Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/e1b56159d17c9bca98c5e6663b175cf244cedf04.roa
File:                     e1b56159d17c9bca98c5e6663b175cf244cedf04.roa (raw, json)
Hash identifier:          8k+drHtzfncaza6sdW2BfpOdpIPYVnvzAfFl5/JBJrI=
Subject key identifier:   53:9D:59:79:C3:A0:7D:30:AA:E5:54:F2:DE:80:58:F6:BA:21:E6:4A
Certificate issuer:       /CN=239ac677d20da31c1af262c7528bd5cc25d5e101
Certificate serial:       182505
Authority key identifier: BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/e1b56159d17c9bca98c5e6663b175cf244cedf04.roa
Signing time:             Wed 13 Jul 2022 14:56:59 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265862
IP address blocks:        45.224.188.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1582341 (0x182505)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239ac677d20da31c1af262c7528bd5cc25d5e101
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=e1b56159d17c9bca98c5e6663b175cf244cedf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fd:d1:ac:21:0d:87:a6:f6:bd:ef:eb:eb:48:
                    f8:a4:e1:76:b3:62:d0:8b:d8:a7:bf:c5:c8:f1:4b:
                    b7:d9:b3:2a:c4:1d:75:64:ad:6b:57:80:3d:75:e1:
                    8d:4e:9a:33:0b:fd:43:31:dc:29:f1:02:26:c8:90:
                    0f:b2:20:b0:de:21:c4:7c:78:53:29:87:4f:27:69:
                    6b:7e:47:ed:68:aa:8d:34:b2:e2:10:e0:7a:63:c3:
                    65:f7:28:78:f1:c1:ea:2b:23:5d:27:eb:01:33:e8:
                    cf:00:da:09:0d:cc:4d:e4:e0:e9:53:b8:d1:33:3a:
                    cf:45:48:97:95:bb:c9:48:bc:f9:2a:30:9c:fd:87:
                    48:b7:63:e3:6d:ea:2c:e6:33:a7:25:3f:36:73:b2:
                    19:30:01:40:a8:82:98:73:74:12:fa:fe:bd:b2:60:
                    57:34:d6:2b:66:64:9f:9e:32:30:7a:14:2a:74:45:
                    19:76:e8:bf:3b:ef:86:f7:e9:0a:b4:54:c9:8f:f8:
                    0f:56:0d:27:76:99:4a:d8:ed:75:bc:4b:a7:3f:56:
                    c7:70:fb:83:06:ff:2a:4e:83:65:a0:62:8e:fd:4c:
                    56:da:fb:ef:4e:dc:7f:b0:7e:f1:6c:3e:73:4f:83:
                    a8:ff:a8:38:13:ef:c5:77:04:bf:24:8c:3a:0a:00:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9D:59:79:C3:A0:7D:30:AA:E5:54:F2:DE:80:58:F6:BA:21:E6:4A
            X509v3 Authority Key Identifier:
                keyid:BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/e1b56159d17c9bca98c5e6663b175cf244cedf04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/239ac677d20da31c1af262c7528bd5cc25d5e101.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:6f:93:25:18:5a:59:08:38:86:7d:c9:9c:b8:6f:82:8e:f7:
         da:88:17:24:8a:8f:2b:20:0a:ec:88:88:c5:94:1a:2b:b1:02:
         ba:90:dd:6d:dc:d5:91:ee:a3:6e:f3:96:eb:ee:a5:fb:b8:02:
         6b:89:35:26:0e:d8:83:24:2d:9e:2b:cf:1b:84:79:ce:13:4f:
         bb:9e:de:c4:02:6d:73:40:23:57:fb:df:0c:b2:33:1f:15:23:
         72:74:be:a8:79:34:00:c7:f3:e6:f2:57:c0:6c:57:7f:df:0e:
         65:80:03:df:8d:39:f4:ed:cc:0d:f5:86:2b:b0:c2:51:86:6c:
         bd:4b:92:4a:79:b6:77:17:35:1b:7b:40:ac:a8:79:de:12:c7:
         52:65:5f:91:6d:14:ad:d6:b1:76:ed:cb:15:cc:be:d2:49:de:
         11:93:3c:29:d7:5d:ab:dc:0f:5c:7a:5b:72:bf:f7:92:34:1f:
         18:f2:86:98:23:3d:87:60:97:b2:b9:45:7c:8b:ba:3f:f3:39:
         88:1a:79:26:7c:ca:58:0a:02:90:11:5a:d8:27:39:88:4f:e8:
         4f:9b:fa:45:3d:9e:b9:12:8b:5b:2d:01:fd:40:8b:e4:26:04:
         19:02:40:25:bc:45:36:29:d2:0d:37:75:43:99:d8:af:7f:a2:
         8b:ce:54:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----