Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/a0a4de1292627994b45ca4a1528755bd14dbd3d0.roa
File:                     a0a4de1292627994b45ca4a1528755bd14dbd3d0.roa (raw, json)
Hash identifier:          erkgRUc2v9LOE5w0rnouADnBGPWu+Pco1R94Ng7NJzU=
Subject key identifier:   8C:90:85:DD:79:D4:55:77:AB:9B:6E:66:23:87:87:8C:7F:5B:80:70
Certificate issuer:       /CN=15c635c0f63020ac3be5d867de2f8cd9c13ed75b
Certificate serial:       1B3399
Authority key identifier: 51:AB:F9:C0:8A:06:46:7A:F8:08:E2:48:39:C0:00:60:C1:9D:7B:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c635c0f63020ac3be5d867de2f8cd9c13ed75b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/a0a4de1292627994b45ca4a1528755bd14dbd3d0.roa
Signing time:             Mon 09 Jan 2023 20:40:14 +0000
ROA not before:           Sun 08 Jan 2023 20:39:23 +0000
ROA not after:            Thu 09 Jan 2025 20:39:23 +0000
asID:                     52483
IP address blocks:        45.179.140.0/22 maxlen: 24
                          2803:4e60::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782681 (0x1b3399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c635c0f63020ac3be5d867de2f8cd9c13ed75b
        Validity
            Not Before: Jan  8 20:39:23 2023 GMT
            Not After : Jan  9 20:39:23 2025 GMT
        Subject: CN=a0a4de1292627994b45ca4a1528755bd14dbd3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:17:db:1e:c2:27:82:a3:8a:8c:eb:86:bb:63:
                    79:38:38:39:4d:0b:50:9b:48:65:03:32:e9:7a:ad:
                    d0:3e:21:07:5c:31:ec:54:e5:55:68:07:28:2c:76:
                    e9:bd:9d:54:33:6e:3c:a1:e9:8d:23:f2:7e:54:42:
                    6d:21:a7:65:ce:6e:8f:49:6a:9e:33:54:af:78:d0:
                    99:df:fb:60:99:cb:a6:38:e2:5b:03:3b:28:5a:b0:
                    cc:1e:5b:42:89:ee:29:67:8b:24:62:93:ea:4f:22:
                    05:66:10:16:3e:b5:f4:60:64:9c:b0:b3:13:d9:91:
                    30:dd:ec:77:4f:6a:fa:c5:f0:c3:94:3c:ff:86:23:
                    b2:7d:3b:e2:ee:88:ca:5f:6d:b3:08:a3:80:77:2e:
                    81:86:22:ce:f4:93:ab:74:48:70:11:74:03:9b:1a:
                    2a:9b:b6:0d:a1:85:5f:eb:d2:87:84:68:78:72:e0:
                    88:ec:49:4d:d7:81:48:1a:b7:ce:4a:60:5b:7a:bc:
                    31:17:56:f8:29:86:6e:0e:60:4d:78:c5:66:66:85:
                    91:cb:7f:6a:a8:fd:bd:85:47:74:2a:8e:14:84:d0:
                    77:e4:52:13:4c:30:3e:9b:74:57:18:4e:d5:6a:63:
                    d0:1e:20:aa:67:5e:27:e5:ef:6c:f1:e5:49:a2:b2:
                    44:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:90:85:DD:79:D4:55:77:AB:9B:6E:66:23:87:87:8C:7F:5B:80:70
            X509v3 Authority Key Identifier:
                keyid:51:AB:F9:C0:8A:06:46:7A:F8:08:E2:48:39:C0:00:60:C1:9D:7B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c635c0f63020ac3be5d867de2f8cd9c13ed75b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/a0a4de1292627994b45ca4a1528755bd14dbd3d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/15c635c0f63020ac3be5d867de2f8cd9c13ed75b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.140.0/22
