Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/496898008af9cee96e72821b0db5d179339146b2.roa
File:                     496898008af9cee96e72821b0db5d179339146b2.roa (raw, json)
Hash identifier:          5Hy4efGXDzstwHZtJclJ+9HqeW6N8rQWWdjvyWHb8/0=
Subject key identifier:   91:21:5D:F0:A4:B4:01:F7:A7:52:85:C3:F0:15:76:56:02:B4:34:11
Certificate issuer:       /CN=a072744812c9d37a960b2eaee018f541354a6d6b
Certificate serial:       0C52E0
Authority key identifier: 13:12:6F:A0:D7:42:92:D4:67:DC:18:AA:43:D7:8A:ED:22:D6:E6:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a072744812c9d37a960b2eaee018f541354a6d6b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/496898008af9cee96e72821b0db5d179339146b2.roa
Signing time:             Wed 24 Mar 2021 14:38:13 +0000
ROA not before:           Wed 24 Mar 2021 14:38:13 +0000
ROA not after:            Tue 24 Mar 2026 14:38:13 +0000
asID:                     52471
IP address blocks:        45.169.192.0/22 maxlen: 24
                          2803:33a0::/32 maxlen: 64

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 21:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 807648 (0xc52e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a072744812c9d37a960b2eaee018f541354a6d6b
        Validity
            Not Before: Mar 24 14:38:13 2021 GMT
            Not After : Mar 24 14:38:13 2026 GMT
        Subject: CN=496898008af9cee96e72821b0db5d179339146b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b4:7a:8e:8e:e8:00:ad:55:b2:d6:1a:ae:32:
                    9c:f2:19:42:a7:2f:49:29:b0:66:12:35:e0:4e:f3:
                    57:21:f2:87:09:57:88:ac:67:77:4b:8f:da:00:0b:
                    0b:9a:e7:8e:86:8b:55:8e:f1:93:10:8d:a9:94:cb:
                    fc:97:6f:b1:58:63:79:ec:76:c1:55:56:f0:68:37:
                    95:e9:ff:dd:94:b0:a2:5b:43:b1:22:3b:a8:72:96:
                    de:26:de:c1:a0:83:29:6f:72:70:df:1e:78:a4:fd:
                    02:47:3d:2f:3c:ba:89:8f:83:97:2c:07:b9:5b:ae:
                    99:ac:f7:de:7b:f8:1c:95:39:53:3f:4b:6b:52:b0:
                    76:ff:2c:21:3f:0c:e9:72:5b:54:40:7b:87:e9:a4:
                    fd:6f:46:11:32:26:10:66:3d:dc:e0:d8:27:e1:8d:
                    55:9c:bb:b0:93:dd:cc:25:7e:7c:12:29:3c:88:40:
                    63:45:99:f3:f7:96:14:07:3d:20:cf:3f:30:4c:85:
                    3a:d4:c1:80:c5:89:f6:89:14:da:34:cc:f7:b6:f9:
                    82:45:ec:e6:97:c0:ab:87:65:8d:41:d2:a6:ac:1e:
                    e1:94:2c:b8:c0:3d:0f:97:32:13:4e:df:43:51:c6:
                    93:41:26:ad:8b:fb:eb:1d:ce:a7:e9:c3:56:b9:86:
                    d6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:21:5D:F0:A4:B4:01:F7:A7:52:85:C3:F0:15:76:56:02:B4:34:11
            X509v3 Authority Key Identifier:
                keyid:13:12:6F:A0:D7:42:92:D4:67:DC:18:AA:43:D7:8A:ED:22:D6:E6:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a072744812c9d37a960b2eaee018f541354a6d6b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/496898008af9cee96e72821b0db5d179339146b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/a072744812c9d37a960b2eaee018f541354a6d6b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.192.0/22
                IPv6:
                  2803:33a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:74:9c:ad:7c:0d:95:1a:a2:5d:59:98:a8:59:4b:90:90:3a:
         e7:3f:d1:93:33:a8:f8:02:c8:93:8c:79:0b:08:6e:47:a3:4e:
         61:5d:cb:44:f6:74:47:d4:a9:94:ff:c7:12:16:48:1a:f0:93:
         52:47:87:bb:d0:fa:97:15:8b:52:f0:70:e9:a0:18:fb:e5:26:
         e9:04:eb:c0:7b:94:76:0d:70:33:41:e5:31:a5:77:4e:49:8c:
         82:82:ae:86:99:da:6d:9b:ed:4c:15:52:7b:94:fc:c5:83:c3:
         80:28:05:3f:2c:25:9e:c4:33:61:98:9e:a1:8f:88:d1:6f:b4:
         7c:6d:b5:2b:0f:84:a7:21:9c:3b:11:b8:e0:f0:48:89:c9:ab:
         72:c6:e7:1b:b0:19:15:b0:16:7e:71:cb:4a:32:a6:18:23:0c:
         23:6c:26:ae:2a:d8:88:ee:6b:88:6e:f0:dc:8c:12:9a:40:7d:
         e6:42:ba:97:88:af:4d:8a:a0:13:4d:c9:ea:f8:d5:d9:61:c8:
         89:ea:31:f1:c2:cf:20:ef:6d:4c:ea:44:e9:88:c5:a4:52:ae:
         84:74:5b:15:69:b9:3b:c5:d7:1d:55:8e:b3:43:ad:b7:87:9d:
         eb:23:5d:4c:c1:af:80:44:1f:5e:49:0a:d4:c1:b5:4c:9e:21:
         55:24:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----