Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/1d0acd8e25dd28b8f8c08183615ee4e2373ad484.roa
File:                     1d0acd8e25dd28b8f8c08183615ee4e2373ad484.roa (raw, json)
Hash identifier:          LYhGD8+1llxfX4i6FoHNp9E3IhJ7x+4o4EjPVHu587Q=
Subject key identifier:   D2:BA:B6:C0:EC:2C:51:D1:D9:40:A2:3A:3C:E0:8D:C9:EF:19:AA:F6
Certificate issuer:       /CN=239ac677d20da31c1af262c7528bd5cc25d5e101
Certificate serial:       183330
Authority key identifier: BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/1d0acd8e25dd28b8f8c08183615ee4e2373ad484.roa
Signing time:             Wed 13 Jul 2022 14:57:24 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265862
IP address blocks:        45.224.188.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585968 (0x183330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239ac677d20da31c1af262c7528bd5cc25d5e101
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=1d0acd8e25dd28b8f8c08183615ee4e2373ad484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:c7:77:c6:80:dc:a9:b1:14:b7:31:78:d7:
                    e0:e9:1d:fc:9f:45:a1:20:f2:2f:e9:b6:f9:86:20:
                    94:66:a5:cb:82:85:15:fe:31:04:bc:e0:56:e1:49:
                    75:96:1e:14:ec:83:e0:3e:2a:10:a1:ba:19:2f:ab:
                    ab:5b:9c:06:98:0e:9f:c8:f0:15:b1:d8:47:58:7e:
                    1f:a2:36:a7:d0:96:a2:ac:a0:69:59:dc:bf:bb:e4:
                    03:d4:c3:45:c0:fe:28:f2:f5:65:e3:4c:ec:26:8d:
                    e5:f2:6d:3e:21:20:2c:fd:be:a6:c1:66:b1:e4:ee:
                    eb:be:3f:00:a3:5b:80:68:25:ea:42:db:19:24:8d:
                    ec:9a:c0:11:84:b7:9d:17:bf:c2:85:51:b4:5c:6d:
                    de:bf:e4:df:73:a4:69:bf:f1:22:63:e6:42:73:44:
                    71:24:69:e7:f7:73:f9:90:c1:45:ae:9d:bd:d9:f6:
                    80:56:1b:b8:de:b7:9b:0f:3a:7f:a2:4b:00:e8:8f:
                    86:e1:b7:46:f9:43:63:96:b2:38:78:cf:c2:f4:5f:
                    bf:4f:8b:ee:43:10:4f:95:89:7e:75:1c:b5:e4:46:
                    f0:f6:57:3e:de:d0:e7:7d:71:59:2c:c8:d2:df:c9:
                    2f:fa:a2:77:5f:9a:b1:fa:2b:67:05:cb:07:17:a6:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BA:B6:C0:EC:2C:51:D1:D9:40:A2:3A:3C:E0:8D:C9:EF:19:AA:F6
            X509v3 Authority Key Identifier:
                keyid:BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/1d0acd8e25dd28b8f8c08183615ee4e2373ad484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/239ac677d20da31c1af262c7528bd5cc25d5e101.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:76:b2:eb:96:f4:b8:b4:71:3b:98:2a:a9:0f:ba:45:1e:02:
         87:c0:84:7d:40:ca:7d:f8:2d:a3:99:b1:c1:7f:60:c3:e7:4b:
         ed:c4:e8:93:e8:c0:3b:e6:e7:ec:07:e7:08:d6:8a:6b:24:cb:
         d6:00:70:fb:15:e4:de:13:8b:04:45:fe:57:a8:1c:cc:7f:b4:
         69:88:ac:cf:d6:e1:a6:5b:33:a3:18:71:99:7e:e1:76:85:a7:
         97:88:42:21:66:03:96:8b:e8:3e:82:9f:ba:a7:36:aa:df:a3:
         5c:db:f8:9c:3b:67:b4:15:85:3b:74:c8:67:e1:94:a7:bb:79:
         7d:e1:ff:6e:a1:7f:7c:5a:82:8d:38:19:ce:0e:e5:ec:28:9c:
         77:4a:bb:a0:99:6d:07:49:2a:05:e6:2d:67:9c:30:b7:c8:0b:
         f3:1c:04:24:55:8f:a2:f7:31:6b:be:ec:1a:1e:8f:b2:d4:e0:
         cc:f3:a1:e7:a9:d8:d7:fe:45:3d:54:f0:d7:2d:4e:05:f2:40:
         aa:a6:58:a9:75:f5:c4:c5:a7:51:3e:46:13:1c:07:43:45:e4:
         23:66:40:4c:44:44:29:fd:f3:ff:d2:2d:e1:34:29:c4:f1:6f:
         d5:c3:e2:e6:57:f5:9c:28:aa:71:0f:a4:66:13:21:23:e9:f0:
         8f:d0:6c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----