Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c4586de-9d4e-4446-92b1-5f64c717dc4e/1f24d2504d2afe291c53c4b4988b75a990d216e7.roa
File:                     1f24d2504d2afe291c53c4b4988b75a990d216e7.roa (raw, json)
Hash identifier:          8UGwvhdOwPFprb7+WWFRRYXGMRD28Z85pYgXm7BUHO4=
Subject key identifier:   00:28:0D:48:66:DD:B8:88:00:B8:86:34:AF:C9:7E:8B:E1:73:55:1E
Certificate issuer:       /CN=7ea7bd7ef6f4501f774846280928efc8eb14dfe7
Certificate serial:       104BE3
Authority key identifier: 79:7F:74:C5:E9:50:E2:65:C0:6B:25:5F:B8:B4:C0:8A:D8:B0:3B:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ea7bd7ef6f4501f774846280928efc8eb14dfe7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9c4586de-9d4e-4446-92b1-5f64c717dc4e/1f24d2504d2afe291c53c4b4988b75a990d216e7.roa
Signing time:             Mon 18 Jul 2022 16:34:23 +0000
ROA not before:           Mon 18 Jul 2022 03:00:00 +0000
ROA not after:            Thu 18 Jul 2024 03:00:00 +0000
asID:                     266683
IP address blocks:        45.227.196.0/22 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1068003 (0x104be3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea7bd7ef6f4501f774846280928efc8eb14dfe7
        Validity
            Not Before: Jul 18 03:00:00 2022 GMT
            Not After : Jul 18 03:00:00 2024 GMT
        Subject: CN=1f24d2504d2afe291c53c4b4988b75a990d216e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:12:cb:7d:24:0c:a4:4c:fd:50:57:4d:36:79:
                    a1:da:d5:ce:fc:d1:db:d1:b8:77:4b:81:c8:7d:66:
                    ad:d3:00:28:ae:8e:b6:80:af:ab:5a:fe:93:8e:8b:
                    18:de:8d:ea:7c:04:86:25:36:a5:32:2e:57:d6:4e:
                    bc:ce:55:3c:64:70:9a:02:31:bb:9c:e0:2e:80:a9:
                    66:ef:73:7e:02:d8:2f:69:15:51:27:1c:4a:ca:5a:
                    a0:f5:82:21:97:50:64:d1:37:e6:e8:5f:9a:95:46:
                    f7:25:3c:99:36:3b:22:02:35:3d:d3:5b:7c:89:2c:
                    2b:e2:a3:cb:8c:40:08:6e:9f:a1:46:72:97:b6:bf:
                    48:82:f4:de:d0:6a:8a:a2:79:ec:f0:f7:e3:2d:8a:
                    e6:b5:d6:bb:78:83:b5:0f:f1:3a:63:47:98:02:ee:
                    9c:c2:b2:2d:10:ed:b7:2a:60:18:ea:ad:fa:a6:8c:
                    fa:48:b4:45:7f:8a:91:89:71:25:76:50:be:76:22:
                    ad:32:02:4d:ac:fa:98:3c:3b:4a:2b:49:9b:7d:05:
                    6e:d1:1f:be:ff:92:3d:80:e5:5f:68:78:0a:f7:25:
                    b6:d1:fd:f4:08:99:ce:d7:15:65:f4:22:3a:b7:cf:
                    69:08:c4:db:7f:e3:0e:57:a6:64:c4:e5:eb:17:de:
                    2b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:28:0D:48:66:DD:B8:88:00:B8:86:34:AF:C9:7E:8B:E1:73:55:1E
            X509v3 Authority Key Identifier:
                keyid:79:7F:74:C5:E9:50:E2:65:C0:6B:25:5F:B8:B4:C0:8A:D8:B0:3B:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ea7bd7ef6f4501f774846280928efc8eb14dfe7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c4586de-9d4e-4446-92b1-5f64c717dc4e/1f24d2504d2afe291c53c4b4988b75a990d216e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9c4586de-9d4e-4446-92b1-5f64c717dc4e/7ea7bd7ef6f4501f774846280928efc8eb14dfe7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:04:a7:29:46:25:67:4d:5d:d8:6f:f9:9c:bc:bc:40:45:ca:
         15:22:74:ae:d6:44:8e:b1:2f:09:a5:4e:d8:10:f3:19:5e:5c:
         15:25:f0:a3:19:8c:5a:0e:b8:e5:40:38:95:27:51:76:35:ac:
         19:4b:82:de:df:81:38:d9:bd:1b:9a:bc:44:38:01:c6:33:6b:
         a8:41:67:1d:41:5d:11:ce:ab:2f:37:fa:c9:16:0d:a6:ed:fb:
         af:fb:17:2f:45:7f:3e:dd:9e:21:34:7f:95:8d:31:c6:d3:f4:
         47:b0:c5:a4:5a:bd:66:b2:01:e7:ec:b2:1d:d3:da:f8:69:10:
         7d:c1:5a:42:7f:cf:bd:a7:c1:7c:d2:c7:2b:b0:72:5d:7a:06:
         07:67:9b:68:42:6a:46:a2:6f:b1:b3:c2:33:24:e2:af:44:8a:
         5d:c7:9b:05:ce:57:5a:8f:99:8d:85:bb:af:59:12:69:0a:0a:
         b5:8c:3b:b7:d2:8f:80:d9:6d:a6:ef:16:46:cd:4f:02:54:28:
         5a:ea:ff:03:97:4e:78:e9:00:02:5b:ba:84:3b:a7:92:96:de:
         57:dd:95:0c:24:20:16:aa:4c:26:6c:41:6f:b1:a6:1e:fd:8c:
         ec:3a:f3:5b:96:a1:6f:45:d4:c0:df:3d:78:e9:50:0b:42:ae:
         f9:df:25:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 23:12:06 2023 by rpki-client on console-fra.rpki-client.org