Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/000a35b0125d8cb5fa8d178c7d70fec57a5eebcb.roa
File:                     000a35b0125d8cb5fa8d178c7d70fec57a5eebcb.roa (raw, json)
Hash identifier:          Em2qU9guVbbaPI1tjpZVq/taGVMrXDvJbOpLP86q/Ds=
Subject key identifier:   49:26:2C:5C:B8:F8:97:89:82:27:13:F8:40:C6:40:EE:15:B8:D7:5D
Certificate issuer:       /CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
Certificate serial:       1FA26A
Authority key identifier: EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/000a35b0125d8cb5fa8d178c7d70fec57a5eebcb.roa
Signing time:             Mon 17 Apr 2023 07:30:15 +0000
ROA not before:           Sun 16 Apr 2023 07:30:15 +0000
ROA not after:            Thu 17 Apr 2025 07:30:15 +0000
asID:                     266784
IP address blocks:        45.235.120.0/22 maxlen: 24
                          2803:a0::/32 maxlen: 36
                          2803:a0::/35 maxlen: 36
                          2803:a0:2000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073194 (0x1fa26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
        Validity
            Not Before: Apr 16 07:30:15 2023 GMT
            Not After : Apr 17 07:30:15 2025 GMT
        Subject: CN=000a35b0125d8cb5fa8d178c7d70fec57a5eebcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1c:69:8a:66:6c:e0:01:8f:30:0b:a2:53:68:
                    58:98:0c:a9:b8:e0:69:40:19:60:47:7a:87:56:d3:
                    c4:4f:18:39:c6:58:48:93:6e:c3:2a:72:fd:f9:90:
                    a0:be:70:09:33:76:7d:69:30:cf:98:80:7f:46:05:
                    5f:9c:80:63:61:cf:0e:4e:20:0c:83:81:5a:42:d1:
                    04:96:b6:98:4e:c1:45:be:db:97:eb:4f:a4:27:db:
                    80:48:28:df:06:4f:71:81:6e:1c:6b:cf:ec:53:69:
                    4b:69:be:a8:e8:38:aa:96:21:64:f1:aa:2c:ce:6a:
                    32:73:64:c5:31:47:a4:31:33:de:bb:60:86:2a:33:
                    0f:5c:27:65:3c:ca:4a:85:7e:a4:0d:d0:bf:91:52:
                    bf:20:71:79:3e:18:fd:5a:f0:15:61:7d:66:ac:0c:
                    cd:53:30:f2:ea:7d:b2:79:1c:04:3f:2e:c4:da:e1:
                    9a:a2:1c:ea:1a:18:9f:0c:b3:25:9c:2a:7e:7e:05:
                    35:b0:78:f6:f2:d6:87:03:d2:bf:9b:47:bc:00:19:
                    f5:4c:9c:39:e7:35:fd:44:d8:25:30:93:65:f8:bc:
                    27:7b:f0:f7:4b:08:74:5e:f2:d3:1f:8c:78:5f:1d:
                    90:db:76:d8:9a:6a:d5:0f:c9:02:fc:1a:c2:50:5d:
                    58:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:26:2C:5C:B8:F8:97:89:82:27:13:F8:40:C6:40:EE:15:B8:D7:5D
            X509v3 Authority Key Identifier:
                keyid:EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/000a35b0125d8cb5fa8d178c7d70fec57a5eebcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.120.0/22
                IPv6:
                  2803:a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:a6:ab:98:7f:8b:f6:90:2c:5e:4b:eb:f3:cb:d3:7b:3d:3f:
         44:86:9b:55:4f:d1:da:7a:12:86:fe:e9:25:4d:86:67:c0:30:
         7c:ed:35:67:b4:0d:52:4f:28:13:a1:93:f7:51:7f:b1:1b:79:
         10:a4:77:8c:8a:a5:44:11:43:ef:89:c1:c6:7a:a0:ac:67:ac:
         86:b1:7b:96:3b:86:72:22:47:08:6e:1b:39:cd:8d:24:bd:ba:
         fe:3b:d7:16:f6:9e:78:cc:7b:84:d1:41:e9:15:55:0f:c1:e0:
         e3:05:ca:d6:d6:bd:0b:46:73:8e:aa:cf:00:a0:33:4b:92:e7:
         41:8c:5e:9a:63:5f:39:0e:eb:e6:3f:04:34:c2:df:6a:3f:23:
         77:7c:77:e0:43:d6:bd:37:8f:39:48:93:cd:c5:cc:f9:b9:22:
         21:da:2f:20:3a:3e:0f:7d:31:90:8c:87:92:c1:54:cd:bc:8a:
         d8:5e:32:54:aa:81:15:d1:51:69:3f:51:e9:3d:dc:8e:ed:65:
         a0:f4:94:3a:8b:fe:d7:18:9d:7d:34:8e:b3:3b:50:bf:17:7b:
         0a:53:a6:9a:68:20:0a:4b:ba:44:4c:96:4e:c3:e7:d4:0e:65:
         dc:51:1f:f4:0c:10:4d:2e:0a:15:99:5b:a2:ea:91:30:ba:72:
         59:47:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----