Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/4effc2c41ce6debe0b360cbec22c040930230523.roa
File:                     4effc2c41ce6debe0b360cbec22c040930230523.roa (raw, json)
Hash identifier:          sBAfujVj6BNZKoW5Evf1l1xIf3OMqDZci/m3FgPCum8=
Subject key identifier:   89:F6:C8:E0:F8:47:35:14:CF:D2:08:C5:12:42:3C:AB:5C:8E:43:B1
Certificate issuer:       /CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
Certificate serial:       1611FD
Authority key identifier: 05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/4effc2c41ce6debe0b360cbec22c040930230523.roa
Signing time:             Sat 16 Sep 2023 08:30:01 +0000
ROA not before:           Fri 15 Sep 2023 08:30:01 +0000
ROA not after:            Sun 14 Sep 2025 08:30:01 +0000
asID:                     267857
IP address blocks:        45.177.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1446397 (0x1611fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
        Validity
            Not Before: Sep 15 08:30:01 2023 GMT
            Not After : Sep 14 08:30:01 2025 GMT
        Subject: CN=4effc2c41ce6debe0b360cbec22c040930230523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:1a:85:cc:49:47:bd:6c:ad:34:d0:e1:b7:
                    bf:ad:31:f8:a5:0d:35:c4:45:89:d5:e1:23:b6:f4:
                    56:d6:ba:3c:38:ab:3d:c6:28:68:5a:0a:fa:36:64:
                    d3:8a:f7:f3:f7:9e:29:69:64:9e:2a:1a:44:70:cd:
                    44:ea:96:3e:16:83:3f:d9:f4:93:b6:fc:7b:bc:db:
                    60:10:05:51:be:ff:cb:78:be:f6:3a:88:a7:a0:ff:
                    17:83:0d:f1:1b:db:0c:4e:72:4f:ad:d6:f8:54:93:
                    a8:ca:7e:30:78:14:93:80:18:a5:cd:5d:fe:03:19:
                    82:8f:88:e6:c2:ad:8f:cc:4f:c0:d1:6b:fe:4d:78:
                    3d:6b:aa:c4:b2:e8:0b:92:77:e3:e8:a6:45:fb:a3:
                    c5:2b:cc:d3:1c:03:6c:51:2c:82:10:fa:c7:99:df:
                    3e:a7:f5:53:79:77:7b:1a:7f:7d:53:c1:f5:31:cd:
                    76:c9:2a:73:00:4a:f5:65:6a:6b:8f:c0:f0:7c:fb:
                    e7:96:09:54:a8:be:b7:53:12:e6:fc:c5:85:5a:bf:
                    98:3f:81:79:ae:23:6a:70:f0:90:b3:87:d2:97:75:
                    fe:c4:72:af:f2:b0:14:72:2a:ea:1b:19:27:d0:f9:
                    af:58:8b:6c:3e:1e:c5:04:8e:80:ba:70:eb:57:15:
                    3f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F6:C8:E0:F8:47:35:14:CF:D2:08:C5:12:42:3C:AB:5C:8E:43:B1
            X509v3 Authority Key Identifier:
                keyid:05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/4effc2c41ce6debe0b360cbec22c040930230523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d9:c2:6a:86:2f:e3:39:6f:57:1c:04:d4:c1:91:2f:6c:51:
         b9:2c:49:69:39:bf:e6:82:12:d3:aa:34:e3:91:00:ee:9d:4e:
         44:e5:34:41:ca:40:18:38:75:37:a3:9c:68:d7:fc:bc:0b:25:
         7b:a4:3f:0d:f1:bb:5d:60:e0:d2:1b:0e:fb:88:ba:bf:ad:21:
         84:04:8e:78:cd:bb:c3:47:c9:e1:c2:88:96:60:c1:98:25:7f:
         21:05:34:8b:00:2e:0a:7e:b7:f0:67:2a:8b:4c:76:39:e0:af:
         d1:ea:b8:f1:96:07:5b:30:17:1d:7d:58:88:91:f2:3b:e8:50:
         2f:d8:3a:98:9c:1e:95:3b:ce:f5:eb:7b:da:c7:0c:cf:ed:6b:
         59:29:ed:49:6f:f8:55:19:3b:f1:58:f5:e3:aa:42:11:d9:69:
         96:6e:6e:0f:56:cc:8e:07:18:36:88:ed:de:b2:a9:ec:89:55:
         d9:d4:2b:ce:9a:b7:8d:2d:ca:b9:6e:c6:28:e5:15:92:d0:bd:
         80:32:37:da:43:49:a0:0c:84:72:cf:bf:c9:73:31:fb:fe:f3:
         4e:c1:7c:bc:9c:bd:f7:b0:e8:96:dc:ae:9c:d6:58:f0:00:a5:
         4c:db:73:6e:77:80:ba:e8:70:a2:f1:98:63:8a:42:da:06:73:
         f9:1f:22:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----