Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/4b193f750e69646a60837c7f246407aee19c452b.roa
File:                     4b193f750e69646a60837c7f246407aee19c452b.roa (raw, json)
Hash identifier:          rEI96Ip3NRCDD3DTLkQWy0kTApV2ylJI7g/She3+7z0=
Subject key identifier:   45:18:76:91:AF:74:26:B2:6C:8A:81:50:0D:C4:F5:E3:30:5B:64:FD
Certificate issuer:       /CN=36a6485e1a54ec808a146215bd1372815d55a3ec
Certificate serial:       146291
Authority key identifier: 37:0E:68:AA:D5:F5:C9:33:82:6E:A8:F4:FE:7D:2A:48:01:8F:D0:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36a6485e1a54ec808a146215bd1372815d55a3ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/4b193f750e69646a60837c7f246407aee19c452b.roa
Signing time:             Mon 08 Jan 2024 16:32:00 +0000
ROA not before:           Mon 08 Jan 2024 16:32:00 +0000
ROA not after:            Mon 08 Jan 2029 16:32:00 +0000
asID:                     27884
IP address blocks:        45.226.59.0/24 maxlen: 24
                          2803:910::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 08 Jan 2024 20:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1335953 (0x146291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36a6485e1a54ec808a146215bd1372815d55a3ec
        Validity
            Not Before: Jan  8 16:32:00 2024 GMT
            Not After : Jan  8 16:32:00 2029 GMT
        Subject: CN=4b193f750e69646a60837c7f246407aee19c452b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9a:c6:74:57:bb:b8:d2:11:13:87:9f:4d:10:
                    1a:7f:7e:16:78:6b:ed:f4:04:5f:2f:ff:66:54:26:
                    e9:25:47:a5:d9:89:26:c0:5d:35:65:7d:2a:17:42:
                    1f:06:a9:92:cf:d2:25:20:7a:f2:23:be:95:ff:30:
                    3e:e5:80:12:c5:47:95:0b:67:95:54:6b:0f:c7:7a:
                    74:3a:7d:12:4d:45:79:49:c6:fb:d6:6b:90:a5:90:
                    49:7a:e9:0c:3f:fc:e3:b4:de:6b:f2:3f:c6:04:df:
                    46:0e:13:3f:96:6c:bb:5f:d8:3b:53:79:81:82:28:
                    a1:35:17:87:93:02:ea:76:84:f9:ec:ca:c1:5b:87:
                    5b:7f:67:6d:0b:6a:5e:93:8d:96:58:d6:ff:86:18:
                    fc:2d:63:98:2f:9d:a3:1f:ac:fa:5d:17:c6:41:b2:
                    93:9e:61:f7:6e:06:0b:8b:83:db:d9:ee:3a:d8:0f:
                    f3:3b:63:32:3d:31:d3:7b:13:65:46:00:8d:84:8a:
                    d2:89:15:95:cc:b2:77:76:46:b5:a1:08:e3:15:92:
                    93:b7:02:70:75:82:3c:f1:5e:4d:fa:af:9e:dc:6a:
                    4d:92:0e:d5:4d:50:af:1b:f2:2e:61:df:09:f0:6f:
                    61:b2:2c:b0:2d:40:95:87:ae:af:a3:4e:7c:82:43:
                    8d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:18:76:91:AF:74:26:B2:6C:8A:81:50:0D:C4:F5:E3:30:5B:64:FD
            X509v3 Authority Key Identifier:
                keyid:37:0E:68:AA:D5:F5:C9:33:82:6E:A8:F4:FE:7D:2A:48:01:8F:D0:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36a6485e1a54ec808a146215bd1372815d55a3ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/4b193f750e69646a60837c7f246407aee19c452b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/36a6485e1a54ec808a146215bd1372815d55a3ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.59.0/24
                IPv6:
                  2803:910::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:ab:2a:72:3a:48:a0:a2:8a:11:48:9c:df:2c:43:c1:9a:a9:
         cc:ac:8e:19:16:12:36:3a:fd:7e:36:ed:d1:c3:14:ce:11:b3:
         48:23:4c:d3:8a:04:ae:cd:f2:a6:e9:11:67:63:7d:c1:2d:26:
         16:66:c1:06:45:50:6d:6f:af:c9:6f:95:7a:d5:7c:75:33:20:
         8a:ba:da:e0:d6:05:9c:e8:e6:0d:38:81:f7:b5:f6:56:20:f0:
         7d:af:13:db:c1:d1:f5:03:20:eb:7c:b3:32:23:22:6d:3c:6e:
         76:05:bb:e8:d8:b3:a0:c9:14:34:a4:96:41:eb:af:48:99:89:
         af:c5:a1:ca:91:66:e8:68:9b:d7:66:88:6e:8c:35:13:6f:eb:
         20:90:d0:4a:4d:9e:02:a5:dc:68:6e:30:11:da:ab:f2:8a:8e:
         06:af:6d:97:4f:ec:a2:a4:b9:87:ce:88:30:3b:f0:a6:51:21:
         9e:a2:ef:eb:40:98:f3:51:b9:18:e6:29:94:2e:93:45:77:14:
         a9:9b:6d:ce:6f:43:db:2c:4a:17:c4:3d:32:54:1b:10:ce:5d:
         29:8a:ef:2d:3c:ae:f6:91:92:02:02:77:6a:5b:9d:44:01:de:
         68:85:b6:30:91:a1:7e:42:ce:67:96:45:f7:30:01:5f:ea:90:
         3f:ca:e2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----