Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/7431172a65e9b3dcca726d7d709751171d401418.roa
File:                     7431172a65e9b3dcca726d7d709751171d401418.roa (raw, json)
Hash identifier:          CFFoKTjmQJLKZzV9T7P1XZbGlnMIGOZDY3VIslpnUGg=
Subject key identifier:   EB:DA:9B:9A:F6:2B:AD:FB:C9:18:B9:44:32:A0:CE:DB:A8:33:F0:45
Certificate issuer:       /CN=fd4b356b54565faadd5f517f4770fa4a9fd3874a
Certificate serial:       219E00
Authority key identifier: F9:A2:30:73:1F:C4:8A:07:26:22:56:75:C7:BA:00:EE:5B:AE:EC:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4b356b54565faadd5f517f4770fa4a9fd3874a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/7431172a65e9b3dcca726d7d709751171d401418.roa
Signing time:             Fri 11 Aug 2023 23:43:54 +0000
ROA not before:           Thu 10 Aug 2023 23:43:54 +0000
ROA not after:            Mon 11 Aug 2025 23:43:54 +0000
asID:                     3549
IP address blocks:        45.185.16.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2203136 (0x219e00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd4b356b54565faadd5f517f4770fa4a9fd3874a
        Validity
            Not Before: Aug 10 23:43:54 2023 GMT
            Not After : Aug 11 23:43:54 2025 GMT
        Subject: CN=7431172a65e9b3dcca726d7d709751171d401418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:78:be:09:bd:b8:30:0d:c6:81:5c:ef:ed:e7:
                    52:ff:ce:4a:f8:52:e3:44:2f:b8:7c:c4:b4:c8:25:
                    5a:a0:5c:fb:a4:60:f6:b8:3d:cf:a2:6e:a0:53:78:
                    32:50:a7:33:0a:d4:0e:ae:b0:d9:d5:52:a1:bd:5b:
                    bc:da:c9:fd:d1:55:2a:09:76:80:94:d0:52:74:f6:
                    55:9e:f9:82:41:f4:75:b4:a7:79:52:54:c9:c7:c9:
                    35:ab:44:b7:17:fb:d6:ae:97:64:89:28:3d:32:2b:
                    e3:fc:23:b0:fe:06:4b:a0:2b:92:f4:14:ed:6f:33:
                    b6:49:51:3f:51:e6:d2:11:0e:38:2b:04:09:d8:7c:
                    9a:fd:35:f2:da:1d:6f:7e:1c:e9:e0:96:e1:05:c7:
                    5c:5c:5e:38:47:d9:74:54:5f:34:dd:19:fc:74:41:
                    e1:2a:17:3d:ea:d5:63:d6:2a:61:0c:b1:dd:99:1a:
                    c5:b5:70:c8:4a:62:d2:29:a5:b3:1e:51:8e:ed:ad:
                    37:a3:41:0a:07:f6:ea:35:36:64:d7:66:79:92:e5:
                    40:e7:27:e6:b9:de:ed:68:b1:c1:de:83:e1:c9:4d:
                    9e:96:e0:8b:cf:f6:e2:35:1c:ef:84:8d:d8:36:76:
                    c1:9b:e2:50:88:fe:a3:79:78:cd:52:2e:0c:3b:01:
                    92:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DA:9B:9A:F6:2B:AD:FB:C9:18:B9:44:32:A0:CE:DB:A8:33:F0:45
            X509v3 Authority Key Identifier:
                keyid:F9:A2:30:73:1F:C4:8A:07:26:22:56:75:C7:BA:00:EE:5B:AE:EC:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4b356b54565faadd5f517f4770fa4a9fd3874a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/7431172a65e9b3dcca726d7d709751171d401418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/fd4b356b54565faadd5f517f4770fa4a9fd3874a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:aa:3b:67:c7:4f:93:31:f1:29:51:cc:a0:cf:15:59:c8:
         e0:70:de:7d:cd:35:9d:76:e7:1c:a3:ea:ea:0e:7c:0c:ff:86:
         2b:a5:21:fe:59:1a:d4:91:40:2c:67:33:89:16:bd:33:2c:50:
         52:6f:2a:2f:6a:6f:fa:c8:96:39:57:db:4e:9d:5a:bd:aa:49:
         6c:6d:94:ba:0d:1b:17:72:91:1e:e6:14:fd:41:89:09:5c:5b:
         ab:f5:6e:0a:a7:b7:93:9f:7a:c8:a4:76:f7:1d:35:db:20:50:
         dc:7b:96:d1:c6:57:e7:ea:2f:d2:a7:2d:d9:dc:54:aa:9f:d6:
         ed:d2:1f:2c:8a:2f:4a:72:54:24:87:b5:d7:bc:4f:ca:96:d7:
         57:5c:97:6d:cc:0e:56:d3:e4:ed:b3:dc:a9:95:85:37:be:cf:
         3b:b9:ff:7f:ca:78:b9:7a:5a:5a:51:e9:f8:ee:e3:27:49:6d:
         7b:24:f1:12:9b:5e:d4:55:7c:80:1a:11:95:f5:64:c5:38:2d:
         87:19:e8:04:c4:cd:39:12:d8:5b:5b:cf:75:32:12:72:16:5e:
         af:b3:2c:9b:18:eb:d2:50:51:ba:76:53:86:f7:41:97:09:32:
         6a:4c:70:5d:76:57:a3:76:2f:67:ae:75:88:2f:b4:53:38:c6:
         a2:ca:a3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----