Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/b6127d5e248e4d546c7e8b290c160c55007fff08.roa
File:                     b6127d5e248e4d546c7e8b290c160c55007fff08.roa (raw, json)
Hash identifier:          bZZsdv4Mu0bB76+2U/fHTQvyx83+0HYo//uQHSdnT7I=
Subject key identifier:   45:BD:5F:88:FB:A1:C6:B9:37:EE:DE:70:FB:1B:87:85:EE:7B:EE:35
Certificate issuer:       /CN=84a7a446b5912a684e23e2c1eb2619b25184f613
Certificate serial:       1A116F
Authority key identifier: 93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/b6127d5e248e4d546c7e8b290c160c55007fff08.roa
Signing time:             Wed 10 Aug 2022 17:04:42 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     265775
IP address blocks:        45.231.148.0/24 maxlen: 24
                          45.231.149.0/24 maxlen: 24
                          45.231.150.0/24 maxlen: 24
                          2803:cb20:1::/48 maxlen: 48
                          2803:cb20::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708399 (0x1a116f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84a7a446b5912a684e23e2c1eb2619b25184f613
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=b6127d5e248e4d546c7e8b290c160c55007fff08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:b1:de:da:99:31:0f:13:82:b7:ff:4b:98:
                    01:03:6c:b1:44:9e:cf:bf:ee:d0:35:b3:99:82:09:
                    66:d7:6f:4f:94:d3:9a:a5:37:fe:cf:5d:74:98:bf:
                    88:11:be:85:ab:60:5e:ba:37:4c:34:55:65:5f:90:
                    73:89:ec:ac:14:12:fb:27:97:f4:4e:ca:ed:e7:8c:
                    43:4d:d0:a3:47:a9:63:7f:93:f2:51:19:d4:33:1b:
                    14:93:0c:e0:80:d8:06:3d:bd:71:5d:1c:1c:4a:46:
                    08:92:dd:23:09:1f:0a:14:88:77:9c:78:f8:17:80:
                    c4:99:0a:f5:1d:54:65:69:69:f3:b0:a8:66:08:d5:
                    30:fa:86:29:fe:b9:1d:30:2a:16:d4:e6:bc:2f:2e:
                    04:ae:15:e1:f7:df:1d:51:56:5b:c1:0e:4a:16:cd:
                    55:5a:a9:89:e0:da:0e:1c:73:66:12:11:b3:e6:54:
                    6c:49:a8:bc:3e:30:cd:49:ea:50:57:e3:d5:0f:ab:
                    cd:cb:77:39:07:ea:51:62:9d:4e:a3:5e:70:da:2e:
                    04:63:a9:d6:39:b2:24:3b:22:ec:c5:a9:43:6f:cc:
                    8f:bd:7f:21:4d:aa:d4:e6:78:69:1b:6d:6f:81:fa:
                    52:4c:b0:7f:b3:b7:05:2d:d9:9d:11:06:61:c8:33:
                    82:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BD:5F:88:FB:A1:C6:B9:37:EE:DE:70:FB:1B:87:85:EE:7B:EE:35
            X509v3 Authority Key Identifier:
                keyid:93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/b6127d5e248e4d546c7e8b290c160c55007fff08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/84a7a446b5912a684e23e2c1eb2619b25184f613.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.148.0-45.231.150.255
                IPv6:
                  2803:cb20::/47

    Signature Algorithm: sha256WithRSAEncryption
         5d:c0:e5:83:79:c5:24:89:a1:b9:20:d3:70:dd:1e:b4:74:2f:
         8d:39:bf:4a:3f:92:0f:37:47:87:d3:41:04:76:c8:86:37:62:
         2a:9b:9d:3f:19:34:90:83:f6:ce:20:4e:7c:85:5d:f4:9b:a7:
         9d:9c:09:21:ef:40:8d:60:45:cf:ab:13:18:0f:66:0b:a7:74:
         dd:1d:f8:d8:43:b5:b1:1c:87:d6:4f:39:18:e5:d8:1f:bf:1b:
         60:71:ea:df:cb:05:a6:b5:f2:66:60:ca:63:38:7c:a1:f1:13:
         d1:b5:67:2e:bb:bb:0c:42:0a:37:13:a6:1a:d5:ca:ac:91:6d:
         7b:ff:c8:4c:3f:b2:cc:5e:cd:39:8f:bd:3a:a0:db:b3:9b:c0:
         54:23:2f:03:15:b6:dd:66:f4:9b:0d:ce:92:94:5d:53:03:ab:
         8d:3d:37:20:4d:10:b8:5b:ea:a0:b0:09:17:e4:fb:06:e8:39:
         07:dd:4b:9a:97:1a:98:94:7c:07:37:f8:f6:b2:bf:9d:2f:5e:
         7d:7e:79:f4:f8:76:96:27:92:bc:c9:93:e4:a1:fb:7d:a7:12:
         bb:0c:08:ba:2c:fd:57:26:a4:a5:a8:e2:fd:58:c5:d4:31:05:
         39:b6:4b:94:57:f4:2c:22:85:08:6f:66:15:70:17:e7:6e:05:
         16:34:0d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----