Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/03b0f46e80fecffdf478c7eb1923c03d4bfe5f98.roa
File:                     03b0f46e80fecffdf478c7eb1923c03d4bfe5f98.roa (raw, json)
Hash identifier:          tXNW4WIvyaNYm6gb/35Qy2eO8/PRX6seEJQvhUM30mg=
Subject key identifier:   45:66:8C:40:7D:D3:14:D5:82:A7:36:F9:EE:16:EA:36:E8:00:88:F3
Certificate issuer:       /CN=3abe8205e3875032dfb3042786eec7a637777979
Certificate serial:       17AC58
Authority key identifier: 61:AF:26:30:6F:76:7B:3B:D2:72:BD:1C:6F:1C:27:F9:A7:8A:1D:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3abe8205e3875032dfb3042786eec7a637777979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/03b0f46e80fecffdf478c7eb1923c03d4bfe5f98.roa
Signing time:             Thu 14 Jul 2022 10:47:44 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267831
IP address blocks:        45.173.200.0/22 maxlen: 24
                          2803:8460:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551448 (0x17ac58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3abe8205e3875032dfb3042786eec7a637777979
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=03b0f46e80fecffdf478c7eb1923c03d4bfe5f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:35:5f:a9:f9:09:f0:10:44:8a:7d:6a:31:
                    98:8a:9d:3f:67:23:54:c9:d9:85:2a:ab:84:86:cd:
                    b6:2d:c6:73:ea:37:79:fd:4b:85:e1:28:04:94:ed:
                    9f:71:5d:98:ad:dd:e3:1e:10:25:2a:c7:31:1f:a2:
                    b0:cf:c2:34:3e:74:91:a6:69:c6:13:9e:0b:fe:f9:
                    af:ce:6c:4b:55:aa:dd:8f:19:62:1e:8d:41:d3:39:
                    39:b7:3f:4c:84:ff:f4:f0:7e:64:e7:f7:51:da:87:
                    21:5a:36:d7:cc:c1:f3:10:94:89:fd:ed:39:99:95:
                    1f:4e:87:90:7b:c6:46:45:cb:93:55:77:23:09:14:
                    cf:58:c9:05:de:47:f8:d1:20:ef:7e:c9:d1:76:88:
                    d0:38:ed:ba:29:59:30:dd:a3:67:4f:9a:1b:9a:e1:
                    fa:ed:f0:de:b3:27:82:47:1d:3c:c4:04:35:f2:09:
                    a4:3b:b7:d3:cf:c1:de:6f:94:ce:b5:9f:17:48:e6:
                    87:ab:19:9c:e9:24:47:7a:1a:20:70:61:ff:bc:b8:
                    19:bf:2c:98:a8:80:3d:17:58:aa:4e:2f:d6:52:59:
                    3c:70:38:c7:ca:85:3d:e4:ea:85:6c:a0:84:ee:41:
                    72:f9:cd:65:41:60:ac:50:b5:67:a2:f6:de:9c:cc:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:66:8C:40:7D:D3:14:D5:82:A7:36:F9:EE:16:EA:36:E8:00:88:F3
            X509v3 Authority Key Identifier:
                keyid:61:AF:26:30:6F:76:7B:3B:D2:72:BD:1C:6F:1C:27:F9:A7:8A:1D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3abe8205e3875032dfb3042786eec7a637777979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/03b0f46e80fecffdf478c7eb1923c03d4bfe5f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/3abe8205e3875032dfb3042786eec7a637777979.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.200.0/22
                IPv6:
                  2803:8460:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3b:0d:05:37:43:bc:87:e5:55:98:04:32:b0:58:ac:33:47:57:
         ee:5c:6b:82:74:e2:27:44:39:3d:28:2f:78:c8:70:1b:f1:95:
         be:1d:a2:66:39:45:38:b4:d0:b0:ff:a5:d2:f9:2f:32:6f:a2:
         95:a4:bc:23:2a:5d:e4:a5:d3:f0:0d:42:4e:24:7c:9c:36:dd:
         a4:53:c4:f3:53:fa:85:4e:23:a9:bf:3b:2d:0c:65:59:c7:7b:
         b8:8e:76:fb:73:aa:75:36:38:d9:11:05:01:2a:8e:39:1c:5f:
         52:0d:9c:0b:03:2a:dd:78:bf:03:dc:20:50:c1:76:28:a1:61:
         75:e0:8b:7a:40:50:a6:ad:5b:ca:d3:94:5f:2b:87:da:cc:35:
         77:b5:31:d4:6c:e8:37:fc:d0:56:0a:d7:d5:19:07:fc:4e:ba:
         62:33:08:3a:64:ae:64:5b:11:8b:80:f7:8a:73:fd:a0:17:37:
         e7:0c:2b:ad:d8:be:b6:54:09:b0:27:38:b5:cc:fa:ea:a6:79:
         6d:1b:76:b8:25:35:85:7a:fc:cb:e1:41:d1:b0:0e:26:0e:ec:
         b4:c0:b3:3b:13:f3:1c:c3:8c:56:8a:e9:2b:b1:64:b2:46:82:
         ca:ee:33:4b:2c:33:31:03:88:5b:72:43:a7:e0:7b:99:c2:67:
         48:cf:b8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----