Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/c8ee9d833c1b3845d0dd2f98894a34e9d78e47d9.roa
File:                     c8ee9d833c1b3845d0dd2f98894a34e9d78e47d9.roa (raw, json)
Hash identifier:          NEMHU4Mx2lCa0poqAYCfE2a8MWlYaQ38i0u3JMKwHIo=
Subject key identifier:   43:23:29:38:17:D5:08:10:C6:AE:03:EF:65:F2:81:2B:7A:4A:63:F1
Certificate issuer:       /CN=15c635c0f63020ac3be5d867de2f8cd9c13ed75b
Certificate serial:       1B2DEF
Authority key identifier: 51:AB:F9:C0:8A:06:46:7A:F8:08:E2:48:39:C0:00:60:C1:9D:7B:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c635c0f63020ac3be5d867de2f8cd9c13ed75b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/c8ee9d833c1b3845d0dd2f98894a34e9d78e47d9.roa
Signing time:             Mon 09 Jan 2023 20:39:22 +0000
ROA not before:           Sun 08 Jan 2023 20:37:52 +0000
ROA not after:            Thu 09 Jan 2025 20:37:52 +0000
asID:                     52482
IP address blocks:        45.179.140.0/22 maxlen: 24
                          2803:4e60::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781231 (0x1b2def)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c635c0f63020ac3be5d867de2f8cd9c13ed75b
        Validity
            Not Before: Jan  8 20:37:52 2023 GMT
            Not After : Jan  9 20:37:52 2025 GMT
        Subject: CN=c8ee9d833c1b3845d0dd2f98894a34e9d78e47d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:47:a0:59:13:dd:a8:4d:4f:a5:58:ac:db:
                    ab:db:87:6f:29:e7:59:64:6c:40:89:23:63:6c:a1:
                    5d:39:97:73:3a:21:7a:c2:a9:9c:68:d8:e2:78:b9:
                    c2:89:03:87:38:d9:18:d6:d2:25:be:6f:3a:22:4b:
                    37:1e:3d:75:9e:f4:57:a8:c4:b3:9d:5d:29:77:7f:
                    8c:73:47:dc:94:8c:90:ca:57:bf:08:13:1c:15:79:
                    b3:07:97:5d:a1:d4:73:1a:f7:6b:d7:7a:c5:fb:b3:
                    b1:25:69:47:79:29:fc:6f:eb:1e:38:cb:c0:cd:67:
                    65:a1:cf:74:a4:7a:26:eb:49:c7:1c:c5:4b:fd:86:
                    c9:bb:58:2d:29:ac:b1:13:cd:60:b7:a4:af:cd:0f:
                    76:17:4f:bd:c5:48:9e:fb:96:ef:be:5e:a4:4e:5f:
                    f3:58:67:38:36:54:7f:53:f1:e8:2e:d5:64:8d:40:
                    18:89:26:db:99:c1:1e:fa:2e:a1:54:13:14:89:11:
                    70:65:13:9b:a5:24:cf:7c:39:f9:e2:77:a1:05:7c:
                    c1:cf:39:3e:5c:e8:45:f1:0c:8a:ef:f2:31:66:77:
                    99:b4:9f:09:17:49:f5:40:31:d3:52:ad:38:25:e6:
                    8f:8d:48:22:1f:4c:bb:e0:b3:35:c6:ef:7e:37:0d:
                    06:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:23:29:38:17:D5:08:10:C6:AE:03:EF:65:F2:81:2B:7A:4A:63:F1
            X509v3 Authority Key Identifier:
                keyid:51:AB:F9:C0:8A:06:46:7A:F8:08:E2:48:39:C0:00:60:C1:9D:7B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c635c0f63020ac3be5d867de2f8cd9c13ed75b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/c8ee9d833c1b3845d0dd2f98894a34e9d78e47d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/15c635c0f63020ac3be5d867de2f8cd9c13ed75b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.140.0/22
