Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1f730e-78a1-4428-8a56-fca3d599c817/30a65a89b83b595755aed6ee0794607ba46a4bbe.roa
File:                     30a65a89b83b595755aed6ee0794607ba46a4bbe.roa (raw, json)
Hash identifier:          9ByI0X7uNdUTbqAvZrPKL3+4mRoKzvFVHNF7K0i4X1E=
Subject key identifier:   57:13:0F:CC:3D:FF:24:16:F4:03:23:43:DA:27:F3:D2:32:C9:BC:F7
Certificate issuer:       /CN=04f58d398e1a46504b7f27afcca2bf534c8d8b95
Certificate serial:       0F4A91
Authority key identifier: CA:70:FA:56:DC:47:4F:E9:CF:E0:CC:6F:71:88:52:AB:C2:EF:48:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04f58d398e1a46504b7f27afcca2bf534c8d8b95.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1f730e-78a1-4428-8a56-fca3d599c817/30a65a89b83b595755aed6ee0794607ba46a4bbe.roa
Signing time:             Tue 27 Feb 2024 14:37:07 +0000
ROA not before:           Tue 27 Feb 2024 14:37:07 +0000
ROA not after:            Fri 27 Feb 2026 14:37:07 +0000
asID:                     266670
IP address blocks:        45.225.68.0/23 maxlen: 23
                          2803:6920::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 18:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1002129 (0xf4a91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04f58d398e1a46504b7f27afcca2bf534c8d8b95
        Validity
            Not Before: Feb 27 14:37:07 2024 GMT
            Not After : Feb 27 14:37:07 2026 GMT
        Subject: CN=30a65a89b83b595755aed6ee0794607ba46a4bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:42:41:e7:02:f3:9c:fc:4f:1c:fd:81:ed:
                    89:20:c4:f7:c8:c4:44:7d:01:db:38:64:40:f8:58:
                    f4:ff:02:ff:70:32:81:84:ee:99:78:35:c5:d7:5b:
                    01:5a:63:9f:38:75:23:d5:bd:1b:f6:d7:37:6d:72:
                    15:70:fb:e8:de:62:b5:87:1c:20:07:40:87:ae:c9:
                    1d:43:f3:35:c8:7b:96:9b:67:6d:4c:1c:d9:47:b5:
                    f8:36:3b:47:1b:cb:4a:cd:3e:f6:6a:37:f4:de:a1:
                    79:32:89:91:ae:31:86:2b:aa:15:cb:e7:08:68:30:
                    83:3c:56:76:3e:53:6b:43:84:1e:9f:b3:80:c2:18:
                    74:5d:42:f1:a1:5f:66:13:79:3e:08:14:a3:af:84:
                    58:1a:ec:a8:2f:b6:15:d7:7e:f3:bb:4c:97:50:10:
                    0a:39:61:89:20:2c:ad:54:31:1c:cf:ba:58:f1:39:
                    06:1a:2e:fa:34:42:c3:21:51:6c:4d:b1:ab:3e:4f:
                    5a:a3:4d:a0:cb:bb:29:71:44:27:cd:10:ae:80:57:
                    2d:6b:4f:58:66:96:24:b2:7b:f2:2b:3a:a7:7f:f6:
                    69:4c:14:f4:be:ba:ec:bd:83:c8:d2:aa:e0:cb:93:
                    0a:c2:68:c4:2d:ff:de:15:4d:8a:41:0e:03:ce:2f:
                    f5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:13:0F:CC:3D:FF:24:16:F4:03:23:43:DA:27:F3:D2:32:C9:BC:F7
            X509v3 Authority Key Identifier:
