Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/662c0cf8c69c9624ba2fc543023e52820e1c4e89.roa
File:                     662c0cf8c69c9624ba2fc543023e52820e1c4e89.roa (raw, json)
Hash identifier:          SmrC4jnOdE48XTyOaWj6/YEJLUJ4dOM/bNcX+VX4e0Q=
Subject key identifier:   C0:8A:97:A1:36:91:43:35:07:03:EF:08:43:EA:37:80:2E:FC:D9:8F
Certificate issuer:       /CN=55c0fb0d5531f91dd06c19ed8fa00f2687176d55
Certificate serial:       1F96A2
Authority key identifier: BA:80:9B:F0:B1:12:1D:91:3D:20:0B:4F:F8:8B:7C:71:84:C6:58:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/662c0cf8c69c9624ba2fc543023e52820e1c4e89.roa
Signing time:             Mon 08 May 2023 14:58:29 +0000
ROA not before:           Sun 07 May 2023 14:58:29 +0000
ROA not after:            Thu 08 May 2025 14:58:29 +0000
asID:                     266728
IP address blocks:        45.229.87.0/24 maxlen: 24
                          2803:5320::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070178 (0x1f96a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c0fb0d5531f91dd06c19ed8fa00f2687176d55
        Validity
            Not Before: May  7 14:58:29 2023 GMT
            Not After : May  8 14:58:29 2025 GMT
        Subject: CN=662c0cf8c69c9624ba2fc543023e52820e1c4e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:45:e6:ff:03:92:41:37:ad:12:ae:0e:f9:
                    cd:e6:2e:8e:85:7e:4e:a2:2a:f2:79:6c:13:32:0d:
                    7d:b4:f9:df:6d:d5:cf:25:c9:25:02:16:0c:dd:e7:
                    94:9d:ea:c4:10:27:b7:e2:36:b3:6c:3f:2b:af:6e:
                    72:34:72:a8:ab:aa:e3:36:64:f9:14:4c:cd:41:78:
                    30:0a:a1:b2:07:31:e0:be:25:24:65:dc:fe:42:94:
                    8e:06:1a:bd:f0:71:b2:77:b3:60:9d:09:a3:41:0a:
                    af:ac:e4:ab:00:a3:ae:60:13:ea:f1:e6:6e:1f:e2:
                    7d:e9:6c:cd:62:59:e2:6d:8c:7f:e1:fa:a7:2b:fe:
                    a7:32:28:8e:df:da:d1:60:82:a8:ad:77:74:31:25:
                    54:69:7e:a6:bc:6b:0c:1a:b2:07:cb:fd:ad:20:f9:
                    7c:ac:ff:1c:27:a5:f0:d1:b2:f5:64:29:b0:9a:1a:
                    2a:9c:f2:da:c4:c9:ee:96:09:8d:86:0e:96:9e:a4:
                    c0:c2:53:33:86:34:e5:e2:07:89:5e:cd:10:83:35:
                    b8:57:df:70:66:a9:9c:2c:b0:82:4c:3e:c0:d7:cf:
                    cd:26:79:d8:a4:28:3d:c6:41:04:d7:5d:c4:0f:9f:
                    b0:90:42:45:c0:5d:2f:fa:d8:93:cb:87:42:d8:a4:
                    95:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8A:97:A1:36:91:43:35:07:03:EF:08:43:EA:37:80:2E:FC:D9:8F
            X509v3 Authority Key Identifier:
                keyid:BA:80:9B:F0:B1:12:1D:91:3D:20:0B:4F:F8:8B:7C:71:84:C6:58:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/662c0cf8c69c9624ba2fc543023e52820e1c4e89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.87.0/24
