Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/3b39b89236d320b2fd12f7cea7818c96648b7832.roa
File:                     3b39b89236d320b2fd12f7cea7818c96648b7832.roa (raw, json)
Hash identifier:          /gszrkhKnfkPO/aN94cYKOBsxr3zhZP9P8QV61YoxfA=
Subject key identifier:   C9:B2:72:E6:D1:03:E9:6D:8D:48:56:6F:95:4F:47:E9:F1:A6:13:BC
Certificate issuer:       /CN=9bec122f444854416c46c5b459d8853cc0cb2e76
Certificate serial:       241B4A
Authority key identifier: 00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/3b39b89236d320b2fd12f7cea7818c96648b7832.roa
Signing time:             Tue 24 Oct 2023 07:30:04 +0000
ROA not before:           Tue 24 Oct 2023 07:30:04 +0000
ROA not after:            Thu 23 Oct 2025 07:30:04 +0000
asID:                     266809
IP address blocks:        45.236.28.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2366282 (0x241b4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bec122f444854416c46c5b459d8853cc0cb2e76
        Validity
            Not Before: Oct 24 07:30:04 2023 GMT
            Not After : Oct 23 07:30:04 2025 GMT
        Subject: CN=3b39b89236d320b2fd12f7cea7818c96648b7832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2a:47:e0:a9:56:a3:13:a1:fd:db:bd:ae:cc:
                    3f:16:16:a5:9b:1f:e3:8f:28:c7:43:75:e0:2f:cb:
                    97:78:07:36:49:5a:bd:20:e2:f1:cd:de:a9:dc:ee:
                    41:3a:3a:97:6b:2c:58:0e:0e:c3:9e:79:85:7a:dc:
                    7a:01:bd:64:22:39:9d:b5:14:68:80:56:fe:ab:c3:
                    54:39:2f:ad:e9:a8:c1:48:06:68:67:40:23:3b:0b:
                    7a:6f:5c:7e:09:eb:51:30:7a:88:20:e4:d4:08:bc:
                    98:6c:86:7b:18:2d:65:af:62:7c:67:57:d6:a2:96:
                    52:37:02:a6:26:56:15:a7:84:47:f2:f9:38:4b:90:
                    10:bb:f2:12:fd:41:fc:23:e1:8e:bf:75:18:65:04:
                    9e:ff:1c:98:37:04:b9:a5:d7:c1:b4:d6:40:d4:79:
                    56:d0:71:81:9b:ba:67:92:63:56:c3:55:83:7d:bb:
                    b9:f3:c6:d8:9e:42:23:e3:a1:85:39:af:9e:42:84:
                    ca:a7:ff:9c:a4:1d:96:f1:41:3e:aa:6a:c5:97:9b:
                    87:7a:8d:72:5d:6c:ab:be:2f:19:03:dc:7b:51:e1:
                    a8:59:96:85:de:99:e0:ac:93:c0:b2:1f:b0:9a:fa:
                    61:d4:6d:3d:23:8a:5c:04:ba:7f:8b:d0:20:56:99:
                    df:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B2:72:E6:D1:03:E9:6D:8D:48:56:6F:95:4F:47:E9:F1:A6:13:BC
            X509v3 Authority Key Identifier:
                keyid:00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/3b39b89236d320b2fd12f7cea7818c96648b7832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/9bec122f444854416c46c5b459d8853cc0cb2e76.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:45:15:b1:d6:2c:e2:c0:72:6b:ba:f3:0a:d7:58:f0:48:5c:
         fa:4c:3c:50:ce:7a:a1:80:8d:c1:94:3e:5b:b9:50:90:95:e9:
         3d:c7:a0:d5:e1:5d:e2:14:de:68:b4:55:a3:db:06:28:53:6c:
         52:69:ed:fc:23:d3:66:b5:59:0b:68:57:d7:5b:6c:a7:0d:27:
         3f:6d:59:12:87:c5:d7:3e:74:29:53:3a:54:c9:e9:44:21:5b:
         8f:0a:8e:27:f4:a6:8a:34:5a:01:c8:76:09:35:75:bb:0b:0c:
         22:40:f8:3f:bc:dc:fb:14:d8:ef:ab:2c:77:a4:52:c0:25:9c:
         fb:99:e1:c1:23:1f:26:b7:96:7f:d6:41:ae:a9:60:73:02:e9:
         e6:ff:a7:99:37:37:1b:38:68:89:3d:1c:dd:22:4c:6d:50:9a:
         f6:0f:aa:cb:be:c3:9b:cf:e6:07:ad:a3:20:96:f2:cd:79:46:
         bd:00:f5:0d:88:26:d8:d7:f8:b3:b0:df:94:76:e8:a6:3c:c0:
         42:75:ba:4f:e0:bc:45:73:0e:20:a9:d9:a8:10:af:22:d7:ab:
         c6:9d:75:53:b6:c7:ad:ad:0a:7d:04:db:e4:6d:83:79:20:4e:
         d5:7e:3c:ec:a2:81:90:51:5f:bd:60:97:2e:5d:3f:a9:fd:0b:
         94:5e:81:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----