Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/465c17eb18d825ff50e0031afeb339ce6d0f8673.roa
File:                     465c17eb18d825ff50e0031afeb339ce6d0f8673.roa (raw, json)
Hash identifier:          nEo2d4kyJ8+L4ZaZeHOXTss5JHAbN222+iwmHICagNk=
Subject key identifier:   34:56:A9:BB:47:BA:4E:08:73:1A:FF:C9:11:7E:56:01:4C:B1:6C:42
Certificate issuer:       /CN=9288132902323827f44806de3061debd517a8fd9
Certificate serial:       0CE1DE
Authority key identifier: AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/465c17eb18d825ff50e0031afeb339ce6d0f8673.roa
Signing time:             Wed 24 Mar 2021 14:34:04 +0000
ROA not before:           Wed 24 Mar 2021 14:34:04 +0000
ROA not after:            Tue 24 Mar 2026 14:34:04 +0000
asID:                     265858
IP address blocks:        45.225.204.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844254 (0xce1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9288132902323827f44806de3061debd517a8fd9
        Validity
            Not Before: Mar 24 14:34:04 2021 GMT
            Not After : Mar 24 14:34:04 2026 GMT
        Subject: CN=465c17eb18d825ff50e0031afeb339ce6d0f8673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:22:88:e9:53:96:17:ea:12:4b:57:09:75:
                    c0:36:67:a2:a1:b6:b8:04:d8:99:70:cd:e6:25:5a:
                    7e:56:16:e0:d2:b8:35:f0:3c:85:67:8b:96:4c:66:
                    d4:5b:2f:62:d6:20:b0:78:38:5f:1b:63:ae:3c:76:
                    99:eb:4d:b0:0a:71:29:26:83:1c:e7:a8:6b:25:95:
                    84:a1:a3:78:47:fa:ff:d3:df:d4:68:d7:10:77:95:
                    18:92:10:e9:66:e0:f1:5b:f9:d2:a0:d5:79:38:31:
                    f4:8e:75:ba:4e:eb:59:0f:12:5c:80:f9:dc:8b:a3:
                    fe:62:d4:91:1d:11:5a:bb:e0:cc:05:cb:29:f5:01:
                    5f:34:0f:f5:78:10:f8:d9:b3:5e:56:30:6a:c4:82:
                    f8:e6:e2:d7:04:49:81:61:9f:74:90:7f:17:4a:1e:
                    78:4d:8a:bf:98:25:f3:9e:03:66:72:89:62:ea:2c:
                    db:fd:1b:ce:a9:d8:07:ac:0e:5b:e5:02:29:f5:91:
                    5a:7a:cf:42:4a:6f:8a:bd:0b:6c:0e:92:43:78:bc:
                    f4:a2:85:ad:d7:b7:3a:67:4b:43:85:7c:ba:2d:0a:
                    a0:d4:b1:8e:ea:ef:29:67:df:70:cb:51:23:76:ab:
                    f1:27:31:8f:47:25:39:79:c8:ad:ce:fb:d8:b6:55:
                    83:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:56:A9:BB:47:BA:4E:08:73:1A:FF:C9:11:7E:56:01:4C:B1:6C:42
            X509v3 Authority Key Identifier:
                keyid:AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/465c17eb18d825ff50e0031afeb339ce6d0f8673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/9288132902323827f44806de3061debd517a8fd9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:ee:ec:5c:ff:1a:d2:0e:56:7c:3e:a7:24:62:d4:2f:a8:c9:
         db:b8:23:a7:ac:a8:61:49:c6:53:2c:db:79:f3:99:49:ec:96:
         87:7e:e2:e9:9e:26:63:0c:8b:02:ad:b0:24:92:d1:7d:71:57:
         c4:39:c1:d5:aa:44:60:5d:f6:2c:e9:9e:1c:f5:0b:36:2b:3b:
         12:2c:6c:52:e4:95:03:b1:e3:d6:40:44:91:cb:fc:10:68:e5:
         14:ee:47:8f:6c:97:26:62:63:a4:ea:1c:c4:8a:61:c6:96:d4:
         8c:78:11:c4:15:f7:03:af:a2:3c:e3:38:e1:49:67:85:ee:53:
         f7:99:e0:cc:80:0c:fc:9c:31:bf:0a:ef:7f:52:e1:ee:e7:b1:
         8c:b7:0f:d5:9f:79:9a:ca:0f:0b:c3:f8:3d:55:0c:9a:3a:ae:
         c5:45:ea:33:0d:1b:a1:a9:79:d6:3e:c1:08:7d:30:a6:64:14:
         b1:bf:e7:ab:46:38:cc:59:a3:3c:b8:3f:44:ae:dc:a7:1f:e3:
         ab:86:a2:40:0c:12:1c:3b:fd:55:85:55:e7:47:4f:73:5f:33:
         d6:51:60:6a:ed:d6:42:3e:38:0d:57:1d:c4:fb:bb:9d:73:34:
         1a:b9:1f:c6:7b:ca:ef:80:6f:47:06:4b:4b:e8:76:ae:d6:b3:
         0a:26:38:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----