Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/a02eb7d281f4df3ad36bb4a93b7e5f38b3f98c65.roa
File:                     a02eb7d281f4df3ad36bb4a93b7e5f38b3f98c65.roa (raw, json)
Hash identifier:          8n0JNMCAjnBpRMegmaBx/WXJhp3L9OoqdSZravkQg+4=
Subject key identifier:   2A:12:0D:6A:57:A7:1E:BF:B8:76:C4:A8:72:03:7F:2A:AA:5D:DA:FA
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1D0AFA
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/a02eb7d281f4df3ad36bb4a93b7e5f38b3f98c65.roa
Signing time:             Thu 01 Dec 2022 17:10:19 +0000
ROA not before:           Fri 21 Oct 2022 14:28:37 +0000
ROA not after:            Sat 26 Oct 2024 14:28:37 +0000
asID:                     272074
IP address blocks:        45.71.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1903354 (0x1d0afa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Oct 21 14:28:37 2022 GMT
            Not After : Oct 26 14:28:37 2024 GMT
        Subject: CN=a02eb7d281f4df3ad36bb4a93b7e5f38b3f98c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fb:6b:aa:29:9c:01:36:98:d5:b0:1c:8a:72:
                    c1:8e:ad:e8:b9:6b:1d:0f:d6:1b:0e:88:43:2d:53:
                    39:94:45:3a:01:ec:33:da:ef:59:a9:a8:36:36:63:
                    f9:c3:9d:fb:78:34:1a:67:97:58:7e:95:13:92:bd:
                    2c:2c:ba:e1:55:45:50:fb:7c:bb:d5:fb:b6:6d:0c:
                    7f:2a:28:e9:0d:75:7b:58:c3:5a:34:49:71:ec:ac:
                    a1:c3:97:1b:38:32:63:b6:ed:13:3e:9e:06:7f:1e:
                    90:ab:38:20:0c:8e:bc:32:7e:b3:b3:d0:33:09:29:
                    6a:47:49:3d:36:46:d9:8a:a3:e1:a8:28:76:2f:a1:
                    6f:17:d7:06:8d:0c:48:bc:48:d7:f7:80:e1:7b:47:
                    17:b1:c1:10:35:fc:f3:37:4b:0e:46:2d:58:c4:a6:
                    e0:6a:70:bd:de:43:98:b9:c1:69:c4:84:0a:9a:10:
                    58:03:fa:0b:12:60:5f:06:7c:66:e4:78:d6:91:6a:
                    0c:58:94:37:25:51:8a:99:fd:6f:e4:e5:04:6b:f8:
                    ed:c5:b9:23:4b:2b:d0:96:66:62:d4:99:07:6a:5c:
                    8c:56:f1:f4:33:a6:c6:28:8c:97:b2:75:e1:17:66:
                    2a:cd:46:d2:8f:ab:23:2e:36:78:e6:36:5a:36:49:
                    43:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:12:0D:6A:57:A7:1E:BF:B8:76:C4:A8:72:03:7F:2A:AA:5D:DA:FA
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/a02eb7d281f4df3ad36bb4a93b7e5f38b3f98c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:99:6d:8d:d3:c4:cc:c4:57:76:f4:5a:73:c8:c1:b1:2a:ec:
