Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d9462a8-9f3c-4527-bb46-c1e9346a9feb/4b0817a1d7bf592aa7cbd92d9e88e39aad167bab.roa
File:                     4b0817a1d7bf592aa7cbd92d9e88e39aad167bab.roa (raw, json)
Hash identifier:          zCfveOZkKneGEkS9x7wvGB2+i99Y+T3jowA9vDa9fDM=
Subject key identifier:   4D:81:92:A7:89:1D:7A:19:3A:6B:DB:CB:A2:05:AA:D5:A1:7F:54:82
Certificate issuer:       /CN=cbd22aa435cb28d447ede265adf51bfeaaba86c5
Certificate serial:       15F1A7
Authority key identifier: D5:25:2C:0B:0D:06:46:80:46:17:58:EC:64:B2:28:E5:4E:AC:B7:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbd22aa435cb28d447ede265adf51bfeaaba86c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d9462a8-9f3c-4527-bb46-c1e9346a9feb/4b0817a1d7bf592aa7cbd92d9e88e39aad167bab.roa
Signing time:             Fri 24 Mar 2023 08:31:59 +0000
ROA not before:           Thu 23 Mar 2023 08:31:59 +0000
ROA not after:            Sat 22 Mar 2025 08:31:59 +0000
asID:                     266830
IP address blocks:        45.238.20.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1438119 (0x15f1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd22aa435cb28d447ede265adf51bfeaaba86c5
        Validity
            Not Before: Mar 23 08:31:59 2023 GMT
            Not After : Mar 22 08:31:59 2025 GMT
        Subject: CN=4b0817a1d7bf592aa7cbd92d9e88e39aad167bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:7d:b9:64:67:bd:4c:6b:33:69:18:72:bb:
                    dd:07:da:60:10:d5:95:6d:45:32:3a:5f:5b:81:e5:
                    7f:8d:dd:7e:09:af:f1:4f:4c:80:84:f7:0d:14:17:
                    8d:5a:36:65:1e:67:d2:5a:32:d8:02:e4:c3:e9:e3:
                    fd:51:05:19:14:bb:f6:1c:7d:b1:2c:a2:3d:fa:f1:
                    63:6a:6d:0c:ff:38:81:db:a0:fa:ab:17:5f:9f:a5:
                    ac:dd:15:fb:65:89:8e:83:07:c5:e3:5a:1a:ee:ba:
                    fe:db:67:e2:2e:b1:3f:01:c8:6c:e0:fe:ec:8a:06:
                    ad:d8:1c:34:3d:7b:0e:86:b0:4f:18:87:e9:30:60:
                    2f:1b:53:0f:55:14:16:d5:95:2c:62:ec:12:94:0c:
                    85:0f:09:69:0d:8f:56:0d:7c:8e:1a:21:05:0e:d8:
                    10:24:ff:5e:7d:56:42:a8:f2:f8:3c:77:c7:cc:46:
                    d8:23:3d:19:17:43:73:5d:b5:1f:88:90:df:a5:a4:
                    d8:55:92:09:fc:0d:59:26:51:09:f9:d3:c7:25:98:
                    8a:7b:c6:b4:bb:2a:f0:9e:75:fb:b5:95:a7:a8:ce:
                    b3:e7:4c:97:c5:fb:aa:90:c9:f7:fa:e1:d0:66:c4:
                    8b:8e:4b:52:8f:2c:ff:a2:3f:ee:20:36:9c:19:e8:
                    4b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:81:92:A7:89:1D:7A:19:3A:6B:DB:CB:A2:05:AA:D5:A1:7F:54:82
            X509v3 Authority Key Identifier:
