Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/b0065f93d759d5e1eef25f62190c8cc6c65bd8ff.roa
File:                     b0065f93d759d5e1eef25f62190c8cc6c65bd8ff.roa (raw, json)
Hash identifier:          cFaytyDpqQ1vvATFa4pgtp/Gt4Mz08qGOm3a/Bk2xuQ=
Subject key identifier:   91:E0:8C:E8:6C:A2:57:A3:8D:98:1E:D6:BB:22:5E:A6:DD:21:9F:57
Certificate issuer:       /CN=84a7a446b5912a684e23e2c1eb2619b25184f613
Certificate serial:       1896BE
Authority key identifier: 93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/b0065f93d759d5e1eef25f62190c8cc6c65bd8ff.roa
Signing time:             Wed 15 Jun 2022 00:17:03 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     265775
IP address blocks:        45.231.148.0/24 maxlen: 24
                          45.231.149.0/24 maxlen: 24
                          45.231.150.0/24 maxlen: 24
                          2803:cb20:1::/48 maxlen: 48
                          2803:cb20::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611454 (0x1896be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84a7a446b5912a684e23e2c1eb2619b25184f613
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=b0065f93d759d5e1eef25f62190c8cc6c65bd8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ca:c4:e1:a3:53:21:d1:66:54:a6:89:d5:74:
                    25:f6:97:00:40:b1:db:61:eb:27:ec:bb:2a:f3:8e:
                    47:d2:ec:19:94:75:08:0e:6d:28:08:b7:40:df:67:
                    c4:1c:9b:bc:c5:88:52:26:e5:b9:a8:8e:7a:b0:73:
                    f1:69:60:03:22:bd:dc:a3:6a:69:90:5d:3d:53:72:
                    5a:9c:b2:2c:50:e3:d8:3d:c9:79:75:cc:4e:ad:0c:
                    ee:53:b8:ee:29:66:ec:e7:4b:fb:b9:5f:0e:81:e2:
                    19:a0:68:53:1c:6b:ca:b0:4e:f6:7f:8c:40:e1:b4:
                    f3:77:85:01:de:94:4f:ed:b1:1e:24:86:8c:78:30:
                    bf:ea:2e:81:d1:7c:5e:07:d1:de:53:b8:f5:c2:13:
                    8d:e9:b8:cd:86:2e:cc:5a:93:ad:74:21:c0:34:50:
                    d0:cd:48:93:7e:e5:46:94:91:a4:db:59:72:9c:ea:
                    d1:5b:71:84:b7:c5:25:76:e9:8d:9d:fb:6b:0c:0f:
                    61:9e:b3:79:b0:f0:56:53:30:5f:07:46:db:6f:67:
                    13:81:62:fc:8c:2f:78:26:42:f4:73:a5:f3:c0:f8:
                    fb:97:4c:d6:5a:69:81:8d:70:f8:c7:3f:af:d3:f6:
                    4a:d8:dc:57:ed:62:0a:e6:85:ea:71:e0:76:92:40:
                    fc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E0:8C:E8:6C:A2:57:A3:8D:98:1E:D6:BB:22:5E:A6:DD:21:9F:57
            X509v3 Authority Key Identifier:
                keyid:93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/b0065f93d759d5e1eef25f62190c8cc6c65bd8ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/84a7a446b5912a684e23e2c1eb2619b25184f613.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.148.0-45.231.150.255
                IPv6:
                  2803:cb20::/47

    Signature Algorithm: sha256WithRSAEncryption
         4a:b5:5a:e3:ce:43:53:cf:31:a0:bd:08:1f:ba:95:f6:2a:b7:
         b1:ee:14:2d:8a:a3:c5:5c:ea:e8:19:1e:2e:42:67:b3:d1:d4:
         3f:47:be:d7:9a:d9:23:de:09:98:53:cd:81:af:a9:bc:a2:33:
         0c:86:31:d8:78:c7:3a:53:b4:2c:c2:1c:45:24:e9:45:78:4a:
         ad:be:88:89:48:0a:f6:c3:b3:4c:47:f0:2e:3b:32:27:d6:1a:
         a1:0a:90:00:a9:96:6d:7e:8a:26:ba:e6:dc:43:05:5d:a2:92:
         ef:11:ac:3e:45:3d:96:8d:6f:ac:41:11:54:96:64:43:05:4b:
         f8:77:99:76:66:55:da:55:6c:7e:d9:d9:2b:6b:37:3d:35:f9:
         7b:10:f2:7f:a5:4c:04:84:86:86:ec:df:95:71:7c:62:b7:60:
         40:02:83:7c:f0:60:f1:8c:a9:be:6c:1c:6d:77:56:56:0a:45:
         ae:8c:fd:a0:ef:8f:97:4b:b6:62:32:96:46:bb:50:2c:e8:6f:
         af:8f:4d:0d:64:6e:09:65:40:a2:d3:73:10:89:3a:60:ec:a3:
         48:4e:d5:39:37:d2:02:47:e9:56:ea:b8:a5:12:79:c5:7e:0a:
         63:bc:35:d0:05:d8:99:89:1b:a3:b8:1d:49:6f:0b:77:3b:3e:
         a8:39:58:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----