Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/728a8c29b0714a488e85359c14fd27eee749acfc.roa
File:                     728a8c29b0714a488e85359c14fd27eee749acfc.roa (raw, json)
Hash identifier:          TmIwF+4wUBHsmVxIaPfR8RCRqas0W7bFzNZ5H1Sde+4=
Subject key identifier:   E2:D8:F1:FD:07:5A:F5:2C:26:69:D5:45:11:90:04:C2:E8:43:51:8D
Certificate issuer:       /CN=e84a8a2c72a83a6a007b4119c4bead05ab70e47c
Certificate serial:       0DE2FE
Authority key identifier: CF:62:D5:B0:5F:8D:02:DA:E2:04:5F:9B:0B:DF:83:DB:92:1C:3E:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84a8a2c72a83a6a007b4119c4bead05ab70e47c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/728a8c29b0714a488e85359c14fd27eee749acfc.roa
Signing time:             Thu 20 Apr 2023 21:37:47 +0000
ROA not before:           Wed 19 Apr 2023 21:37:47 +0000
ROA not after:            Sun 20 Apr 2025 21:37:47 +0000
asID:                     265868
IP address blocks:        45.226.28.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910078 (0xde2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a8a2c72a83a6a007b4119c4bead05ab70e47c
        Validity
            Not Before: Apr 19 21:37:47 2023 GMT
            Not After : Apr 20 21:37:47 2025 GMT
        Subject: CN=728a8c29b0714a488e85359c14fd27eee749acfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:c5:d7:3e:42:30:ad:4c:07:ea:35:1f:c8:
                    90:90:6d:43:12:4c:05:5e:fc:93:ee:c1:76:07:1c:
                    6a:32:82:9e:30:d7:11:0d:c0:38:24:b6:4f:00:f5:
                    57:f3:3f:0b:14:77:12:14:86:c3:44:17:16:36:0a:
                    80:a6:9f:f9:b2:8e:37:00:af:79:eb:3e:02:55:2d:
                    cb:79:85:0b:20:a9:15:27:2f:25:aa:d0:0e:17:7b:
                    66:be:e5:4c:68:a5:8e:16:b2:85:47:57:ab:1e:58:
                    f7:eb:24:70:16:71:e1:b4:a9:3d:bb:95:70:93:ac:
                    93:c5:0b:3d:58:f4:d0:2a:8d:ae:a9:b5:c9:d1:d7:
                    43:e1:49:76:88:93:63:9f:4f:5f:08:1b:af:c2:15:
                    c0:d3:c3:bb:b9:cf:b0:e0:33:63:c9:52:b0:1c:00:
                    2d:d9:59:41:b0:ea:74:45:63:43:75:e9:9a:e7:9b:
                    ee:95:b1:c4:b4:c2:ce:b9:33:42:63:0c:ce:6d:a1:
                    7c:e6:a2:4d:83:09:fd:51:ad:06:41:ad:88:f0:70:
                    55:8e:c0:08:4f:80:61:2c:33:94:95:e0:37:d5:3f:
                    87:a3:9f:95:5c:f8:27:b5:36:1d:b1:a8:47:bd:8b:
                    6b:3a:75:cd:3c:ec:11:35:da:85:ab:c6:cd:66:4e:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D8:F1:FD:07:5A:F5:2C:26:69:D5:45:11:90:04:C2:E8:43:51:8D
            X509v3 Authority Key Identifier:
                keyid:CF:62:D5:B0:5F:8D:02:DA:E2:04:5F:9B:0B:DF:83:DB:92:1C:3E:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84a8a2c72a83a6a007b4119c4bead05ab70e47c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/728a8c29b0714a488e85359c14fd27eee749acfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/e84a8a2c72a83a6a007b4119c4bead05ab70e47c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:7b:13:d4:c2:8f:3f:30:7b:91:68:0b:bf:a0:af:7b:9e:fc:
         10:70:eb:29:49:21:7b:bb:5b:f8:6e:95:d1:13:3e:5d:67:12:
         87:6c:9e:36:1f:f9:cb:c6:e5:f7:7b:36:a6:6b:77:4f:78:34:
         cb:f5:0f:dc:65:c5:a5:cf:6e:e7:da:4e:e5:41:ef:c3:99:ae:
         ad:8b:11:e0:14:56:9d:37:86:8a:7e:38:42:62:f4:5e:92:ed:
         cf:5f:97:78:30:6b:66:25:49:a3:3f:25:f8:e4:d3:fb:9a:f3:
         29:dc:2e:48:00:c7:4f:73:c8:7b:f1:05:68:d8:25:78:10:f0:
         18:ce:c9:90:67:34:43:82:47:86:57:11:b3:02:2f:3c:84:73:
         df:f0:98:a7:65:44:ff:81:b4:be:1a:dc:33:79:0b:14:db:3a:
         ba:f5:ba:3a:73:94:96:eb:44:fa:4f:b8:2b:77:64:16:91:9a:
         ef:4c:a0:9e:49:01:6f:1d:a4:47:4c:31:66:78:7d:1f:21:2e:
         dd:8a:3a:fe:93:7d:34:7d:18:36:fc:f8:e9:ae:83:c9:a7:0d:
         a1:b2:f5:93:f4:9c:fe:0a:d0:b1:30:6c:4f:84:0a:d9:19:49:
         6f:f0:74:d5:17:86:3f:a0:e4:ae:5f:94:5a:f6:a5:e6:11:4d:
         e6:8f:90:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----