Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/35a7ef75bc46dd602d227e370fa9c991ce75730f.roa
File:                     35a7ef75bc46dd602d227e370fa9c991ce75730f.roa (raw, json)
Hash identifier:          ZRuVR9jrNdSG49WDU3WyFUDnlZ7wdBhSlRIFxc+Lg2E=
Subject key identifier:   2F:97:C2:E3:F8:4C:6B:05:B6:59:A4:62:E9:11:A3:BC:4B:8F:B6:DC
Certificate issuer:       /CN=de1d132dcee440b2c8e49412f22186fb39f7c848
Certificate serial:       0E02
Authority key identifier: 4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/35a7ef75bc46dd602d227e370fa9c991ce75730f.roa
Signing time:             Sun 13 Nov 2022 01:01:47 +0000
ROA not before:           Wed 09 Nov 2022 18:43:28 +0000
ROA not after:            Mon 11 Nov 2024 18:43:28 +0000
asID:                     267768
IP address blocks:        45.170.232.0/22 maxlen: 24
                          2803:bba0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3586 (0xe02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de1d132dcee440b2c8e49412f22186fb39f7c848
        Validity
            Not Before: Nov  9 18:43:28 2022 GMT
            Not After : Nov 11 18:43:28 2024 GMT
        Subject: CN=35a7ef75bc46dd602d227e370fa9c991ce75730f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2e:10:ff:f0:e2:9b:e3:ee:c8:08:42:5a:bf:
                    09:ea:eb:fc:90:b6:73:8b:52:9b:73:0f:21:6f:92:
                    d2:70:cf:c3:d0:db:54:02:53:92:d0:15:72:cc:d4:
                    b5:ea:a3:38:ab:ce:c3:4c:57:16:96:52:0e:7c:82:
                    2f:13:97:03:ad:78:92:40:80:cf:6e:5f:55:63:dd:
                    dd:f3:96:fd:58:2b:fb:0d:7d:48:d9:c8:83:b0:18:
                    e8:ff:3a:ca:3b:78:41:de:71:49:56:05:a2:fd:d6:
                    6b:b8:c7:88:bf:0f:d7:07:0b:be:0a:6f:33:62:29:
                    0f:98:25:c0:55:a0:ff:eb:e2:7e:e9:a4:eb:3e:1d:
                    8d:05:79:14:9f:94:6e:8e:0a:cb:b4:3b:82:7c:0b:
                    8e:d0:cd:c5:1d:e8:a3:c9:36:62:10:22:70:d2:58:
                    01:44:95:1b:6a:89:e0:cf:50:f7:98:59:45:6a:d3:
                    41:ec:6b:2f:d3:90:69:4b:09:24:86:a4:1a:a0:95:
                    46:5f:7d:bc:1b:a7:3b:b9:00:32:81:f0:8d:99:81:
                    fb:3e:42:e8:d2:6d:42:60:aa:8f:6c:f9:40:e4:9f:
                    35:b4:0e:a4:38:c2:41:51:d0:7f:64:c8:3b:1d:81:
                    ad:70:e0:83:3a:79:85:cd:89:a7:62:7f:4a:17:27:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:97:C2:E3:F8:4C:6B:05:B6:59:A4:62:E9:11:A3:BC:4B:8F:B6:DC
            X509v3 Authority Key Identifier:
                keyid:4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/35a7ef75bc46dd602d227e370fa9c991ce75730f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/de1d132dcee440b2c8e49412f22186fb39f7c848.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.232.0/22
                IPv6:
                  2803:bba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:1c:e2:77:45:8c:31:69:1e:1e:53:46:eb:ae:ab:63:a4:c5:
         5e:7c:1c:d6:09:2e:92:0e:a6:20:53:39:08:0e:cf:ce:29:30:
         f4:12:ac:2a:66:84:06:af:5d:37:76:28:92:83:ea:f1:ca:12:
         cf:c7:7c:f4:eb:a3:ed:1b:d6:7a:4f:a2:d5:72:c9:04:86:52:
         c3:b3:c2:fd:12:1d:9a:a4:8a:03:53:94:46:d9:90:8b:58:44:
         22:c2:21:19:db:95:46:7f:53:76:ce:e4:f6:42:67:ac:e5:0d:
         c7:13:c8:44:ac:ff:2f:1e:23:f4:a6:2e:5c:c9:d2:8e:d4:a3:
         86:eb:8e:6f:52:95:b4:f1:5d:c6:18:8f:3b:8f:6d:8b:6b:f4:
         0b:f7:5e:ed:4c:a5:a9:84:fe:84:11:2b:4c:0f:30:95:70:11:
         80:1b:ba:a8:f1:eb:9a:6c:3a:6e:d0:3f:72:2a:c0:23:6d:2a:
         4b:6f:ad:a0:1b:df:ac:eb:c9:6a:b7:60:62:46:10:8b:05:f5:
         ce:70:2e:1f:8e:d8:de:8d:64:6b:5c:a3:26:1d:67:13:b2:47:
         f9:92:44:24:0b:07:c7:82:89:f7:ac:3e:ea:36:38:3a:11:fc:
         05:9b:ef:04:a8:20:5e:bd:8c:ba:d5:be:da:a9:17:c1:71:32:
         bc:95:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----