                IPv6:
                  2803:5320::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:98:d5:5e:96:fb:ab:41:05:ba:ac:ad:f3:0e:10:e3:1b:8d:
         48:da:3a:0a:77:6a:39:9a:70:b1:fd:6e:a0:dd:35:78:42:61:
         35:aa:fb:b9:62:c1:7d:5b:41:75:d8:89:72:d8:9e:37:8c:28:
         22:de:ac:77:a3:3c:ad:cd:1f:26:36:de:75:f2:a3:5e:ca:bd:
         da:ad:f2:36:86:a5:3c:30:c1:8f:e7:da:f9:15:d6:48:96:f3:
         d4:cf:a0:c0:e1:94:9c:48:03:dc:0f:d9:3a:24:d9:ef:29:08:
         e3:05:10:c2:c1:89:03:b2:c3:71:02:81:c9:0b:62:bf:be:fa:
         9a:c1:3f:89:8d:b7:8b:8e:43:f3:da:1f:aa:49:e4:2b:0e:2d:
         a8:54:c9:60:2e:a5:e6:07:29:49:fa:8b:60:0b:26:0e:17:72:
         e0:4e:23:df:82:ae:52:8e:36:ca:ec:4d:73:bc:d4:5c:f1:b0:
         b7:21:b1:73:2f:e5:63:33:8d:4d:db:18:17:c4:7e:f9:f4:9e:
         7a:ff:f7:f6:01:9f:6e:22:9a:f8:ad:2b:90:38:19:c0:f1:f3:
         94:b3:6a:c5:3f:06:fb:3f:17:ae:46:07:fa:40:1c:b4:41:d6:
         bf:ff:8d:47:cb:9f:3c:fb:10:cf:76:ec:df:d3:a7:07:9e:50:
         61:b3:ab:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDH5aiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU1
YzBmYjBkNTUzMWY5MWRkMDZjMTllZDhmYTAwZjI2ODcxNzZkNTUwHhcNMjMwNTA3
MTQ1ODI5WhcNMjUwNTA4MTQ1ODI5WjAzMTEwLwYDVQQDEyg2NjJjMGNmOGM2OWM5
NjI0YmEyZmM1NDMwMjNlNTI4MjBlMWM0ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnhpF5v8DkkE3rRKuDvnN5i6OhX5OoiryeWwTMg19tPnfbdXP
JcklAhYM3eeUnerEECe34jazbD8rr25yNHKoq6rjNmT5FEzNQXgwCqGyBzHgviUk
Zdz+QpSOBhq98HGyd7NgnQmjQQqvrOSrAKOuYBPq8eZuH+J96WzNYlnibYx/4fqn
K/6nMiiO39rRYIKorXd0MSVUaX6mvGsMGrIHy/2tIPl8rP8cJ6Xw0bL1ZCmwmhoq
nPLaxMnulgmNhg6WnqTAwlMzhjTl4geJXs0QgzW4V99wZqmcLLCCTD7A18/NJnnY
pCg9xkEE113ED5+wkEJFwF0v+tiTy4dC2KSVrQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFMCKl6E2kUM1BwPvCEPqN4Au/NmPMB8GA1UdIwQYMBaAFLqAm/CxEh2RPSAL
T/iLfHGExljjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTVjMGZi
MGQ1NTMxZjkxZGQwNmMxOWVkOGZhMDBmMjY4NzE3NmQ1NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmJiYjRiYmEtOWUwOS00MzVjLWI4YjYtZTcyY2Jh
MGY1MDdkLzY2MmMwY2Y4YzY5Yzk2MjRiYTJmYzU0MzAyM2U1MjgyMGUxYzRlODku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yYmJiNGJiYS05ZTA5LTQzNWMtYjhiNi1lNzJj
YmEwZjUwN2QvNTVjMGZiMGQ1NTMxZjkxZGQwNmMxOWVkOGZhMDBmMjY4NzE3NmQ1
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAC3lVzANBAIAAjAHAwUAKANTIDANBgkqhkiG9w0BAQsFAAOC
AQEAJZjVXpb7q0EFuqyt8w4Q4xuNSNo6CndqOZpwsf1uoN01eEJhNar7uWLBfVtB
ddiJctieN4woIt6sd6M8rc0fJjbedfKjXsq92q3yNoalPDDBj+fa+RXWSJbz1M+g
wOGUnEgD3A/ZOiTZ7ykI4wUQwsGJA7LDcQKByQtiv776msE/iY23i45D89ofqknk
Kw4tqFTJYC6l5gcpSfqLYAsmDhdy4E4j34KuUo42yuxNc7zUXPGwtyGxcy/lYzON
TdsYF8R++fSeev/39gGfbiKa+K0rkDgZwPHzlLNqxT8G+z8XrkYH+kActEHWv/+N
R8ufPPsQz3bs39OnB55QYbOrNA==
-----END CERTIFICATE-----