         7c:6a:3c:b3:c5:30:1d:77:ea:a6:7e:7e:7a:03:1c:8d:66:c1:
         dc:4d:1c:29:98:8b:d5:1e:87:7a:b1:d5:23:4d:7c:3f:f4:f5:
         5b:6c:91:8a:f1:98:4c:ae:0f:8d:44:f3:2a:5b:86:6f:2a:33:
         25:04:45:2b:89:55:86:cd:ea:db:cb:8e:f2:72:a5:69:06:8b:
         96:06:57:3d:b6:14:67:3d:88:79:03:47:d6:9a:65:14:85:06:
         a9:ce:81:67:53:18:cc:0c:fb:e8:2d:09:4d:34:b1:e2:10:8d:
         52:87:51:30:db:41:ba:00:b8:62:bb:c8:98:6c:c6:5c:c7:81:
         cb:ef:7d:6a:8f:98:8d:16:68:c5:49:c9:1f:21:49:9d:2a:1f:
         b2:1a:6b:4e:1d:2b:cc:e1:79:47:1b:da:53:23:d1:e7:79:8c:
         cd:78:c7:a7:5b:ad:f6:40:15:81:09:58:d7:f9:f0:fb:ad:2f:
         92:df:61:05:6b:36:ad:f0:ec:8b:4a:66:d6:92:06:7c:d7:5d:
         5d:5a:60:2e:44:8b:bd:b3:a1:8c:ef:77:42:83:04:51:56:c0:
         52:cc:fd:c0:d6:29:6b:7d:c4:35:01:80:c1:55:b2:29:58:a1:
         32:57:75:33
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHQr6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4
YzMzY2I3OWY2NWMyZTFhYzg1YWE1MjRmZDg0ZDc0ZThjY2EyYTcwHhcNMjIxMDIx
MTQyODM3WhcNMjQxMDI2MTQyODM3WjAzMTEwLwYDVQQDEyhhMDJlYjdkMjgxZjRk
ZjNhZDM2YmI0YTkzYjdlNWYzOGIzZjk4YzY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2/trqimcATaY1bAcinLBjq3ouWsdD9YbDohDLVM5lEU6Aewz
2u9Zqag2NmP5w537eDQaZ5dYfpUTkr0sLLrhVUVQ+3y71fu2bQx/KijpDXV7WMNa
NElx7Kyhw5cbODJjtu0TPp4Gfx6QqzggDI68Mn6zs9AzCSlqR0k9NkbZiqPhqCh2
L6FvF9cGjQxIvEjX94Dhe0cXscEQNfzzN0sORi1YxKbganC93kOYucFpxIQKmhBY
A/oLEmBfBnxm5HjWkWoMWJQ3JVGKmf1v5OUEa/jtxbkjSyvQlmZi1JkHalyMVvH0
M6bGKIyXsnXhF2YqzUbSj6sjLjZ45jZaNklD6QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCoSDWpXpx6/uHbEqHIDfyqqXdr6MB8GA1UdIwQYMBaAFAfCv4K4sqyYwHmL
sDAfVkkV0zA1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzhjMzNj
Yjc5ZjY1YzJlMWFjODVhYTUyNGZkODRkNzRlOGNjYTJhNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU1OTdjNjYtZjBjYi00YmVjLTk2NzUtZjM0MzVk
YzU1ZDU3L2EwMmViN2QyODFmNGRmM2FkMzZiYjRhOTNiN2U1ZjM4YjNmOThjNjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NTU5N2M2Ni1mMGNiLTRiZWMtOTY3NS1mMzQz
NWRjNTVkNTcvNzhjMzNjYjc5ZjY1YzJlMWFjODVhYTUyNGZkODRkNzRlOGNjYTJh
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC1H/zANBgkqhkiG9w0BAQsFAAOCAQEAoZltjdPEzMRXdvRa
c8jBsSrsfGo8s8UwHXfqpn5+egMcjWbB3E0cKZiL1R6HerHVI018P/T1W2yRivGY
TK4PjUTzKluGbyozJQRFK4lVhs3q28uO8nKlaQaLlgZXPbYUZz2IeQNH1pplFIUG
qc6BZ1MYzAz76C0JTTSx4hCNUodRMNtBugC4YrvImGzGXMeBy+99ao+YjRZoxUnJ
HyFJnSofshprTh0rzOF5RxvaUyPR53mMzXjHp1ut9kAVgQlY1/nw+60vkt9hBWs2
rfDsi0pm1pIGfNddXVpgLkSLvbOhjO93QoMEUVbAUsz9wNYpa33ENQGAwVWyKVih
Mld1Mw==
-----END CERTIFICATE-----