Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/7ed66e076fc0299671dfb5749e208e2201c5607e.roa
File:                     7ed66e076fc0299671dfb5749e208e2201c5607e.roa (raw, json)
Hash identifier:          qgmtNjcw4nNrZ9bPMbYiiDhmgNd7GXl87VC1t/2Otds=
Subject key identifier:   C2:CB:19:B7:B4:98:03:02:DA:65:CF:9E:70:22:91:22:91:1F:CA:DB
Certificate issuer:       /CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Certificate serial:       141F6E
Authority key identifier: 84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/7ed66e076fc0299671dfb5749e208e2201c5607e.roa
Signing time:             Sun 14 Jan 2024 07:30:02 +0000
ROA not before:           Sun 14 Jan 2024 07:30:02 +0000
ROA not after:            Tue 13 Jan 2026 07:30:02 +0000
asID:                     23059
IP address blocks:        45.227.88.0/22 maxlen: 24
                          2801:114::/44 maxlen: 48
                          2803:9310::/32 maxlen: 48

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 03:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318766 (0x141f6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
        Validity
            Not Before: Jan 14 07:30:02 2024 GMT
            Not After : Jan 13 07:30:02 2026 GMT
        Subject: CN=7ed66e076fc0299671dfb5749e208e2201c5607e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:3e:79:f5:e3:9f:20:5c:46:87:8c:15:8f:
                    61:0d:88:5c:36:55:3a:8b:91:05:dc:88:6f:75:59:
                    9b:33:a8:b8:6c:32:de:c4:40:32:f7:b5:7b:51:4f:
                    1c:20:b5:60:e9:cd:26:44:90:28:32:8a:6f:8d:74:
                    4d:7f:fe:f1:ec:a5:bc:84:70:bc:da:6b:5c:13:df:
                    c4:d7:97:c8:75:50:f9:85:fc:db:c6:c7:2b:c6:c8:
                    12:52:f2:a4:10:96:a4:8e:ce:6c:0a:e7:95:22:0c:
                    cd:56:40:72:98:87:80:dc:ce:6a:e9:15:52:88:d4:
                    f7:93:2d:b4:39:0d:4c:7f:37:6c:ee:db:29:40:94:
                    e2:6a:15:0c:13:73:dd:da:16:ab:21:38:19:73:07:
                    a0:ce:9c:69:19:af:be:ff:18:45:75:ce:87:8a:d0:
                    9d:07:b5:89:e2:ac:d7:9a:db:00:03:2c:fe:89:cf:
                    c6:f2:cf:87:a6:f0:8f:51:a8:f9:a3:04:20:c8:db:
                    7c:75:31:c0:c4:2a:0f:37:b0:b7:f9:9f:7e:c3:e5:
                    35:8f:27:ce:7b:06:1e:58:1f:7b:b4:7c:33:26:f0:
                    ca:51:f0:7b:b3:8e:1f:4b:62:a0:54:e5:06:90:b7:
                    d3:2e:25:d4:c4:8b:fd:b7:3b:41:3b:25:4d:5b:7e:
                    7c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CB:19:B7:B4:98:03:02:DA:65:CF:9E:70:22:91:22:91:1F:CA:DB
            X509v3 Authority Key Identifier:
                keyid:84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/7ed66e076fc0299671dfb5749e208e2201c5607e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.88.0/22
                IPv6:
                  2801:114::/44
                  2803:9310::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:44:df:4f:27:19:a1:79:4d:89:d8:24:4d:d1:10:2c:a7:53:
         76:8a:ec:f8:9c:01:91:46:41:20:02:52:8e:08:bb:2c:0b:02:
         4a:e0:16:81:63:bb:4b:fd:9f:fc:0f:11:5b:b9:3c:34:68:21:
         15:2a:25:bc:07:16:cc:7c:b9:51:ef:d8:8e:03:28:6a:69:2c:
         f2:de:2e:fc:99:8a:9f:ce:ea:ea:60:96:17:f8:8a:95:2c:5f:
         72:e0:40:17:02:a2:e5:48:23:f6:d6:2a:ec:76:0d:f3:69:96:
         91:6e:a3:ec:fc:c3:d8:61:1e:74:93:a5:61:14:8f:5f:d4:26:
         33:23:d8:8d:15:e0:db:6b:7f:8b:04:c0:a9:6c:0f:1c:91:e0:
         26:c1:21:f3:dc:1e:22:d6:b2:ab:50:60:af:fe:95:42:39:aa:
         0f:8e:d6:3e:ae:d2:bb:d1:dd:b6:ae:ee:7e:2c:3f:9b:ca:a8:
         70:50:2d:96:c4:18:28:5c:6c:74:98:ca:71:f7:96:c3:33:9b:
         94:18:9c:04:0c:45:39:72:9c:0e:0f:10:37:32:e2:66:8d:97:
         ba:3a:22:a6:5c:c1:02:30:1a:8a:23:8a:21:f5:cd:0c:e1:06:
         ee:af:3a:26:b6:1c:94:70:4b:0c:d1:c9:8e:71:34:c3:be:bd:
         2e:4c:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----