Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/7e4aa620795734a9b343abef14526f6ae9a106f7.roa
File:                     7e4aa620795734a9b343abef14526f6ae9a106f7.roa (raw, json)
Hash identifier:          TTFhWbhwf6t4sVJdLEfF0zec0TXvfB2wLfPeTEP5m0g=
Subject key identifier:   3B:AC:36:4C:E4:D1:42:1C:59:6E:A0:4C:70:CC:61:10:63:5B:3E:D1
Certificate issuer:       /CN=d6c012e30dc831b6875f6cfcb5639d3f391769b7
Certificate serial:       1F1F8A
Authority key identifier: A2:0A:0E:B5:5E:9B:EA:B8:C3:64:EC:92:FE:56:D1:1E:5A:67:14:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6c012e30dc831b6875f6cfcb5639d3f391769b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/7e4aa620795734a9b343abef14526f6ae9a106f7.roa
Signing time:             Sat 10 Jun 2023 04:12:15 +0000
ROA not before:           Fri 09 Jun 2023 04:12:15 +0000
ROA not after:            Tue 10 Jun 2025 04:12:15 +0000
asID:                     269783
IP address blocks:        45.184.108.0/22 maxlen: 23
                          2803:a360::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2039690 (0x1f1f8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c012e30dc831b6875f6cfcb5639d3f391769b7
        Validity
            Not Before: Jun  9 04:12:15 2023 GMT
            Not After : Jun 10 04:12:15 2025 GMT
        Subject: CN=7e4aa620795734a9b343abef14526f6ae9a106f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:56:78:3c:2a:de:b0:fc:97:70:94:5e:76:81:
                    36:e2:41:4a:f6:c1:c4:90:b8:af:c4:c8:11:be:4e:
                    9c:2b:b3:dd:e7:d4:60:8b:0a:e2:f3:ea:69:61:d2:
                    4e:07:8c:76:18:60:f8:9b:df:c7:2a:99:11:e4:c1:
                    28:18:3e:50:42:3b:3c:13:80:a5:76:7b:76:37:f0:
                    69:ce:8b:7a:8b:47:22:02:d2:d9:17:5f:c6:e2:67:
                    f6:47:6c:b3:51:88:3c:43:98:8b:3f:1d:75:c1:67:
                    65:2a:04:ff:63:92:3a:7f:ea:48:51:3c:9b:93:15:
                    70:8b:5d:02:27:94:2c:54:50:f6:c0:59:60:15:2a:
                    e5:88:3b:fc:50:cd:73:ce:56:21:f5:8f:d3:b5:a2:
                    38:5a:f4:64:9c:00:f8:89:68:f4:bf:07:af:d8:e2:
                    04:ed:2d:19:58:9a:cf:5a:3a:b0:73:27:a8:b7:d5:
                    2b:3d:85:53:f5:b2:b0:af:f2:87:f2:7d:03:a9:b5:
                    b6:bf:bb:b4:fc:da:c4:28:10:1f:88:34:04:60:bd:
                    d0:10:20:0b:88:e0:28:c5:7d:d2:51:72:33:3b:23:
                    00:27:a9:64:ca:2f:d2:3c:91:b3:3e:7c:29:ef:4d:
                    72:98:07:c1:f0:db:96:a0:a1:f7:fb:55:5d:58:da:
                    ca:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AC:36:4C:E4:D1:42:1C:59:6E:A0:4C:70:CC:61:10:63:5B:3E:D1
            X509v3 Authority Key Identifier:
                keyid:A2:0A:0E:B5:5E:9B:EA:B8:C3:64:EC:92:FE:56:D1:1E:5A:67:14:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6c012e30dc831b6875f6cfcb5639d3f391769b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/7e4aa620795734a9b343abef14526f6ae9a106f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/d6c012e30dc831b6875f6cfcb5639d3f391769b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.108.0/22
                IPv6:
                  2803:a360::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:61:fd:2a:86:ec:80:6f:45:bc:04:9c:b7:41:ba:2e:b7:d6:
         9e:8c:5e:b6:4b:c9:96:c2:ff:7d:fd:7f:f9:e2:54:37:03:cb:
         f9:26:76:ca:a5:d0:24:47:d5:72:d6:aa:3c:d4:00:60:3b:d3:
         46:cd:c3:f6:ab:5b:39:86:71:eb:b5:c7:f7:e1:2d:70:f0:eb:
         bd:a8:55:8c:1a:16:ce:0a:dc:28:ce:0c:5e:2f:a6:6a:68:f0:
         d9:b8:4d:fc:32:64:bd:e1:a6:44:f7:e7:f7:51:e6:d3:2c:ae:
         42:a4:e4:6c:3b:19:71:fa:6b:4a:42:16:50:ed:bd:fa:71:df:
         65:15:d8:72:c1:5c:6c:f6:5f:54:16:d2:f2:c1:c5:a5:71:74:
         9c:55:21:66:82:fc:32:95:67:40:0f:cc:33:b3:58:3d:2c:d6:
         bb:2c:09:81:e9:12:f2:1e:d3:04:92:64:84:a4:63:7f:1e:ea:
         97:62:de:14:7a:a2:d9:57:bd:60:d2:43:5c:f6:c4:6f:ec:c0:
         cd:27:fa:28:56:21:79:f2:aa:4e:be:88:ff:c3:bd:72:16:2b:
         1e:43:27:95:07:b4:75:1d:f0:38:62:03:c5:3a:8d:32:c5:42:
         0f:a5:af:a3:86:7b:72:9f:18:5c:fa:5a:f9:1a:14:d4:b7:2c:
         b8:90:3d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----