Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/2b0c5c9547c8dee98f4616d7ad3330c49a9b4e57.roa
File:                     2b0c5c9547c8dee98f4616d7ad3330c49a9b4e57.roa (raw, json)
Hash identifier:          ABRE7cqqxu1ox6F/NbDBad901adNjrH3nbxQIuOTvSY=
Subject key identifier:   9E:73:C3:A2:44:E4:EE:C2:A0:8A:4A:AF:F8:C1:0A:19:83:D6:22:BA
Certificate issuer:       /CN=65de11d1592f5fc8dd997228321049e1fb3afa86
Certificate serial:       201B21
Authority key identifier: 7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/2b0c5c9547c8dee98f4616d7ad3330c49a9b4e57.roa
Signing time:             Fri 09 Jun 2023 19:50:04 +0000
ROA not before:           Thu 08 Jun 2023 19:50:04 +0000
ROA not after:            Mon 09 Jun 2025 19:50:04 +0000
asID:                     269782
IP address blocks:        45.184.248.0/22 maxlen: 24
                          2803:2360::/32 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2104097 (0x201b21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65de11d1592f5fc8dd997228321049e1fb3afa86
        Validity
            Not Before: Jun  8 19:50:04 2023 GMT
            Not After : Jun  9 19:50:04 2025 GMT
        Subject: CN=2b0c5c9547c8dee98f4616d7ad3330c49a9b4e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a0:46:b2:ee:fe:4b:ab:5d:36:ed:eb:f5:f1:
                    d1:42:3f:89:36:e4:33:d0:f5:68:2d:95:9a:45:81:
                    7a:45:27:a6:28:64:ad:0b:0c:53:e2:ff:60:81:38:
                    26:04:ee:70:da:a4:92:b7:cd:8c:fb:83:85:c1:9b:
                    07:84:e6:ce:76:e2:b3:df:a4:2b:44:84:26:77:55:
                    ac:e4:a2:95:09:f3:1c:7e:da:56:7e:29:1e:9c:5e:
                    0a:db:fb:1f:cb:69:59:d8:5c:01:3b:c2:77:a3:6c:
                    a5:65:f5:1d:3b:62:ff:4c:95:37:6d:11:93:30:48:
                    01:be:4f:ef:a2:61:29:54:2c:d1:43:97:c3:72:e6:
                    16:f7:68:51:6f:bb:33:7e:d1:8e:ac:cb:04:d5:fc:
                    cf:56:37:a0:04:1e:16:6a:3d:42:3b:e3:95:ec:df:
                    a1:ed:e5:42:79:94:4f:db:fd:5b:9e:75:de:76:7d:
                    cc:12:d1:b7:96:85:57:55:1b:58:cf:7b:e6:15:8f:
                    03:cb:92:86:8d:63:ca:6c:1a:ca:59:13:02:ef:cc:
                    24:06:0e:f5:08:c1:75:f3:1b:e4:75:95:40:f1:2f:
                    71:d2:88:1f:00:5e:86:47:ff:00:54:53:c8:9f:9d:
                    05:ef:1f:55:61:95:a6:c4:de:0c:7c:73:98:c7:81:
                    1f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:73:C3:A2:44:E4:EE:C2:A0:8A:4A:AF:F8:C1:0A:19:83:D6:22:BA
            X509v3 Authority Key Identifier:
                keyid:7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/2b0c5c9547c8dee98f4616d7ad3330c49a9b4e57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/65de11d1592f5fc8dd997228321049e1fb3afa86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.248.0/22
                IPv6:
                  2803:2360::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:9b:d1:b0:92:9e:aa:00:44:67:bd:06:9a:1e:6e:75:28:bb:
         85:b5:85:38:c6:71:9d:bf:30:36:4d:03:a5:6c:15:b1:88:83:
         82:24:e6:18:cf:9c:9c:a1:9a:4e:5f:d5:e2:8a:25:36:e1:bb:
         29:2b:21:b4:d2:8e:7a:a5:8e:6f:5c:05:01:18:5c:e0:f8:5e:
         49:7f:86:9e:8a:13:3e:c5:47:c1:72:cf:5e:fe:10:53:00:59:
         62:5d:4f:3e:af:2a:63:57:73:39:fb:3b:b0:94:b8:28:c5:4e:
         27:dd:a0:dd:e6:e2:a9:d9:ff:1f:72:9e:c0:b7:f0:1c:37:17:
         0d:a7:5f:ce:2f:ca:18:f8:8a:7d:3b:94:d4:18:5f:00:ec:3c:
         12:b5:5a:07:d3:9d:10:8c:ee:40:6e:c0:a8:6a:03:40:1c:6c:
         d1:07:e6:94:1d:0a:07:61:a6:4c:7e:8e:e7:aa:64:9c:11:77:
         af:27:1d:a2:d7:30:04:da:70:a3:8b:68:58:07:d7:cb:a2:c6:
         ca:55:36:96:cc:33:ec:e9:9e:44:94:cb:b6:be:41:3a:f9:08:
         12:a3:ac:6f:d5:a7:91:a3:6f:23:e2:00:c4:79:ca:43:0b:5a:
         04:1b:e1:1a:b0:26:92:7b:96:e6:9f:17:3f:91:39:fd:e5:b2:
         46:50:82:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----