Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/7b95a4575ef612800b22e9fba935e03bcc13fed1.roa
File:                     7b95a4575ef612800b22e9fba935e03bcc13fed1.roa (raw, json)
Hash identifier:          qXs8t16uHNMnb9epLyJhOWfpFBUdrOGhIFWUdub1nMs=
Subject key identifier:   42:7F:50:83:2B:73:39:DA:EC:AF:1D:EC:5F:47:D7:2C:20:0A:54:87
Certificate issuer:       /CN=580bb6ad5a7e41db42c5a6f5b88efe8aef60c064
Certificate serial:       1C1B3A
Authority key identifier: C6:09:F3:88:24:4D:CB:B7:E6:06:F6:F4:2D:68:B2:C8:4F:56:6D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/7b95a4575ef612800b22e9fba935e03bcc13fed1.roa
Signing time:             Wed 13 Sep 2023 18:50:10 +0000
ROA not before:           Tue 12 Sep 2023 18:50:10 +0000
ROA not after:            Sat 13 Sep 2025 18:50:10 +0000
asID:                     267798
IP address blocks:        45.173.16.0/22 maxlen: 24
                          2803:3fa0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 10 Jan 2024 19:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1841978 (0x1c1b3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580bb6ad5a7e41db42c5a6f5b88efe8aef60c064
        Validity
            Not Before: Sep 12 18:50:10 2023 GMT
            Not After : Sep 13 18:50:10 2025 GMT
        Subject: CN=7b95a4575ef612800b22e9fba935e03bcc13fed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:e9:32:1f:49:79:9b:2e:95:68:d0:9a:52:
                    5c:be:de:06:12:a4:0b:c3:fb:56:2d:28:f5:fd:19:
                    a4:70:56:07:5b:d6:1e:f4:a6:2d:96:9f:d8:79:9c:
                    4f:c6:66:af:6c:da:02:28:af:0f:3c:b3:37:65:43:
                    52:c4:c6:f9:cc:3f:07:da:92:9e:ac:3a:d6:20:33:
                    f8:03:9c:06:23:2a:cf:32:29:f1:45:ce:02:d2:8a:
                    97:ba:99:74:e8:6e:88:f8:df:9b:ee:dd:a3:e4:7e:
                    0d:31:84:76:b9:52:08:24:56:6c:7e:5d:d9:b8:92:
                    01:c6:b5:78:db:ad:d7:22:fd:db:f1:a3:04:67:7c:
                    a9:96:30:7e:9e:11:bc:9e:43:ec:be:80:a8:67:ef:
                    cf:a5:af:c2:47:83:e0:04:92:ee:7b:f3:81:f1:fe:
                    d9:a4:d2:07:79:9f:b8:7b:cf:ec:64:66:e5:59:26:
                    61:20:7d:d8:ea:38:37:3c:7d:cd:f7:4c:be:85:39:
                    f6:00:a7:fb:e5:40:b4:4c:b5:fe:1a:a7:a2:ac:21:
                    19:fa:5f:60:04:e9:d4:68:5e:fa:01:a5:61:b9:a9:
                    c3:45:42:10:f1:1d:4d:07:15:57:8b:55:bb:2f:4d:
                    8e:2e:35:ff:61:6d:ba:6a:0e:ca:66:bc:ae:37:34:
                    20:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7F:50:83:2B:73:39:DA:EC:AF:1D:EC:5F:47:D7:2C:20:0A:54:87
            X509v3 Authority Key Identifier:
                keyid:C6:09:F3:88:24:4D:CB:B7:E6:06:F6:F4:2D:68:B2:C8:4F:56:6D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/7b95a4575ef612800b22e9fba935e03bcc13fed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.16.0/22
                IPv6:
                  2803:3fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:45:64:0f:9c:ec:c0:82:24:71:79:1a:4f:85:f3:f7:9a:a7:
         b0:34:39:aa:0a:9e:ba:87:a0:7e:c8:88:cd:eb:a8:bd:61:72:
         75:69:e7:46:6a:52:28:52:fd:5c:47:fd:93:d1:3f:4d:4d:8c:
         00:12:94:31:41:17:39:24:03:b4:b0:bd:cf:3a:e3:5b:fb:ca:
         eb:44:e9:b9:67:89:5c:46:fe:d9:b3:40:0d:30:d2:78:f3:a8:
         d7:f3:67:a8:92:c5:66:ff:51:15:8f:17:3c:22:6f:e9:7e:bd:
         6a:a2:ac:b4:8e:87:64:d1:a0:13:2e:85:c6:96:ce:b4:13:46:
         61:24:47:5e:6d:7b:f9:ca:4d:b9:30:af:f4:8e:85:b7:2f:3a:
         5d:89:09:c2:1c:32:df:06:5f:03:4c:f4:02:51:ff:33:d8:ed:
         c5:34:2b:e4:84:c8:f0:7f:64:9b:0b:42:10:0c:7e:02:1b:fd:
         b9:87:50:03:a2:f5:34:db:8d:0a:f6:87:38:a7:70:3d:e4:f7:
         42:8d:8c:c6:e9:b2:44:a3:a2:da:1e:65:29:7e:f5:6d:67:00:
         e0:cd:1f:1e:c5:2a:ea:f7:6d:6f:ea:20:58:eb:16:12:89:e4:
         71:66:84:68:94:3d:55:27:4b:e4:26:7c:39:bc:1c:ce:ae:f0:
         55:29:a3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----