                IPv6:
                  2803:4e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:04:73:82:ea:85:a4:00:7d:a6:fa:ee:45:54:a5:8d:a5:cd:
         69:19:25:d2:15:42:b3:f9:08:9e:90:87:b6:a5:4d:d6:5b:d6:
         93:e3:23:55:39:68:ad:28:36:59:e4:aa:14:73:6a:eb:bd:8f:
         0c:5b:ae:05:39:d0:34:41:05:ad:e0:57:64:6d:57:a2:f5:5e:
         49:64:3c:cf:ef:a5:ef:21:e8:92:a3:32:20:a4:78:68:5a:ac:
         2b:be:07:be:ac:92:cd:ac:1a:57:5e:ea:bb:21:51:07:c6:24:
         c7:4a:c6:ea:d3:b0:1b:16:e6:70:76:63:12:25:68:94:5d:b1:
         5e:5b:7a:10:ca:67:5f:e1:ff:1a:02:00:27:a4:94:29:34:1e:
         9e:4c:ee:94:22:61:27:e8:24:e2:1b:5c:42:8f:48:ab:97:34:
         26:f7:7d:42:3a:3a:a4:5e:c5:8d:5b:35:ee:7d:bd:3e:40:81:
         4d:49:83:86:60:62:42:25:2b:26:da:1e:82:9c:87:da:0f:ab:
         e2:ed:dc:64:b7:67:d9:8d:4a:ec:a1:63:fc:ba:5b:99:03:94:
         32:d6:95:be:50:99:23:4f:f3:c3:57:8a:bf:34:ca:a7:90:52:
         03:45:11:40:83:47:08:ed:9d:01:ce:27:44:b0:46:41:41:05:
         25:79:df:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDGzOZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE1
YzYzNWMwZjYzMDIwYWMzYmU1ZDg2N2RlMmY4Y2Q5YzEzZWQ3NWIwHhcNMjMwMTA4
MjAzOTIzWhcNMjUwMTA5MjAzOTIzWjAzMTEwLwYDVQQDEyhhMGE0ZGUxMjkyNjI3
OTk0YjQ1Y2E0YTE1Mjg3NTViZDE0ZGJkM2QwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAphfbHsIngqOKjOuGu2N5ODg5TQtQm0hlAzLpeq3QPiEHXDHs
VOVVaAcoLHbpvZ1UM248oemNI/J+VEJtIadlzm6PSWqeM1SveNCZ3/tgmcumOOJb
AzsoWrDMHltCie4pZ4skYpPqTyIFZhAWPrX0YGScsLMT2ZEw3ex3T2r6xfDDlDz/
hiOyfTvi7ojKX22zCKOAdy6BhiLO9JOrdEhwEXQDmxoqm7YNoYVf69KHhGh4cuCI
7ElN14FIGrfOSmBberwxF1b4KYZuDmBNeMVmZoWRy39qqP29hUd0Ko4UhNB35FIT
TDA+m3RXGE7VamPQHiCqZ14n5e9s8eVJorJEQQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFIyQhd151FV3q5tuZiOHh4x/W4BwMB8GA1UdIwQYMBaAFFGr+cCKBkZ6+Aji
SDnAAGDBnXtmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTVjNjM1
YzBmNjMwMjBhYzNiZTVkODY3ZGUyZjhjZDljMTNlZDc1Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjk4MWVlNDctMDQzYi00OGVhLTk4NjMtMzVhYTVl
NjRmZWEyL2EwYTRkZTEyOTI2Mjc5OTRiNDVjYTRhMTUyODc1NWJkMTRkYmQzZDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82OTgxZWU0Ny0wNDNiLTQ4ZWEtOTg2My0zNWFh
NWU2NGZlYTIvMTVjNjM1YzBmNjMwMjBhYzNiZTVkODY3ZGUyZjhjZDljMTNlZDc1
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2zjDANBAIAAjAHAwUAKANOYDANBgkqhkiG9w0BAQsFAAOC
AQEAOwRzguqFpAB9pvruRVSljaXNaRkl0hVCs/kInpCHtqVN1lvWk+MjVTlorSg2
WeSqFHNq672PDFuuBTnQNEEFreBXZG1XovVeSWQ8z++l7yHokqMyIKR4aFqsK74H
vqySzawaV17quyFRB8Ykx0rG6tOwGxbmcHZjEiVolF2xXlt6EMpnX+H/GgIAJ6SU
KTQenkzulCJhJ+gk4htcQo9Iq5c0Jvd9Qjo6pF7FjVs17n29PkCBTUmDhmBiQiUr
JtoegpyH2g+r4u3cZLdn2Y1K7KFj/LpbmQOUMtaVvlCZI0/zw1eKvzTKp5BSA0UR
QINHCO2dAc4nRLBGQUEFJXnf1Q==
-----END CERTIFICATE-----