                IPv6:
                  2803:4e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:99:76:e2:7d:a2:4b:e5:62:b7:b9:9d:1f:56:96:5b:d1:c6:
         5e:42:3d:7b:54:ff:7a:4f:90:ba:c1:bb:fd:a3:b0:86:2a:7b:
         2f:5f:e6:77:ab:18:17:cf:dc:a2:9f:b5:a7:9d:e2:27:fc:77:
         df:94:9e:cc:4c:65:cf:17:98:a9:b0:cf:a3:f9:fa:a1:f7:cb:
         8b:d0:97:30:28:c1:88:ff:ce:1f:b1:e3:40:27:58:f8:b9:62:
         fb:51:12:13:8e:b8:15:b9:57:3d:a3:06:f9:dd:70:0e:b7:32:
         4d:18:0e:75:38:3d:29:b8:00:29:9a:91:26:d2:97:12:7d:b5:
         95:c9:7e:2a:81:33:06:e2:26:00:23:63:e0:dd:82:5f:8b:00:
         05:54:dc:71:bb:13:93:d4:b4:a6:0a:6a:83:53:0f:d4:57:5d:
         d1:a4:d7:bf:a0:68:a1:94:e7:6e:54:4b:96:bb:7e:fc:f1:0d:
         bc:b7:c7:c6:b2:7c:9a:3c:d5:80:95:f6:59:1f:85:a6:cd:20:
         32:47:89:6e:93:dd:4c:52:8e:b3:86:75:f3:df:f7:27:3f:fa:
         55:ba:87:99:3c:44:73:6e:62:2d:70:b0:fa:36:43:4a:97:8b:
         73:c6:7c:39:a8:ee:f5:bb:2c:cc:d9:47:12:a7:37:01:43:7e:
         a3:44:94:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDGy3vMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE1
YzYzNWMwZjYzMDIwYWMzYmU1ZDg2N2RlMmY4Y2Q5YzEzZWQ3NWIwHhcNMjMwMTA4
MjAzNzUyWhcNMjUwMTA5MjAzNzUyWjAzMTEwLwYDVQQDEyhjOGVlOWQ4MzNjMWIz
ODQ1ZDBkZDJmOTg4OTRhMzRlOWQ3OGU0N2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAslxHoFkT3ahNT6VYrNur24dvKedZZGxAiSNjbKFdOZdzOiF6
wqmcaNjieLnCiQOHONkY1tIlvm86Iks3Hj11nvRXqMSznV0pd3+Mc0fclIyQyle/
CBMcFXmzB5ddodRzGvdr13rF+7OxJWlHeSn8b+seOMvAzWdloc90pHom60nHHMVL
/YbJu1gtKayxE81gt6SvzQ92F0+9xUie+5bvvl6kTl/zWGc4NlR/U/HoLtVkjUAY
iSbbmcEe+i6hVBMUiRFwZRObpSTPfDn54nehBXzBzzk+XOhF8QyK7/IxZneZtJ8J
F0n1QDHTUq04JeaPjUgiH0y74LM1xu9+Nw0G6QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFEMjKTgX1QgQxq4D72XygSt6SmPxMB8GA1UdIwQYMBaAFFGr+cCKBkZ6+Aji
SDnAAGDBnXtmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTVjNjM1
YzBmNjMwMjBhYzNiZTVkODY3ZGUyZjhjZDljMTNlZDc1Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjk4MWVlNDctMDQzYi00OGVhLTk4NjMtMzVhYTVl
NjRmZWEyL2M4ZWU5ZDgzM2MxYjM4NDVkMGRkMmY5ODg5NGEzNGU5ZDc4ZTQ3ZDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82OTgxZWU0Ny0wNDNiLTQ4ZWEtOTg2My0zNWFh
NWU2NGZlYTIvMTVjNjM1YzBmNjMwMjBhYzNiZTVkODY3ZGUyZjhjZDljMTNlZDc1
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2zjDANBAIAAjAHAwUAKANOYDANBgkqhkiG9w0BAQsFAAOC
AQEAc5l24n2iS+Vit7mdH1aWW9HGXkI9e1T/ek+QusG7/aOwhip7L1/md6sYF8/c
op+1p53iJ/x335SezExlzxeYqbDPo/n6offLi9CXMCjBiP/OH7HjQCdY+Lli+1ES
E464FblXPaMG+d1wDrcyTRgOdTg9KbgAKZqRJtKXEn21lcl+KoEzBuImACNj4N2C
X4sABVTccbsTk9S0pgpqg1MP1Fdd0aTXv6BooZTnblRLlrt+/PENvLfHxrJ8mjzV
gJX2WR+Fps0gMkeJbpPdTFKOs4Z189/3Jz/6VbqHmTxEc25iLXCw+jZDSpeLc8Z8
Oaju9bsszNlHEqc3AUN+o0SUrA==
-----END CERTIFICATE-----