                keyid:CA:70:FA:56:DC:47:4F:E9:CF:E0:CC:6F:71:88:52:AB:C2:EF:48:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04f58d398e1a46504b7f27afcca2bf534c8d8b95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1f730e-78a1-4428-8a56-fca3d599c817/30a65a89b83b595755aed6ee0794607ba46a4bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1f730e-78a1-4428-8a56-fca3d599c817/04f58d398e1a46504b7f27afcca2bf534c8d8b95.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.68.0/23
                IPv6:
                  2803:6920::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:c8:f7:ba:a4:e7:ca:7d:e3:52:9e:f6:89:2e:6a:e4:cf:80:
         7d:c9:28:58:6a:d5:ca:f4:86:b4:41:40:97:00:b7:42:ca:f6:
         fa:aa:38:28:be:0a:ac:48:00:02:6c:14:2d:cc:81:13:b1:63:
         3e:fe:d0:13:8d:98:3c:97:9e:cf:3d:52:c1:b5:c2:3d:7c:f6:
         98:7e:4a:b6:a6:53:1f:46:fb:12:94:12:08:3d:4c:f3:e0:f1:
         ac:1a:87:4f:99:e5:57:f7:8c:d6:82:dd:42:fc:eb:3f:28:e3:
         99:1a:a0:9a:30:6d:c6:2d:e8:8d:22:5e:ab:a1:1d:e8:4d:7b:
         7f:f2:ca:a1:ba:48:fc:95:35:9a:5b:5a:20:69:1c:af:4f:83:
         f3:af:1b:22:9b:55:fd:4c:d2:57:45:05:5a:fa:e6:0f:2f:8a:
         e9:ed:30:b5:3f:76:07:ab:34:08:a8:58:c5:8f:15:ab:80:b7:
         4e:16:3e:78:a3:ea:8b:7e:d3:1d:07:78:24:9a:64:31:87:36:
         c3:a2:c6:15:6e:f7:0e:3d:a3:f7:fa:3f:09:e6:06:a4:b9:e0:
         37:00:ff:e6:4c:69:15:39:79:a7:89:33:fb:ad:26:df:8c:5e:
         c4:1e:66:b5:a0:88:ac:e1:a5:44:2b:07:de:3d:4b:32:45:04:
         67:c6:0f:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDD0qRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA0
ZjU4ZDM5OGUxYTQ2NTA0YjdmMjdhZmNjYTJiZjUzNGM4ZDhiOTUwHhcNMjQwMjI3
MTQzNzA3WhcNMjYwMjI3MTQzNzA3WjAzMTEwLwYDVQQDEygzMGE2NWE4OWI4M2I1
OTU3NTVhZWQ2ZWUwNzk0NjA3YmE0NmE0YmJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtqRCQecC85z8Txz9ge2JIMT3yMREfQHbOGRA+Fj0/wL/cDKB
hO6ZeDXF11sBWmOfOHUj1b0b9tc3bXIVcPvo3mK1hxwgB0CHrskdQ/M1yHuWm2dt
TBzZR7X4NjtHG8tKzT72ajf03qF5MomRrjGGK6oVy+cIaDCDPFZ2PlNrQ4Qen7OA
whh0XULxoV9mE3k+CBSjr4RYGuyoL7YV137zu0yXUBAKOWGJICytVDEcz7pY8TkG
Gi76NELDIVFsTbGrPk9ao02gy7spcUQnzRCugFcta09YZpYksnvyKzqnf/ZpTBT0
vrrsvYPI0qrgy5MKwmjELf/eFU2KQQ4Dzi/1mQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFFcTD8w9/yQW9AMjQ9on89Iyybz3MB8GA1UdIwQYMBaAFMpw+lbcR0/pz+DM
b3GIUqvC70izMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDRmNThk
Mzk4ZTFhNDY1MDRiN2YyN2FmY2NhMmJmNTM0YzhkOGI5NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWIxZjczMGUtNzhhMS00NDI4LThhNTYtZmNhM2Q1
OTljODE3LzMwYTY1YTg5YjgzYjU5NTc1NWFlZDZlZTA3OTQ2MDdiYTQ2YTRiYmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YjFmNzMwZS03OGExLTQ0MjgtOGE1Ni1mY2Ez
ZDU5OWM4MTcvMDRmNThkMzk4ZTFhNDY1MDRiN2YyN2FmY2NhMmJmNTM0YzhkOGI5
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAS3hRDANBAIAAjAHAwUAKANpIDANBgkqhkiG9w0BAQsFAAOC
AQEAScj3uqTnyn3jUp72iS5q5M+AfckoWGrVyvSGtEFAlwC3Qsr2+qo4KL4KrEgA
AmwULcyBE7FjPv7QE42YPJeezz1SwbXCPXz2mH5KtqZTH0b7EpQSCD1M8+DxrBqH
T5nlV/eM1oLdQvzrPyjjmRqgmjBtxi3ojSJeq6Ed6E17f/LKobpI/JU1mltaIGkc
r0+D868bIptV/UzSV0UFWvrmDy+K6e0wtT92B6s0CKhYxY8Vq4C3ThY+eKPqi37T
HQd4JJpkMYc2w6LGFW73Dj2j9/o/CeYGpLngNwD/5kxpFTl5p4kz+60m34xexB5m
taCIrOGlRCsH3j1LMkUEZ8YP1Q==
-----END CERTIFICATE-----