Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/b3bdc584a850e3e68c0bcddf03d8f11c7bf52b9e.roa
File:                     b3bdc584a850e3e68c0bcddf03d8f11c7bf52b9e.roa (raw, json)
Hash identifier:          JGnighe40C8GHL335LNO468yALy+3acLstzsLAvzRUk=
Subject key identifier:   C1:AD:75:CB:D4:4C:CE:0A:24:11:60:E2:D9:B1:9D:08:5D:E4:14:B9
Certificate issuer:       /CN=ae7eed0e816c205684dab13fe261771e26f139b4
Certificate serial:       0696
Authority key identifier: DD:A7:87:F5:53:2D:12:A2:15:6A:EA:61:0C:B1:7E:55:25:33:7C:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae7eed0e816c205684dab13fe261771e26f139b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/b3bdc584a850e3e68c0bcddf03d8f11c7bf52b9e.roa
Signing time:             Sun 05 Mar 2023 17:55:36 +0000
ROA not before:           Sat 04 Mar 2023 17:55:11 +0000
ROA not after:            Wed 05 Mar 2025 17:55:11 +0000
asID:                     265592
IP address blocks:        45.180.8.0/22 maxlen: 24
                          2806:343::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1686 (0x696)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7eed0e816c205684dab13fe261771e26f139b4
        Validity
            Not Before: Mar  4 17:55:11 2023 GMT
            Not After : Mar  5 17:55:11 2025 GMT
        Subject: CN=b3bdc584a850e3e68c0bcddf03d8f11c7bf52b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:be:ad:32:76:46:18:80:42:ec:a8:86:21:d5:
                    94:08:32:73:70:78:2f:c1:70:c7:a8:d3:92:71:ec:
                    8e:0d:1f:fa:c4:f2:a3:e3:d3:ed:2a:9e:e3:40:18:
                    43:5a:97:ec:3d:62:98:7d:e7:fd:6f:19:b0:02:05:
                    b1:fc:4c:bd:17:81:c8:7b:4e:33:1d:4f:77:cc:e4:
                    34:d7:b2:bb:a3:4b:1e:ee:c9:8f:98:a8:2b:c8:68:
                    c5:94:ed:5b:e7:61:9d:f4:5d:7d:f8:e6:8c:2a:ac:
                    d8:44:85:8a:24:02:10:a5:8c:d4:b0:1e:ef:5e:5f:
                    82:6e:fb:9d:70:be:f5:37:cf:59:f5:18:11:16:e4:
                    3e:ac:86:1b:85:e5:f5:66:c0:04:58:3a:eb:47:d1:
                    2b:92:ca:c3:12:12:01:b6:8b:cb:74:6d:0b:57:bb:
                    d2:36:d5:78:bf:a6:cf:31:a0:24:9e:c1:9c:99:74:
                    e9:a7:67:9f:e4:38:43:a5:9f:4c:10:8f:82:1a:c0:
                    46:32:3d:3e:73:76:e5:e0:b7:81:2b:db:85:68:6b:
                    19:09:91:97:77:39:52:dd:ad:ec:8e:c4:19:22:fa:
                    0d:cd:60:8c:af:c6:65:4b:f4:02:48:ca:c2:f9:de:
                    42:fe:85:36:3e:10:07:54:50:2d:83:47:8f:f4:93:
                    4e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AD:75:CB:D4:4C:CE:0A:24:11:60:E2:D9:B1:9D:08:5D:E4:14:B9
            X509v3 Authority Key Identifier:
                keyid:DD:A7:87:F5:53:2D:12:A2:15:6A:EA:61:0C:B1:7E:55:25:33:7C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae7eed0e816c205684dab13fe261771e26f139b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/b3bdc584a850e3e68c0bcddf03d8f11c7bf52b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/ae7eed0e816c205684dab13fe261771e26f139b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.8.0/22
                IPv6:
                  2806:343::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:59:43:90:69:2c:d5:a8:5e:e9:16:4f:0b:97:4b:18:5a:55:
         76:24:f9:ab:65:fb:72:79:4a:51:4a:cd:c5:ec:ec:26:86:6f:
         7b:a4:89:4b:88:8a:4b:ef:7c:a7:53:44:89:00:f7:da:47:19:
         61:3c:ac:67:ee:30:e2:b8:48:cf:67:28:ea:d0:e2:4d:6d:93:
         25:2f:34:2b:21:de:6d:e2:aa:c0:5b:cc:fa:80:7d:28:09:6d:
         80:06:97:ef:62:e9:94:e0:0e:3a:bb:63:5e:df:2e:84:0a:8c:
         f3:27:e7:3b:b0:00:1f:fa:71:9b:cb:b6:48:ae:05:c4:1d:09:
         6c:de:55:28:1b:2c:87:eb:f9:5e:86:2e:b0:f6:ed:9c:30:03:
         93:2a:03:ba:1a:c9:80:ef:b7:e3:de:ca:57:05:bd:bb:56:6e:
         52:80:01:14:c9:ab:e2:ba:a3:1f:d6:df:b7:ca:03:cc:84:31:
         53:3b:5d:01:db:74:18:03:6b:5e:bf:e1:ae:4d:8e:97:30:bb:
         13:63:ae:e3:5c:b9:6d:9a:93:73:75:a9:e6:68:cf:19:1a:55:
         04:27:5b:51:bc:57:0b:df:37:a7:b4:9f:c1:1c:b5:bc:7f:60:
         55:ad:f9:03:96:71:27:30:81:30:7e:15:48:57:f6:30:0d:79:
         45:8d:29:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----