451116e2.roa
File:                     a230ac0423877dc4af1eb298a2438fce451116e2.roa (raw, json)
Hash identifier:          yql/rJV4P4pVhSD965KlsoK6+KJAUFJ1YKAgHC+umkw=
Subject key identifier:   74:FB:ED:46:F6:F1:9C:D5:9E:59:01:DC:53:36:18:E6:A6:6C:3E:13
Certificate issuer:       /CN=8b5566367e2371cf5c21ed9d29cec50ed503cae5
Certificate serial:       039D
Authority key identifier: E8:29:5E:AB:53:01:D0:E7:74:05:6A:F4:20:EB:06:F8:14:AC:19:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b5566367e2371cf5c21ed9d29cec50ed503cae5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0e138d34-c7c6-4cc9-9e7b-b8758efa2895/a230ac0423877dc4af1eb298a2438fce451116e2.roa
Signing time:             Thu 10 Mar 2022 14:52:02 +0000
ROA not before:           Thu 10 Mar 2022 03:00:00 +0000
ROA not after:            Sun 10 Mar 2024 03:00:00 +0000
asID:                     267734
IP address blocks:        45.165.112.0/22 maxlen: 24
                          2803:f9a0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sat 09 Mar 2024 08:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925 (0x39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b5566367e2371cf5c21ed9d29cec50ed503cae5
        Validity
            Not Before: Mar 10 03:00:00 2022 GMT
            Not After : Mar 10 03:00:00 2024 GMT
        Subject: CN=a230ac0423877dc4af1eb298a2438fce451116e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d4:9d:f4:a2:9e:85:a9:31:f8:b6:c5:72:da:
                    bc:a1:8f:4a:1b:13:ee:39:7e:f0:a7:15:c7:53:cd:
                    ef:05:0f:bc:3f:3f:62:85:43:a3:2e:7a:d5:8d:65:
                    5f:68:1d:e3:c4:9c:f4:7a:12:a7:a2:d4:ff:ce:64:
                    72:61:18:2e:33:e0:e6:4c:98:8d:fe:28:af:7f:9f:
                    7e:23:d2:b8:64:1f:c5:6a:35:8f:63:d3:1d:dc:b9:
                    85:a9:9f:e3:d6:fe:6a:56:7b:59:bf:d7:f8:fe:4a:
                    19:9b:ad:ae:70:c2:04:7a:1b:15:46:40:91:59:41:
                    65:44:15:c0:42:41:7a:b7:b2:cc:93:77:1d:3e:29:
                    94:29:34:52:75:50:9e:74:0f:33:c4:37:b7:f4:02:
                    6a:98:a4:0e:fd:36:f8:19:9d:8a:48:c2:1f:3d:38:
                    b2:46:dc:9f:dc:ff:80:c2:a9:3f:51:fe:01:4b:ce:
                    d8:a4:d8:fe:04:1c:ed:aa:3b:09:0c:3d:83:01:c6:
                    ee:9c:fa:af:b7:d1:f4:10:5d:4d:ad:f1:74:91:ce:
                    a1:3c:c8:71:7a:72:5e:e8:c8:93:56:65:fe:17:79:
                    53:40:1f:e1:53:10:93:f2:bf:5f:15:2f:60:5c:14:
                    3d:30:d3:74:ba:d5:e3:d3:d4:14:33:87:fd:42:e5:
                    bb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FB:ED:46:F6:F1:9C:D5:9E:59:01:DC:53:36:18:E6:A6:6C:3E:13
            X509v3 Authority Key Identifier:
                keyid:E8:29:5E:AB:53:01:D0:E7:74:05:6A:F4:20:EB:06:F8:14:AC:19:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b5566367e2371cf5c21ed9d29cec50ed503cae5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0e138d34-c7c6-4cc9-9e7b-b8758efa2895/a230ac0423877dc4af1eb298a2438fce451116e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0e138d34-c7c6-4cc9-9e7b-b8758efa2895/8b5566367e2371cf5c21ed9d29cec50ed503cae5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.112.0/22
                IPv6:
                  2803:f9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:6a:df:8e:ac:93:86:15:eb:64:cb:5a:86:58:65:13:98:ac:
         c6:31:6b:46:85:1f:c8:eb:e0:93:d1:51:13:03:3c:2e:cc:b3:
         be:d8:6e:55:ab:b0:e1:97:dc:63:30:a5:9d:a1:7b:a9:05:80:
         b6:dc:38:52:15:85:db:5c:7e:99:73:3a:a7:f6:fe:d0:ab:a6:
         17:c0:58:70:75:32:0c:20:5f:e0:49:70:5b:76:ee:25:db:ff:
         af:ac:90:a2:55:34:39:41:fd:0e:68:5d:6e:ff:32:f5:2f:93:
         ba:fa:ef:d9:66:79:c6:04:82:f2:d2:24:18:da:21:f4:9f:17:
         44:29:23:f3:ec:43:ba:e4:1e:d6:ce:34:b7:e0:45:48:fb:02:
         03:da:f7:29:91:ce:c9:a2:f8:cb:16:e2:a2:c8:89:7f:ad:64:
         4c:d1:49:5c:cb:6c:61:57:93:f7:cc:94:44:ed:c3:21:39:2b:
         ba:32:7d:f5:1f:b1:f4:5d:a9:e8:3f:d6:b0:1a:39:d8:0f:c2:
         9d:f3:48:62:e0:ff:4c:ce:75:b7:ba:c9:ad:7b:70:9f:8b:19:
         8c:27:4f:13:47:fb:46:c8:8d:e0:bd:72:64:5c:4c:ab:13:fa:
         b8:83:f7:c8:27:92:7e:62:58:9b:b2:45:34:48:73:4b:f4:eb:
         2e:19:a8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----