Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/58b30517d10c81304ad1496ff29db595a555052a.roa
File:                     58b30517d10c81304ad1496ff29db595a555052a.roa (raw, json)
Hash identifier:          5Ae5kQjZMAZQQlMd4naVL1mG4s4h8/r1usTlRaMUZJ0=
Subject key identifier:   B1:3E:DD:7B:A9:C1:5E:4D:76:17:D9:09:E3:9F:60:A7:E6:12:BC:E1
Certificate issuer:       /CN=9bec122f444854416c46c5b459d8853cc0cb2e76
Certificate serial:       241E1E
Authority key identifier: 00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/58b30517d10c81304ad1496ff29db595a555052a.roa
Signing time:             Tue 24 Oct 2023 07:30:06 +0000
ROA not before:           Tue 24 Oct 2023 07:30:05 +0000
ROA not after:            Thu 23 Oct 2025 07:30:05 +0000
asID:                     266809
IP address blocks:        45.236.28.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2367006 (0x241e1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bec122f444854416c46c5b459d8853cc0cb2e76
        Validity
            Not Before: Oct 24 07:30:05 2023 GMT
            Not After : Oct 23 07:30:05 2025 GMT
        Subject: CN=58b30517d10c81304ad1496ff29db595a555052a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:df:c3:e4:85:a1:ce:25:61:1c:72:c4:4f:61:
                    02:e2:fc:2c:66:3b:60:77:d0:eb:80:ce:28:5d:1a:
                    3f:32:35:a6:8d:25:a5:4e:34:d5:4a:41:38:6d:d6:
                    50:47:75:b4:e3:6a:72:49:2c:f0:a0:16:41:2d:72:
                    6c:4e:8e:79:18:75:53:6b:97:c3:cf:84:1c:d0:9c:
                    55:d0:5a:d5:f6:73:86:80:47:84:23:b7:ac:c6:6c:
                    88:c0:53:32:0e:c1:51:39:13:7c:4b:55:36:8d:d1:
                    80:00:7e:45:d8:5e:b1:af:b2:a9:c0:91:f0:83:04:
                    7d:fb:d9:17:d5:20:36:f4:72:fc:e2:0a:04:3e:be:
                    ba:e2:cd:1e:f7:8c:8b:be:bd:e5:8d:10:23:62:9c:
                    76:48:24:1d:69:26:37:8a:2a:9a:18:2e:08:82:a0:
                    9c:06:32:29:fd:e4:4e:77:71:fc:1e:d1:f8:ad:38:
                    dd:65:54:1d:be:f3:79:76:dc:30:2f:53:5d:88:cb:
                    12:5d:63:62:d4:ae:a5:08:63:40:5f:22:84:ea:bb:
                    d5:8c:e1:40:57:22:ab:df:29:77:42:4c:59:20:5b:
                    d5:4b:06:e8:e6:56:87:47:ef:0c:b8:32:f1:32:18:
                    a4:3e:c3:f8:da:f6:ce:d0:46:62:a7:3b:83:76:45:
                    6d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3E:DD:7B:A9:C1:5E:4D:76:17:D9:09:E3:9F:60:A7:E6:12:BC:E1
            X509v3 Authority Key Identifier:
                keyid:00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/58b30517d10c81304ad1496ff29db595a555052a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/9bec122f444854416c46c5b459d8853cc0cb2e76.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:c0:82:42:83:46:93:91:23:bb:51:9e:41:89:d3:b0:b2:33:
         d0:7b:04:a0:0a:8d:74:84:41:3f:11:c5:b4:2e:67:a0:f5:08:
         97:a8:6f:bf:1e:d6:a2:48:7a:bc:1a:f3:bc:88:a4:c8:c9:91:
         02:8f:fe:61:a1:6b:1d:07:23:5c:87:55:ee:3c:2d:2c:ab:4c:
         72:da:6e:ff:f1:62:b3:02:fa:27:20:8b:46:35:16:92:48:dd:
         a9:2b:6e:0c:ac:d0:3a:5f:ef:67:d4:01:b9:85:a0:0d:a3:29:
         6f:ed:dc:eb:af:9f:1a:82:ab:0a:7d:3e:b5:34:dd:45:68:7a:
         bc:fb:cc:62:0c:66:60:72:6f:05:a5:32:02:8d:b5:a0:56:0f:
         e6:cd:94:7b:8c:6b:a0:73:86:cf:f7:95:56:8a:2f:13:3c:48:
         76:98:09:de:77:90:4f:fa:bf:cf:14:c0:1b:7a:40:4e:9f:f9:
         5e:21:fb:fb:fb:2d:63:99:d6:ab:81:45:cd:d6:e1:d7:17:da:
         74:aa:62:28:66:7d:3e:f5:9c:26:e5:ad:0b:e2:54:bb:27:75:
         c1:1a:44:fe:2b:ae:91:59:a0:4a:20:f6:c0:02:4f:7c:af:09:
         b7:4f:28:fb:be:8e:54:86:6a:c8:39:ea:93:45:32:46:79:90:
         1d:4f:f6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----