                keyid:D5:25:2C:0B:0D:06:46:80:46:17:58:EC:64:B2:28:E5:4E:AC:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbd22aa435cb28d447ede265adf51bfeaaba86c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d9462a8-9f3c-4527-bb46-c1e9346a9feb/4b0817a1d7bf592aa7cbd92d9e88e39aad167bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d9462a8-9f3c-4527-bb46-c1e9346a9feb/cbd22aa435cb28d447ede265adf51bfeaaba86c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:00:e0:3d:56:81:35:d9:df:f8:e8:88:56:30:7e:a2:cc:61:
         db:fb:4c:3e:3f:2e:48:a1:aa:d9:70:e1:e5:59:a7:59:97:e6:
         40:13:c1:bf:77:29:e9:62:1d:7c:cd:9c:63:30:8b:f1:73:4a:
         c7:6d:36:48:5a:61:c9:39:a3:30:02:a8:45:5a:06:12:59:25:
         40:39:e1:00:31:99:ce:a2:10:8d:aa:81:2f:fa:6b:ba:39:10:
         fa:bb:45:d7:e9:ef:46:94:b7:94:dc:80:df:5c:8d:51:28:b9:
         74:0f:15:7b:b1:c6:4e:49:1e:a4:2c:44:bf:12:62:7b:70:fd:
         b6:6a:c9:8a:59:5d:9a:c7:c0:5e:62:d8:5f:10:14:b3:d3:cc:
         81:82:82:93:ea:ea:c3:ad:28:83:ff:c0:c2:cf:7f:48:88:67:
         ff:7d:27:65:cc:fd:cc:cd:9a:b0:66:b6:61:eb:9f:d6:64:18:
         52:5c:06:32:22:f5:2b:1a:13:48:dd:13:79:c5:18:c5:74:2c:
         61:70:4e:d9:b7:1d:6d:81:e0:e1:3e:9c:c5:63:26:e1:f5:6f:
         58:fa:60:5c:70:cd:d0:e2:c6:2b:e4:56:4d:db:8d:4a:ee:fb:
         d6:76:63:b4:3d:57:b4:4e:5b:cd:b4:c1:78:74:97:6e:2f:60:
         81:b7:bf:6f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFfGnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNi
ZDIyYWE0MzVjYjI4ZDQ0N2VkZTI2NWFkZjUxYmZlYWFiYTg2YzUwHhcNMjMwMzIz
MDgzMTU5WhcNMjUwMzIyMDgzMTU5WjAzMTEwLwYDVQQDEyg0YjA4MTdhMWQ3YmY1
OTJhYTdjYmQ5MmQ5ZTg4ZTM5YWFkMTY3YmFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoWx9uWRnvUxrM2kYcrvdB9pgENWVbUUyOl9bgeV/jd1+Ca/x
T0yAhPcNFBeNWjZlHmfSWjLYAuTD6eP9UQUZFLv2HH2xLKI9+vFjam0M/ziB26D6
qxdfn6Ws3RX7ZYmOgwfF41oa7rr+22fiLrE/Achs4P7sigat2Bw0PXsOhrBPGIfp
MGAvG1MPVRQW1ZUsYuwSlAyFDwlpDY9WDXyOGiEFDtgQJP9efVZCqPL4PHfHzEbY
Iz0ZF0NzXbUfiJDfpaTYVZIJ/A1ZJlEJ+dPHJZiKe8a0uyrwnnX7tZWnqM6z50yX
xfuqkMn3+uHQZsSLjktSjyz/oj/uIDacGehLJQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFE2BkqeJHXoZOmvby6IFqtWhf1SCMB8GA1UdIwQYMBaAFNUlLAsNBkaARhdY
7GSyKOVOrLe7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2JkMjJh
YTQzNWNiMjhkNDQ3ZWRlMjY1YWRmNTFiZmVhYWJhODZjNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQ5NDYyYTgtOWYzYy00NTI3LWJiNDYtYzFlOTM0
NmE5ZmViLzRiMDgxN2ExZDdiZjU5MmFhN2NiZDkyZDllODhlMzlhYWQxNjdiYWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDk0NjJhOC05ZjNjLTQ1MjctYmI0Ni1jMWU5
MzQ2YTlmZWIvY2JkMjJhYTQzNWNiMjhkNDQ3ZWRlMjY1YWRmNTFiZmVhYWJhODZj
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3uFDANBgkqhkiG9w0BAQsFAAOCAQEAoADgPVaBNdnf+OiI
VjB+osxh2/tMPj8uSKGq2XDh5VmnWZfmQBPBv3cp6WIdfM2cYzCL8XNKx202SFph
yTmjMAKoRVoGElklQDnhADGZzqIQjaqBL/prujkQ+rtF1+nvRpS3lNyA31yNUSi5
dA8Ve7HGTkkepCxEvxJie3D9tmrJilldmsfAXmLYXxAUs9PMgYKCk+rqw60og//A
ws9/SIhn/30nZcz9zM2asGa2Yeuf1mQYUlwGMiL1KxoTSN0TecUYxXQsYXBO2bcd
bYHg4T6cxWMm4fVvWPpgXHDN0OLGK+RWTduNSu771nZjtD1XtE5bzbTBeHSXbi9g
gbe/bw==
-----END CERTIFICATE-----