Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/2a741114e007898f827dd90b3ad3b93a1860851b.roa
File:                     2a741114e007898f827dd90b3ad3b93a1860851b.roa (raw, json)
Hash identifier:          hfX4ElRvmXl4AYanyixkFYz64/v2f76R11HYb4F4Jno=
Subject key identifier:   3E:A3:35:63:44:BB:97:EE:22:A8:D7:49:C3:C8:5D:76:5B:27:00:02
Certificate issuer:       /CN=de1d132dcee440b2c8e49412f22186fb39f7c848
Certificate serial:       021CE2
Authority key identifier: 4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/2a741114e007898f827dd90b3ad3b93a1860851b.roa
Signing time:             Sat 04 Feb 2023 19:05:50 +0000
ROA not before:           Mon 07 Nov 2022 18:43:28 +0000
ROA not after:            Mon 11 Nov 2024 18:43:28 +0000
asID:                     262204
IP address blocks:        45.170.232.0/22 maxlen: 24
                          2803:bba0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138466 (0x21ce2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de1d132dcee440b2c8e49412f22186fb39f7c848
        Validity
            Not Before: Nov  7 18:43:28 2022 GMT
            Not After : Nov 11 18:43:28 2024 GMT
        Subject: CN=2a741114e007898f827dd90b3ad3b93a1860851b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:09:ef:6b:64:89:ef:d0:72:89:1c:4e:49:
                    0e:ec:51:3b:84:b2:a3:39:88:81:39:c2:58:59:70:
                    d2:49:37:a9:26:ec:bd:a2:e4:0e:09:9c:a7:62:e6:
                    0f:5a:97:a7:50:23:0b:67:af:7e:17:cf:71:7e:77:
                    0d:0b:5d:78:ee:82:28:93:02:f6:21:5f:57:41:12:
                    31:3a:b6:b6:83:c1:98:4b:b5:0e:33:7e:81:e2:f5:
                    34:6e:84:7f:7b:7c:0d:66:77:df:87:a7:99:48:ea:
                    42:82:21:6b:fb:cb:44:df:26:0b:a6:14:97:e2:4b:
                    2e:0e:65:cd:d7:ca:e7:10:20:32:6f:55:56:c2:ff:
                    9c:c6:ae:47:5c:5a:e3:9a:bc:e2:3c:a1:89:ca:5e:
                    b4:6f:52:3b:97:3b:4b:bd:6d:ab:7b:a1:5d:99:89:
                    ab:1e:0e:d0:6b:d6:2c:9a:6d:bd:d8:8a:71:c5:ce:
                    a1:75:5b:24:be:34:aa:69:ee:46:94:6b:49:9e:af:
                    7c:09:6d:06:17:db:6c:fa:77:6f:8d:7b:4f:a8:bf:
                    78:ea:78:f0:03:22:7a:43:74:ab:f0:ca:af:b7:61:
                    4a:d1:3f:ab:62:4f:b9:a9:e4:ad:7f:64:2c:f6:6c:
                    48:f7:1c:1d:b2:d3:81:6d:6d:9f:b0:7d:41:0c:7a:
                    24:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A3:35:63:44:BB:97:EE:22:A8:D7:49:C3:C8:5D:76:5B:27:00:02
            X509v3 Authority Key Identifier:
                keyid:4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/2a741114e007898f827dd90b3ad3b93a1860851b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/de1d132dcee440b2c8e49412f22186fb39f7c848.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.232.0/22
