Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/9b7d8b4021132aa160dc6f3f3d327ee9d6bb9557.roa
File:                     9b7d8b4021132aa160dc6f3f3d327ee9d6bb9557.roa (raw, json)
Hash identifier:          TKhpsDtBSe9XPYDekWHDlYF1FLkhGyQrPuMrpbw710g=
Subject key identifier:   63:63:3E:07:FA:37:FE:D0:1B:72:E8:19:C3:2D:FC:B9:5E:03:E4:24
Certificate issuer:       /CN=fd4b356b54565faadd5f517f4770fa4a9fd3874a
Certificate serial:       21C736
Authority key identifier: F9:A2:30:73:1F:C4:8A:07:26:22:56:75:C7:BA:00:EE:5B:AE:EC:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4b356b54565faadd5f517f4770fa4a9fd3874a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/9b7d8b4021132aa160dc6f3f3d327ee9d6bb9557.roa
Signing time:             Tue 15 Aug 2023 17:15:34 +0000
ROA not before:           Mon 14 Aug 2023 17:15:34 +0000
ROA not after:            Fri 15 Aug 2025 17:15:34 +0000
asID:                     273039
IP address blocks:        45.185.16.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2213686 (0x21c736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd4b356b54565faadd5f517f4770fa4a9fd3874a
        Validity
            Not Before: Aug 14 17:15:34 2023 GMT
            Not After : Aug 15 17:15:34 2025 GMT
        Subject: CN=9b7d8b4021132aa160dc6f3f3d327ee9d6bb9557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:c0:d3:27:38:2b:82:a0:e6:dd:11:7c:0d:
                    f1:7c:65:4c:98:3f:c9:a7:c6:d2:d8:a6:e1:54:ed:
                    19:5a:df:a6:9d:fa:1a:1c:7d:29:7b:f8:f6:08:28:
                    c0:4c:b8:c4:7e:fb:0f:49:c8:0f:f5:a1:7b:9c:2f:
                    a5:91:35:b9:63:83:b9:0b:a8:35:e9:19:ed:ef:d1:
                    99:95:cf:be:e7:9d:db:67:21:b5:00:ce:2f:55:3d:
                    bc:14:4d:b2:61:9e:30:fd:b7:72:af:1c:f4:a0:db:
                    c3:98:65:51:0e:b9:c5:33:02:81:a2:a8:d2:8d:24:
                    0a:fe:c5:d5:2c:0d:0c:6c:b8:c7:99:d1:d1:33:48:
                    6a:59:14:f5:19:41:aa:48:c0:e3:67:ef:54:ab:8d:
                    d4:3e:12:59:76:6e:37:b1:d8:3a:27:a1:16:cb:a6:
                    5b:5b:26:6e:3a:07:05:8e:8c:97:7a:38:68:01:3f:
                    56:70:6b:67:f9:20:6a:72:d1:f4:37:b1:20:32:f0:
                    13:c8:9e:03:04:a3:1b:b5:1e:b6:8f:f4:8d:03:35:
                    35:94:e3:d3:6d:b9:dc:7c:45:37:41:25:c5:06:2e:
                    3b:6a:6d:86:59:86:a3:82:fb:8a:1b:15:78:4f:e8:
                    4a:84:a1:1b:70:60:ec:82:20:07:c5:f7:58:77:b8:
                    7a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:63:3E:07:FA:37:FE:D0:1B:72:E8:19:C3:2D:FC:B9:5E:03:E4:24
            X509v3 Authority Key Identifier:
                keyid:F9:A2:30:73:1F:C4:8A:07:26:22:56:75:C7:BA:00:EE:5B:AE:EC:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4b356b54565faadd5f517f4770fa4a9fd3874a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/9b7d8b4021132aa160dc6f3f3d327ee9d6bb9557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/fd4b356b54565faadd5f517f4770fa4a9fd3874a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:96:5b:39:34:ab:53:4c:5c:ed:d6:fc:41:fb:31:ad:c0:8d:
         0e:be:e1:09:a6:6f:80:3e:08:0b:71:22:f8:97:fc:27:29:d2:
         82:8b:22:45:8e:02:d9:0b:45:01:2f:81:c9:2c:6a:44:cc:dc:
         73:70:a8:46:0f:74:63:fa:8b:a2:fb:78:dd:9f:0e:ab:a3:30:
         85:b2:2a:4e:8e:c8:fe:0b:e6:7d:01:d4:d9:eb:f6:da:2e:3f:
         d2:7e:e0:e3:e8:1a:28:ff:47:56:ae:30:7b:ea:84:0a:4b:a1:
         f6:a4:91:3e:16:b6:69:11:aa:28:8c:a8:3b:36:4d:83:97:29:
         27:7a:19:90:46:db:53:07:68:28:3b:e4:d3:24:e6:be:66:07:
         94:5a:0d:dc:70:ea:fe:7c:26:a6:05:9d:75:40:a5:00:e6:8a:
         c3:e8:8d:32:94:24:3a:84:06:99:35:09:95:55:c6:2b:b9:1f:
         79:0b:da:74:40:4b:1d:69:f7:e2:3d:45:fc:9f:ba:15:3e:4d:
         59:06:3c:b0:73:8b:37:4d:f1:b6:1b:f6:c9:c2:be:de:f3:a9:
         d5:ff:b2:1e:5b:93:35:4b:19:c7:4c:07:08:e2:55:72:d2:5c:
         9d:db:b2:42:d2:18:29:85:61:ff:be:1c:a4:a8:6b:f3:59:ec:
         56:de:06:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----