Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/797c21b0-a0c4-448d-84a6-35f179b73e46/eaf6ab53f66389693fbde96febbd18f1ade343e9.roa
File:                     eaf6ab53f66389693fbde96febbd18f1ade343e9.roa (raw, json)
Hash identifier:          HSDUHCb37ScLevjJyTDmuPbNS/4ucoRLbsOShYHpbrc=
Subject key identifier:   EA:B3:86:A0:70:28:92:EA:79:07:D7:98:ED:0C:B6:75:E3:E7:7F:7D
Certificate issuer:       /CN=4445cb9beea798f0fcde4339a7ff23524d49bf44
Certificate serial:       1119AF
Authority key identifier: 12:C5:1C:F8:D8:09:FF:70:36:76:21:8F:19:93:0F:62:AC:25:BA:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4445cb9beea798f0fcde4339a7ff23524d49bf44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/797c21b0-a0c4-448d-84a6-35f179b73e46/eaf6ab53f66389693fbde96febbd18f1ade343e9.roa
Signing time:             Sun 21 May 2023 21:47:45 +0000
ROA not before:           Sat 20 May 2023 21:47:45 +0000
ROA not after:            Wed 21 May 2025 21:47:45 +0000
asID:                     64108
IP address blocks:        45.226.168.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120687 (0x1119af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4445cb9beea798f0fcde4339a7ff23524d49bf44
        Validity
            Not Before: May 20 21:47:45 2023 GMT
            Not After : May 21 21:47:45 2025 GMT
        Subject: CN=eaf6ab53f66389693fbde96febbd18f1ade343e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4f:be:c6:b3:25:9e:b5:20:a1:49:7b:8e:fd:
                    25:94:67:fc:4a:ba:87:27:d5:92:ce:03:64:de:91:
                    27:c9:ee:0a:b4:0b:f3:16:ab:d5:73:0b:25:5a:90:
                    93:6c:96:5b:ae:f1:44:be:92:3c:5a:fa:c2:b4:b8:
                    9c:d3:4a:bd:2c:e6:26:b0:54:3b:00:68:dd:2b:c4:
                    44:02:e8:ab:e1:5e:5a:f8:49:3f:61:00:ee:90:22:
                    eb:84:aa:d3:9e:9f:da:9a:e0:f5:70:ed:ad:2b:b7:
                    ac:fd:9b:79:a2:9e:54:ff:cf:9b:84:a9:bf:85:11:
                    80:f4:e6:c4:f3:0a:39:7d:82:91:72:73:6b:2c:1a:
                    ee:e2:0d:2f:23:01:34:c3:21:5f:5b:90:68:06:f1:
                    aa:ac:aa:6d:11:e6:69:ca:11:64:d3:0b:f1:06:77:
                    95:68:d4:a5:8e:8f:0d:80:ff:66:45:12:f6:37:94:
                    c2:74:e9:a6:e5:b0:b2:ce:ea:74:c9:37:9c:96:74:
                    ae:3e:7c:64:20:9a:3c:c0:3d:5c:a1:a9:66:9f:dc:
                    24:a6:e2:9c:8e:e9:36:3d:34:87:c4:ad:18:e7:cf:
                    a7:ec:b5:22:2e:e5:cd:67:51:32:37:40:8e:64:65:
                    0c:38:d8:79:29:74:d9:82:50:1a:77:ce:6b:9a:eb:
                    f4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B3:86:A0:70:28:92:EA:79:07:D7:98:ED:0C:B6:75:E3:E7:7F:7D
            X509v3 Authority Key Identifier:
                keyid:12:C5:1C:F8:D8:09:FF:70:36:76:21:8F:19:93:0F:62:AC:25:BA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4445cb9beea798f0fcde4339a7ff23524d49bf44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/797c21b0-a0c4-448d-84a6-35f179b73e46/eaf6ab53f66389693fbde96febbd18f1ade343e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/797c21b0-a0c4-448d-84a6-35f179b73e46/4445cb9beea798f0fcde4339a7ff23524d49bf44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:1a:f5:6f:fb:b1:e4:77:94:63:9b:96:7f:08:8e:8c:b7:01:
         ad:d7:67:0d:0d:2a:75:28:8d:e3:15:77:59:e1:20:3b:23:1d:
         7f:17:39:62:36:8b:e6:b1:40:bf:34:66:fd:ef:1f:38:44:ba:
         95:d1:9b:17:8c:5f:89:61:84:94:a2:09:e4:66:81:a6:94:a3:
         9a:bc:2a:1a:a5:a1:4b:aa:b4:b2:fc:d4:02:a0:f2:a8:93:15:
         59:04:68:bb:9b:9c:b9:cf:77:a9:44:d7:5b:10:18:f2:b9:ae:
         9b:e5:c1:78:07:95:ad:53:c2:73:74:80:c0:5c:5e:25:99:91:
         14:fa:0a:2c:84:e2:1f:11:26:7c:c5:67:86:df:b8:11:4c:7c:
         90:cb:9d:69:ac:a7:ee:37:39:e9:3f:90:11:df:fa:b1:ab:b2:
         d3:89:5c:0e:0c:eb:40:13:3f:4f:0c:eb:f3:08:1a:cf:6f:35:
         2b:59:5a:83:84:e9:f3:fe:ad:6f:92:b3:b2:57:5e:74:20:89:
         fa:ee:9a:35:e0:05:f0:1b:62:68:1f:ca:4e:a7:fd:86:c2:13:
         3c:34:fe:73:c5:ef:47:d8:57:d1:48:3e:ac:c5:a8:e0:52:57:
         9a:ae:d4:92:62:d8:a0:8e:64:5c:94:07:6e:eb:29:e2:92:9b:
         57:95:41:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----