Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/a5cc442d9bf27ec388b97a6603fdb938bbe712c7.roa
File:                     a5cc442d9bf27ec388b97a6603fdb938bbe712c7.roa (raw, json)
Hash identifier:          hBmc9XM9MKJ4mSiTKbIG2aDZ9CSxP4iithP0CxUeyyY=
Subject key identifier:   F2:27:74:5C:28:4C:EA:3D:5B:FE:90:61:DE:C2:D8:DB:CC:C4:94:07
Certificate issuer:       /CN=62beb9fd789670f1c0912cb57347edb76d8534d3
Certificate serial:       1564B6
Authority key identifier: C5:F1:CE:D4:7E:F4:99:CC:17:CD:B0:C2:CE:13:E4:16:C2:0D:B5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62beb9fd789670f1c0912cb57347edb76d8534d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/a5cc442d9bf27ec388b97a6603fdb938bbe712c7.roa
Signing time:             Thu 23 Mar 2023 20:47:10 +0000
ROA not before:           Wed 22 Mar 2023 20:47:01 +0000
ROA not after:            Sun 23 Mar 2025 20:47:01 +0000
asID:                     267815
IP address blocks:        45.173.72.0/22 maxlen: 24
                          2803:b060::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402038 (0x1564b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beb9fd789670f1c0912cb57347edb76d8534d3
        Validity
            Not Before: Mar 22 20:47:01 2023 GMT
            Not After : Mar 23 20:47:01 2025 GMT
        Subject: CN=a5cc442d9bf27ec388b97a6603fdb938bbe712c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e1:a9:65:e0:3b:3f:2c:f4:49:40:b0:98:5a:
                    9e:3d:0a:59:0f:67:3b:f4:c6:98:3f:85:7e:81:8f:
                    84:d3:24:65:b4:cc:31:13:7b:ab:48:4f:cb:a2:ae:
                    02:09:02:84:02:39:6c:91:96:fa:91:52:d2:8b:b1:
                    46:47:9f:4a:c4:e7:45:b8:c6:e8:45:07:b4:62:7a:
                    e1:9d:3a:1c:d8:3f:66:c2:e9:0b:ac:e7:64:58:13:
                    ba:a3:d0:fc:bd:d0:7e:13:32:d9:12:1b:5b:89:52:
                    e6:f6:18:dd:99:b0:b2:ec:93:2f:f3:37:31:41:c0:
                    13:b1:1f:2b:81:d3:07:74:a5:a6:52:fe:81:db:e7:
                    f9:09:24:6a:8e:2b:08:08:65:79:f2:09:88:d1:f2:
                    62:5b:9b:53:25:12:78:c6:14:bb:67:e2:90:9e:73:
                    91:fe:e0:c6:26:ce:84:c8:fd:49:e7:25:50:15:85:
                    73:18:89:40:33:19:03:1e:1f:74:98:ba:3e:a9:b1:
                    2e:28:55:7a:c3:f7:45:0f:0a:25:72:e2:32:ee:dd:
                    2c:e1:2d:e4:99:0b:5b:56:dd:cb:da:43:ab:fb:b8:
                    58:a3:6f:c0:78:9f:39:a5:0b:91:93:29:f3:8f:3f:
                    21:5a:63:70:a9:3a:24:77:b3:e0:af:8e:91:ab:35:
                    18:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:27:74:5C:28:4C:EA:3D:5B:FE:90:61:DE:C2:D8:DB:CC:C4:94:07
            X509v3 Authority Key Identifier:
                keyid:C5:F1:CE:D4:7E:F4:99:CC:17:CD:B0:C2:CE:13:E4:16:C2:0D:B5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62beb9fd789670f1c0912cb57347edb76d8534d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/a5cc442d9bf27ec388b97a6603fdb938bbe712c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/62beb9fd789670f1c0912cb57347edb76d8534d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.72.0/22
                IPv6:
                  2803:b060::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:77:85:11:6a:36:a7:6c:48:a1:a6:bb:23:c5:49:06:02:8a:
         26:0b:7d:17:5b:5d:a4:2b:33:35:4a:92:5f:c5:a0:ee:b3:47:
         f0:fc:f8:da:55:58:c4:2a:df:25:ed:59:d5:31:a3:a7:6d:40:
         bd:a2:55:7a:e6:ed:f0:42:09:89:84:59:6c:d8:7b:5b:45:12:
         7b:f4:f2:0e:ce:24:5f:01:03:c2:d8:23:ba:92:f5:19:5b:03:
         5e:95:3e:2a:d6:73:ff:7a:6b:b6:b3:75:1c:af:f7:ed:c8:99:
         0c:cc:fa:6e:87:be:7a:62:1c:c1:3b:ec:b8:7d:3f:7c:89:21:
         58:18:f8:1c:9d:22:ef:58:67:2c:6f:4f:fa:51:b2:37:69:d3:
         d0:c6:40:89:2d:4f:ce:db:9a:1b:f6:4b:68:61:47:a1:fd:68:
         c7:3f:e8:fb:0d:0f:38:35:83:2d:96:a9:c4:26:f3:5f:06:65:
         81:5c:4a:96:af:e3:0d:b1:dd:0c:ed:41:0f:6a:2c:54:4a:94:
         bb:a0:01:b3:3d:a3:ba:be:00:97:9b:9d:b5:82:16:f5:d4:53:
         89:49:46:98:ef:ee:e5:6f:aa:9c:f3:ef:bb:d8:1a:9d:7c:5e:
         35:82:53:b9:d3:92:a4:e0:d1:83:ea:73:69:0e:20:30:58:a3:
         b2:1b:d1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----