Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8b763bd2-def3-4d86-a8ee-0e53724ce3af/98184142b7a1c94f8f21e18d2f40117b699ab566.roa
File:                     98184142b7a1c94f8f21e18d2f40117b699ab566.roa (raw, json)
Hash identifier:          GJv3j9gcsFez6aY0cID80Dv39ITstXcAj5KPIbVTpwY=
Subject key identifier:   B1:A3:CF:C7:17:E3:47:D7:0D:3B:BE:D3:4A:16:BE:87:58:44:73:A9
Certificate issuer:       /CN=d18ca479c0e0e5c02374b1040c1143e21000ffd2
Certificate serial:       231513
Authority key identifier: 84:89:21:42:45:2B:AE:18:06:FA:94:73:DF:69:CF:64:D9:CE:C3:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d18ca479c0e0e5c02374b1040c1143e21000ffd2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8b763bd2-def3-4d86-a8ee-0e53724ce3af/98184142b7a1c94f8f21e18d2f40117b699ab566.roa
Signing time:             Tue 12 Sep 2023 15:09:58 +0000
ROA not before:           Mon 11 Sep 2023 15:09:58 +0000
ROA not after:            Fri 12 Sep 2025 15:09:58 +0000
asID:                     265817
IP address blocks:        45.70.8.0/23 maxlen: 24
                          45.70.8.0/22 maxlen: 24
                          2803:6820::/32 maxlen: 35

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2299155 (0x231513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18ca479c0e0e5c02374b1040c1143e21000ffd2
        Validity
            Not Before: Sep 11 15:09:58 2023 GMT
            Not After : Sep 12 15:09:58 2025 GMT
        Subject: CN=98184142b7a1c94f8f21e18d2f40117b699ab566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:5a:7e:df:20:e4:7a:5f:5b:9f:63:06:28:
                    72:a7:f0:3c:3b:cc:67:2b:7e:73:d6:04:47:a5:ca:
                    81:18:99:3d:53:34:fe:a4:d2:e2:d6:f9:fd:c6:e9:
                    85:0a:2b:8f:6b:c1:48:4d:92:cc:c3:0b:a0:7b:5e:
                    92:02:aa:fc:69:02:d8:00:f6:53:6f:f6:04:c6:ce:
                    02:24:43:b8:25:5d:d3:00:62:61:6b:92:a0:59:b9:
                    6e:01:06:7c:c8:0e:3a:2b:fe:c1:e5:b6:83:83:ed:
                    ed:7a:bb:5c:a2:d1:fe:a4:09:c1:fe:ba:95:8c:6f:
                    29:69:7b:8f:26:fb:82:19:e6:1b:6b:86:45:6d:5e:
                    a6:2f:52:8e:70:5b:a0:77:73:21:21:e0:4e:80:33:
                    4c:d3:e6:d3:34:4e:d3:a8:d0:6a:5b:01:69:37:1d:
                    e6:6e:2d:34:6f:b2:82:2b:5e:5c:da:b0:3f:26:50:
                    77:69:72:6a:02:1c:46:26:97:f6:34:42:9a:c3:4c:
                    f5:28:ed:c5:69:1b:b8:74:8f:be:4c:e8:86:5d:b2:
                    2b:e5:32:3d:40:c1:7b:44:63:79:9d:de:49:7c:07:
                    f5:1a:2c:75:e5:46:a3:1c:f1:5a:31:ea:d7:0b:3e:
                    ce:01:60:88:97:83:cf:3e:e7:24:ed:6f:3f:61:e0:
                    6c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A3:CF:C7:17:E3:47:D7:0D:3B:BE:D3:4A:16:BE:87:58:44:73:A9
            X509v3 Authority Key Identifier:
                keyid:84:89:21:42:45:2B:AE:18:06:FA:94:73:DF:69:CF:64:D9:CE:C3:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d18ca479c0e0e5c02374b1040c1143e21000ffd2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8b763bd2-def3-4d86-a8ee-0e53724ce3af/98184142b7a1c94f8f21e18d2f40117b699ab566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8b763bd2-def3-4d86-a8ee-0e53724ce3af/d18ca479c0e0e5c02374b1040c1143e21000ffd2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.8.0/22
                IPv6:
                  2803:6820::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:c9:8e:05:10:64:ce:bb:a6:50:f9:2b:02:54:d4:75:d2:63:
         af:7f:fc:ad:9d:1e:d6:66:d9:c1:ac:62:5f:d9:58:96:90:3c:
         db:69:cd:f9:61:d6:88:b0:50:21:d3:33:fb:39:e7:dc:6d:06:
         06:ce:f4:94:1b:12:f1:ac:8e:18:84:8f:f1:d6:aa:f5:8d:1b:
         a5:fa:08:7b:cf:49:41:36:a6:0f:c1:e8:98:da:9e:ee:77:b0:
         62:e0:58:60:09:b0:52:1e:c1:92:32:2c:35:01:b2:f2:e0:27:
         58:ca:04:5c:ac:39:be:c9:44:c9:cb:52:9f:a5:40:96:45:ac:
         83:23:d0:a5:9c:95:e2:ab:d1:52:c0:fc:a7:50:cb:c9:80:4a:
         e6:bb:86:5d:d2:7d:da:f4:02:58:11:bc:d2:b6:2f:5c:9c:e6:
         e4:b2:a8:84:b3:f2:ef:71:a0:34:b2:4d:e1:d6:10:66:9a:60:
         a0:d5:1e:09:b5:2e:9b:48:fb:a3:30:cb:98:62:ac:f2:f2:ac:
         7a:5f:b8:19:bb:f5:10:33:ef:6b:bd:bb:ee:4a:23:be:17:32:
         27:f9:51:5e:7b:6b:8b:9b:0a:41:56:b0:2a:46:3c:00:c8:8f:
         83:51:ac:21:b9:34:44:b1:31:04:81:21:a3:b0:d6:93:d7:1d:
         b4:72:a2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----