Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/8cfa8c59c303baa4417bf5a27021f260fcb2518c.roa
File:                     8cfa8c59c303baa4417bf5a27021f260fcb2518c.roa (raw, json)
Hash identifier:          YfL33FloatLr6NHndjPYUyaecjzmoueabbeM+4ZHc1A=
Subject key identifier:   B4:D5:71:AD:AF:38:30:15:25:21:AE:23:0A:F7:72:AD:6B:08:D7:8F
Certificate issuer:       /CN=de1d132dcee440b2c8e49412f22186fb39f7c848
Certificate serial:       021360
Authority key identifier: 4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/8cfa8c59c303baa4417bf5a27021f260fcb2518c.roa
Signing time:             Sat 04 Feb 2023 19:04:53 +0000
ROA not before:           Tue 08 Nov 2022 18:43:28 +0000
ROA not after:            Mon 11 Nov 2024 18:43:28 +0000
asID:                     267768
IP address blocks:        45.170.232.0/22 maxlen: 24
                          2803:bba0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136032 (0x21360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de1d132dcee440b2c8e49412f22186fb39f7c848
        Validity
            Not Before: Nov  8 18:43:28 2022 GMT
            Not After : Nov 11 18:43:28 2024 GMT
        Subject: CN=8cfa8c59c303baa4417bf5a27021f260fcb2518c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1c:c4:b2:bc:69:e1:2d:5d:f2:3a:27:d9:9c:
                    11:f9:04:c8:ce:62:72:d8:c6:0f:15:5b:f9:f4:cc:
                    d2:6e:d9:01:f3:99:be:ea:51:22:d0:65:8d:ee:2b:
                    63:e9:7f:7a:be:13:11:f1:b1:3b:29:8a:d0:37:18:
                    0a:aa:d0:64:95:2d:d0:5d:06:c0:56:74:9b:61:00:
                    82:c0:f5:79:c5:b5:88:8e:f4:e4:cf:9b:f7:82:3b:
                    70:2c:5c:25:b4:89:21:a3:6e:78:e0:38:c3:62:9e:
                    d2:30:5b:a8:c9:70:a6:78:bb:85:f6:df:93:7e:f2:
                    46:ae:83:4f:ab:e2:59:b8:2a:32:b1:8d:94:83:db:
                    6e:26:fa:73:ec:63:a5:6e:c9:0e:a4:ea:b9:04:4a:
                    d1:a3:4e:02:16:be:b4:e7:da:df:9f:eb:52:2c:30:
                    ad:05:5a:f4:a6:b5:3a:bd:08:c4:cb:d3:90:80:53:
                    f0:9e:b2:4c:2d:bc:51:61:af:e2:1d:3f:d3:e2:ba:
                    35:4f:fd:26:51:93:90:fd:f6:83:43:6a:1b:ee:92:
                    80:fb:3e:ee:f5:b6:0e:4f:46:a8:92:e3:fb:93:a2:
                    dd:da:7e:0e:03:be:c8:2e:75:84:9a:3b:69:df:7d:
                    05:03:1b:15:01:c2:65:b7:c2:bf:07:a9:d6:5f:0c:
                    ed:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D5:71:AD:AF:38:30:15:25:21:AE:23:0A:F7:72:AD:6B:08:D7:8F
            X509v3 Authority Key Identifier:
                keyid:4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/8cfa8c59c303baa4417bf5a27021f260fcb2518c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/de1d132dcee440b2c8e49412f22186fb39f7c848.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.232.0/22
                IPv6:
                  2803:bba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:65:ed:e7:5f:32:24:a9:9f:57:29:2b:a3:fa:7e:b1:c1:8d:
         5f:89:18:8d:bb:e5:d1:d9:ec:0f:a8:63:d6:fc:5d:2d:d9:9c:
         cf:c3:17:94:ba:5e:73:89:13:d2:fa:31:54:3d:f2:34:6e:c5:
         ae:06:3c:f2:5b:c3:d3:58:af:17:62:ab:71:70:6b:54:5e:7a:
         9e:b5:40:0e:50:d8:40:d6:17:9b:d7:d3:33:6d:3a:0f:86:3b:
         67:d6:5a:42:41:db:67:a1:df:87:8b:9a:2e:d0:e4:53:c2:78:
         d6:10:ee:17:01:8b:64:03:b8:ac:41:60:15:75:82:bc:8d:ee:
         ea:ce:cb:b8:9f:9c:84:1a:af:b5:53:83:d4:34:8d:79:e2:37:
         c5:16:a9:46:3c:95:50:ff:4c:74:69:f5:57:06:96:3f:9d:c0:
         99:c2:d5:d3:ca:8f:c7:8d:10:8c:9e:02:d3:0d:b8:d6:0b:83:
         59:94:d3:75:44:90:a0:38:c2:2c:90:cf:48:2e:19:4f:f4:58:
         f2:94:77:71:75:85:a4:aa:ee:5d:24:48:fc:26:29:50:f4:9a:
         a4:07:08:84:2b:d8:8b:55:0b:e9:5e:94:0e:26:57:e2:ea:2d:
         7e:52:72:96:c3:cc:e2:46:e9:70:13:82:cf:8c:18:6f:e4:8f:
         c0:f0:36:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----