Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/c24093670f6ee5e0abb1ff1c06e4f2b159af2369.roa
File:                     c24093670f6ee5e0abb1ff1c06e4f2b159af2369.roa (raw, json)
Hash identifier:          s5Uz++XZlLYVAUFppQ+Uhme9GiDVbGi5sTk/WVFlGQQ=
Subject key identifier:   36:DD:F6:9D:58:27:8B:8D:71:09:CD:88:7E:45:5F:94:02:F3:BB:D8
Certificate issuer:       /CN=1f65d1c37e495ab494edc3bad30b1a6d4f88e383
Certificate serial:       21732A
Authority key identifier: 4D:2E:30:FD:EB:2F:B3:C6:6F:8F:67:26:09:36:9D:75:D9:DE:CF:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/c24093670f6ee5e0abb1ff1c06e4f2b159af2369.roa
Signing time:             Wed 05 Jul 2023 13:27:35 +0000
ROA not before:           Tue 04 Jul 2023 13:27:35 +0000
ROA not after:            Sat 05 Jul 2025 13:27:35 +0000
asID:                     52468
IP address blocks:        45.224.20.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2192170 (0x21732a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f65d1c37e495ab494edc3bad30b1a6d4f88e383
        Validity
            Not Before: Jul  4 13:27:35 2023 GMT
            Not After : Jul  5 13:27:35 2025 GMT
        Subject: CN=c24093670f6ee5e0abb1ff1c06e4f2b159af2369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7d:6b:87:82:cf:70:d3:d2:2d:f0:8c:ca:fc:
                    b9:ed:d9:44:73:df:98:9c:cc:c6:24:60:09:15:2d:
                    33:7f:bc:d1:39:39:64:57:95:7b:b2:7f:72:6b:37:
                    a1:8b:ed:c6:d6:e0:4c:86:ff:0c:41:41:f4:da:96:
                    f7:e9:c1:9e:55:8c:0a:6e:4d:f0:0c:2a:e4:ab:a3:
                    61:b9:da:f2:c3:0a:c2:6d:b1:51:ec:e7:b7:d1:e7:
                    90:9a:d7:7f:a3:15:55:62:db:5e:0e:a6:78:04:68:
                    58:bb:90:f6:12:3f:ce:32:3c:37:70:ca:47:7f:d6:
                    bd:0c:c7:52:bf:8b:f7:ba:bd:5b:4e:37:39:2e:86:
                    6c:fe:23:5a:11:18:35:6d:0c:b6:02:43:77:b6:28:
                    90:92:c9:1d:f9:16:ca:cb:c0:dc:0c:8b:cc:75:95:
                    6e:d2:e1:61:9a:f5:6c:1f:65:c0:be:31:fb:99:bd:
                    7c:ad:41:67:ad:93:92:62:93:3e:0f:6b:e3:26:c2:
                    93:01:41:ed:0a:d6:0f:4c:48:bf:da:39:31:61:2e:
                    b5:c6:ed:38:6a:af:93:de:5b:b0:91:b3:18:8c:6c:
                    7b:30:0a:23:1e:0b:6b:b6:dc:e8:f5:c1:71:fa:f8:
                    63:4b:50:e4:a2:61:b4:f7:ac:1f:ba:ab:3d:73:6d:
                    ee:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DD:F6:9D:58:27:8B:8D:71:09:CD:88:7E:45:5F:94:02:F3:BB:D8
            X509v3 Authority Key Identifier:
                keyid:4D:2E:30:FD:EB:2F:B3:C6:6F:8F:67:26:09:36:9D:75:D9:DE:CF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/c24093670f6ee5e0abb1ff1c06e4f2b159af2369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:a0:d3:d1:8b:04:6e:04:33:d4:bd:20:ed:24:58:fd:05:64:
         bc:3f:1e:7e:80:7a:50:33:c0:3d:ac:49:9f:25:1b:e9:f0:11:
         f9:84:41:b4:1c:60:c8:19:c8:6b:b2:54:3c:18:d1:be:19:52:
         f3:7f:8e:d1:f3:09:2f:31:ce:d2:c3:1f:87:4f:ed:a0:43:90:
         48:5a:9d:25:74:19:63:97:5b:6f:2a:9d:b8:96:67:96:d2:b8:
         b0:b3:2a:2f:e2:73:de:cb:b4:c0:d4:14:f2:17:68:83:b5:c3:
         d8:6e:40:69:93:8a:cf:1b:24:c6:f1:38:c6:40:c7:8b:35:f1:
         b6:34:34:9e:3c:94:62:05:15:a5:06:8c:ba:f1:55:a2:5c:89:
         ac:d8:6e:34:b4:2c:62:6e:5b:10:70:75:cf:55:c2:06:3f:1d:
         af:dd:d7:ef:b1:6a:e6:60:65:e6:25:6b:30:1d:a3:f0:84:d2:
         ca:15:30:85:8a:69:17:7f:ef:7b:a0:4f:a7:1d:ce:d0:dc:db:
         e4:f3:1f:ea:25:9f:53:78:fa:bc:f2:03:6a:ec:d6:e6:af:d7:
         20:97:53:19:f8:cf:62:9a:09:a1:d9:69:a6:c4:89:aa:eb:1f:
         03:8c:75:62:c2:c5:50:b4:b0:cb:91:1f:bc:66:cd:2f:7d:a9:
         4f:1d:1e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----