                IPv6:
                  2803:bba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:75:00:56:2f:39:ba:67:5f:cb:57:85:db:a0:9c:f0:a5:6a:
         b4:58:95:5b:5b:d5:69:31:9a:5f:98:9b:8f:22:07:7a:2e:7d:
         90:6e:a4:8d:4e:e9:33:74:33:10:66:79:d3:21:7a:da:d8:43:
         d6:1c:d7:b2:20:d3:39:dd:32:25:08:11:17:ae:db:10:67:35:
         10:36:3c:29:f2:06:c1:64:5d:e0:27:09:64:77:41:c7:23:cb:
         26:79:6d:22:78:86:a6:2f:d1:3e:11:13:56:b1:73:34:0a:bb:
         02:4e:46:70:b6:48:3e:26:2d:6e:81:b5:c1:b3:4d:8e:e0:6b:
         ca:19:c6:ca:bd:7b:90:e3:e8:3a:a4:3b:2f:87:7f:0b:f9:48:
         43:b3:10:1a:6a:84:5e:10:b0:ae:d0:e8:5b:a3:46:49:db:63:
         e7:61:93:cc:a5:dd:8f:14:b5:9a:33:d2:92:b6:d7:17:8b:34:
         f4:74:df:f4:6d:9f:d6:e0:5a:85:67:78:7e:e5:a8:58:82:c8:
         5b:7b:24:b8:1b:37:b5:3f:5d:0b:43:03:e4:7c:14:4f:e3:18:
         b7:db:1f:06:cd:9f:19:86:5e:0a:75:db:88:78:88:4e:b0:84:
         a1:b5:52:5f:d5:f9:63:45:66:23:42:d7:ef:1d:83:d2:73:59:
         5a:f4:eb:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDAhziMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRl
MWQxMzJkY2VlNDQwYjJjOGU0OTQxMmYyMjE4NmZiMzlmN2M4NDgwHhcNMjIxMTA3
MTg0MzI4WhcNMjQxMTExMTg0MzI4WjAzMTEwLwYDVQQDEygyYTc0MTExNGUwMDc4
OThmODI3ZGQ5MGIzYWQzYjkzYTE4NjA4NTFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqGEJ72tkie/QcokcTkkO7FE7hLKjOYiBOcJYWXDSSTepJuy9
ouQOCZynYuYPWpenUCMLZ69+F89xfncNC1147oIokwL2IV9XQRIxOra2g8GYS7UO
M36B4vU0boR/e3wNZnffh6eZSOpCgiFr+8tE3yYLphSX4ksuDmXN18rnECAyb1VW
wv+cxq5HXFrjmrziPKGJyl60b1I7lztLvW2re6FdmYmrHg7Qa9Ysmm292Ipxxc6h
dVskvjSqae5GlGtJnq98CW0GF9ts+ndvjXtPqL946njwAyJ6Q3Sr8Mqvt2FK0T+r
Yk+5qeStf2Qs9mxI9xwdstOBbW2fsH1BDHok/wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFD6jNWNEu5fuIqjXScPIXXZbJwACMB8GA1UdIwQYMBaAFExAJFACdSHubiBj
IXOY4aH1PG3EMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGUxZDEz
MmRjZWU0NDBiMmM4ZTQ5NDEyZjIyMTg2ZmIzOWY3Yzg0OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTFmZjg5YTEtMDYwMy00MmExLTkxZGYtNmQxMDgw
ZjhjNWE0LzJhNzQxMTE0ZTAwNzg5OGY4MjdkZDkwYjNhZDNiOTNhMTg2MDg1MWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMWZmODlhMS0wNjAzLTQyYTEtOTFkZi02ZDEw
ODBmOGM1YTQvZGUxZDEzMmRjZWU0NDBiMmM4ZTQ5NDEyZjIyMTg2ZmIzOWY3Yzg0
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2q6DANBAIAAjAHAwUAKAO7oDANBgkqhkiG9w0BAQsFAAOC
AQEAM3UAVi85umdfy1eF26Cc8KVqtFiVW1vVaTGaX5ibjyIHei59kG6kjU7pM3Qz
EGZ50yF62thD1hzXsiDTOd0yJQgRF67bEGc1EDY8KfIGwWRd4CcJZHdBxyPLJnlt
IniGpi/RPhETVrFzNAq7Ak5GcLZIPiYtboG1wbNNjuBryhnGyr17kOPoOqQ7L4d/
C/lIQ7MQGmqEXhCwrtDoW6NGSdtj52GTzKXdjxS1mjPSkrbXF4s09HTf9G2f1uBa
hWd4fuWoWILIW3skuBs3tT9dC0MD5HwUT+MYt9sfBs2fGYZeCnXbiHiITrCEobVS
X9X5Y0VmI0LX7x2D0nNZWvTrfg==
-----END CERTIFICATE-----