Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/d321531d9e0e7fd20bfc3bbd0cc54e6170b1d436.roa
File:                     d321531d9e0e7fd20bfc3bbd0cc54e6170b1d436.roa (raw, json)
Hash identifier:          /9gVpDChJ1eNURPp/fy53BNokEHLXdgHiR4W5X8gUYU=
Subject key identifier:   37:48:C8:28:41:1B:20:74:E2:80:A6:FC:F0:4B:96:1F:FC:61:68:DB
Certificate issuer:       /CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
Certificate serial:       2251F0
Authority key identifier: F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/d321531d9e0e7fd20bfc3bbd0cc54e6170b1d436.roa
Signing time:             Wed 05 Jul 2023 13:16:09 +0000
ROA not before:           Tue 04 Jul 2023 13:16:09 +0000
ROA not after:            Sat 05 Jul 2025 13:16:09 +0000
asID:                     52468
IP address blocks:        45.70.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2249200 (0x2251f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
        Validity
            Not Before: Jul  4 13:16:09 2023 GMT
            Not After : Jul  5 13:16:09 2025 GMT
        Subject: CN=d321531d9e0e7fd20bfc3bbd0cc54e6170b1d436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:fd:6a:22:47:59:f4:b4:96:f3:be:92:c9:
                    2b:23:7b:5e:6d:72:76:fe:ef:d6:47:9c:d7:d1:9f:
                    66:28:36:1d:26:16:f3:16:d9:bc:ac:3d:db:6d:11:
                    f1:4f:d3:e0:e5:f5:1e:20:9b:35:d5:1d:dc:07:61:
                    6b:d7:88:8a:db:9e:f8:ed:db:b4:fd:55:58:c3:fb:
                    b2:36:af:64:2c:4d:cb:52:84:91:b6:a2:50:31:e8:
                    cf:77:d5:fa:89:18:fd:87:5f:61:22:9a:64:3f:18:
                    e8:94:54:10:66:2f:e1:59:2f:f3:f1:6a:8d:c1:4e:
                    3b:8b:d5:52:94:6e:da:e4:e6:c1:d8:87:17:42:1d:
                    ae:7a:11:6e:17:d0:cc:21:8a:9a:e7:b3:88:6a:c8:
                    81:1b:03:6b:5d:7b:b0:4c:b6:c3:dd:8c:be:5b:6c:
                    44:43:f9:af:5e:2e:d7:d6:11:e1:f7:43:34:9d:d2:
                    49:d7:69:75:80:65:a3:5c:34:34:d7:75:d7:1e:74:
                    0a:5c:c1:fa:90:a7:73:0f:e4:e6:5b:bc:e8:35:57:
                    40:1d:70:a1:99:38:df:cc:15:78:c6:d4:0a:38:7b:
                    31:47:b2:ab:96:c7:9c:4f:1d:40:24:e3:17:1f:4c:
                    17:22:55:e3:60:cf:8f:63:38:67:99:de:5d:a0:f3:
                    2b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:48:C8:28:41:1B:20:74:E2:80:A6:FC:F0:4B:96:1F:FC:61:68:DB
            X509v3 Authority Key Identifier:
                keyid:F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/d321531d9e0e7fd20bfc3bbd0cc54e6170b1d436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/19bdf7eba9512ec4f3179e720563bd1d6965a593.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:61:9e:78:08:17:fc:45:1a:c4:69:31:5a:b9:34:79:99:88:
         6f:db:a7:df:f6:82:9f:17:d5:5e:28:14:e9:17:c3:8c:f3:d3:
         2c:6d:69:6e:59:4b:d3:ec:fb:c4:11:1b:3e:62:61:b8:e6:4f:
         db:2f:6b:fe:eb:34:ac:68:68:8d:ed:bc:2f:c6:df:30:bf:04:
         36:28:a3:15:29:b8:81:a9:c0:40:db:5d:05:b3:45:72:11:f5:
         aa:6d:ed:83:a8:f2:b6:65:01:22:a7:94:47:e3:f3:17:a8:51:
         5e:6e:76:b4:7d:fd:c7:db:f8:d9:d3:f2:5e:5f:89:2a:e8:59:
         fe:a5:99:d6:11:75:47:7f:15:8a:68:1e:ab:53:ca:f6:f8:c5:
         fb:b1:f4:2a:fc:1c:8d:65:90:6c:e5:de:46:b4:23:b3:73:ed:
         be:ba:24:9e:8d:bb:e7:00:1c:b5:3a:18:37:39:8a:d6:b0:89:
         80:75:52:19:da:6c:71:a2:a4:86:8d:ac:53:77:f5:e5:85:a7:
         42:e1:80:9c:50:88:d2:7d:94:99:cc:dd:61:ff:37:07:49:c8:
         b1:59:0b:8e:7e:23:62:b9:22:4a:94:4c:69:e2:b9:f6:67:4d:
         8c:bd:18:80:3b:0e:3b:12:a8:c1:43:5b:4b:6e:35:5b:fe:82:
         cd:13:b4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----