Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d261e43-19d1-4598-a505-747f8426cd0c/a9260d4de84b830ed5638824d7ba35322a82cb7c.roa
File:                     a9260d4de84b830ed5638824d7ba35322a82cb7c.roa (raw, json)
Hash identifier:          SP++vfiBUutdIGL1BB+LAohd4fUJs0W9VVPv3w7Hhxk=
Subject key identifier:   A1:9B:89:FA:66:2C:87:94:3A:6D:05:B4:E2:F6:B3:20:04:C1:B3:94
Certificate issuer:       /CN=322c2a7938233e28a1844adf95caf7cea372c821
Certificate serial:       0664
Authority key identifier: C8:FF:0F:B7:B6:1B:A9:75:22:7C:40:40:01:18:35:07:BB:CA:E0:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/322c2a7938233e28a1844adf95caf7cea372c821.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d261e43-19d1-4598-a505-747f8426cd0c/a9260d4de84b830ed5638824d7ba35322a82cb7c.roa
Signing time:             Wed 22 Sep 2021 15:57:09 +0000
ROA not before:           Wed 22 Sep 2021 03:00:00 +0000
ROA not after:            Mon 22 Sep 2025 03:00:00 +0000
asID:                     265606
IP address blocks:        45.188.124.0/22 maxlen: 24
                          2806:362::/32 maxlen: 40

Validation:               Failed, certificate revoked on Mon 12 Feb 2024 19:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1636 (0x664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322c2a7938233e28a1844adf95caf7cea372c821
        Validity
            Not Before: Sep 22 03:00:00 2021 GMT
            Not After : Sep 22 03:00:00 2025 GMT
        Subject: CN=a9260d4de84b830ed5638824d7ba35322a82cb7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:87:ec:23:55:a7:35:23:07:f8:40:b7:c0:74:
                    9e:4b:08:f3:cc:fb:76:97:86:c9:8b:1e:17:6d:79:
                    cf:28:f4:30:a5:a8:91:1e:04:f8:02:4c:a8:bc:ec:
                    9a:e5:16:c3:30:22:c9:2c:2c:b7:ad:dd:ee:44:e6:
                    81:65:ab:ad:89:df:3b:f8:43:01:bc:f3:82:6e:0f:
                    3d:08:e5:6a:8e:7c:55:3f:e3:e4:bd:e5:88:2a:ed:
                    28:d5:7d:7e:0e:93:11:ef:a3:34:07:93:a2:b0:87:
                    07:8a:9f:7d:b1:fc:3f:8a:e6:b3:0c:b4:7c:1b:f3:
                    58:a9:1e:08:54:d3:bc:40:fc:f9:42:75:ba:c1:a3:
                    e3:90:3f:7b:b5:d3:d7:eb:2d:54:9a:39:83:82:d5:
                    ed:f3:6a:28:9e:61:c7:ba:63:59:e1:44:b6:c3:7b:
                    42:34:21:fa:ec:33:01:ae:be:8d:e0:37:c3:41:85:
                    fd:44:66:4c:4d:af:37:d2:02:7a:23:b1:63:c9:83:
                    04:41:d4:3c:5b:20:95:5c:be:55:d4:ab:cc:77:ab:
                    47:0d:4f:7a:e1:91:ae:c3:47:01:94:da:18:1a:e2:
                    b8:61:f2:3b:ed:b8:c9:62:f6:da:d8:b3:c5:a3:d6:
                    8e:bf:4d:d6:d6:49:ab:29:e0:cc:b0:c9:5e:c1:29:
                    85:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9B:89:FA:66:2C:87:94:3A:6D:05:B4:E2:F6:B3:20:04:C1:B3:94
            X509v3 Authority Key Identifier:
                keyid:C8:FF:0F:B7:B6:1B:A9:75:22:7C:40:40:01:18:35:07:BB:CA:E0:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/322c2a7938233e28a1844adf95caf7cea372c821.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d261e43-19d1-4598-a505-747f8426cd0c/a9260d4de84b830ed5638824d7ba35322a82cb7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d261e43-19d1-4598-a505-747f8426cd0c/322c2a7938233e28a1844adf95caf7cea372c821.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.124.0/22
                IPv6:
                  2806:362::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:48:c8:fd:64:91:a2:b7:f8:a3:af:1d:db:37:1f:ad:9e:59:
         f2:05:c9:c6:ed:2b:3e:5a:ce:33:fe:da:9a:a0:f9:88:3d:d3:
         1f:bf:2a:96:9a:f9:c0:f3:e6:1c:c5:2d:c3:07:01:a8:2b:13:
         1d:05:7e:8a:8e:f8:c1:a5:42:3a:02:62:d8:04:52:56:e9:9b:
         3d:f6:25:16:ea:28:05:a7:43:3e:04:ae:84:9c:0d:03:0b:4f:
         af:72:e4:91:d4:3c:de:82:8d:d6:e6:b0:5f:08:88:1c:b3:da:
         bd:5d:54:ab:1b:53:73:98:a1:66:b2:e8:1c:30:27:6e:74:da:
         54:4b:f1:20:37:b7:30:f7:41:d4:6e:b9:4e:03:7a:12:32:01:
         fd:b2:f8:60:24:57:39:8e:e9:5f:9f:f0:b1:66:ae:6e:67:42:
         34:07:19:31:b8:5a:05:01:e5:4a:a3:cf:34:14:f9:ab:c6:1e:
         7f:c1:28:d7:b3:1b:a4:a5:c8:ac:27:73:af:71:8c:84:9a:ba:
         32:db:18:63:0a:47:e2:7c:f0:65:18:f6:13:d3:a3:76:e7:85:
         ac:5e:e2:14:9e:63:49:23:06:c2:23:f6:7b:53:08:46:92:ad:
         07:94:b6:83:e1:e8:56:19:8b:32:b5:2f:b1:73:54:3f:a1:4d:
         ac:82:71:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----